Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/3230322e3138302e34392e302f32342d3234203d3e203338313435.roa
File:                     3230322e3138302e34392e302f32342d3234203d3e203338313435.roa (raw, json)
Hash identifier:          4kuSSE/TYnXZdC9kvnuJZJgWrEoFLHbGzA39jfbjYM0=
Subject key identifier:   2C:69:8B:27:B0:D5:9C:0A:80:4C:2E:D0:47:07:9A:D6:90:E6:C8:A7
Certificate issuer:       /CN=365454AF0090F9E623861AF2120855412F7447D1
Certificate serial:       7EBA3C8EB586830176EE591065F85BF0696E81B5
Authority key identifier: 36:54:54:AF:00:90:F9:E6:23:86:1A:F2:12:08:55:41:2F:74:47:D1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/365454AF0090F9E623861AF2120855412F7447D1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/3230322e3138302e34392e302f32342d3234203d3e203338313435.roa
Signing time:             Thu 12 Oct 2023 05:00:00 +0000
ROA not before:           Thu 12 Oct 2023 04:55:00 +0000
ROA not after:            Thu 10 Oct 2024 05:00:00 +0000
asID:                     38145
IP address blocks:        202.180.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/365454AF0090F9E623861AF2120855412F7447D1.crl
                          rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/365454AF0090F9E623861AF2120855412F7447D1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/365454AF0090F9E623861AF2120855412F7447D1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 12:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ba:3c:8e:b5:86:83:01:76:ee:59:10:65:f8:5b:f0:69:6e:81:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=365454AF0090F9E623861AF2120855412F7447D1
        Validity
            Not Before: Oct 12 04:55:00 2023 GMT
            Not After : Oct 10 05:00:00 2024 GMT
        Subject: CN=2C698B27B0D59C0A804C2ED047079AD690E6C8A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4f:ae:e5:cd:05:87:1d:b6:f2:f3:61:51:36:
                    e0:15:d9:75:d6:c4:cc:b8:a8:fc:0e:c3:fd:e4:b1:
                    24:71:21:62:f1:2a:47:84:cd:53:9b:44:75:be:b9:
                    d0:49:86:8c:57:b4:fe:8f:2a:42:3d:42:a4:31:2c:
                    94:38:ba:06:75:38:e0:c2:be:b4:25:3c:22:9f:60:
                    8c:e7:2d:90:e1:d7:63:6e:61:c9:65:67:67:3f:54:
                    2a:c4:5b:09:f3:2f:7b:03:8b:b9:69:27:26:21:a5:
                    b1:32:cf:f0:83:e6:e7:12:23:8a:72:44:0e:c1:ab:
                    c2:3a:5f:8a:a9:b7:4d:30:56:d0:76:35:a1:72:6d:
                    b3:52:ad:15:6b:c6:4d:97:18:fb:5b:46:2d:9d:ec:
                    25:be:c7:56:8e:60:6f:21:ea:71:d0:b7:53:06:0d:
                    1d:e4:88:a3:1d:c6:8b:c3:0b:1c:11:70:58:ad:47:
                    5b:77:6b:98:3e:1e:00:2b:44:9e:92:c1:ea:eb:dc:
                    79:cd:8d:75:86:c6:9e:39:a3:bd:ee:0e:6d:cb:54:
                    12:33:63:b4:5e:29:8f:50:a7:03:fb:15:ce:57:5f:
                    24:f3:ec:50:3e:3b:75:c9:e2:21:87:09:28:02:3c:
                    95:ba:a7:5c:00:dc:93:e7:48:13:c8:af:49:44:c6:
                    33:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:69:8B:27:B0:D5:9C:0A:80:4C:2E:D0:47:07:9A:D6:90:E6:C8:A7
            X509v3 Authority Key Identifier:
                keyid:36:54:54:AF:00:90:F9:E6:23:86:1A:F2:12:08:55:41:2F:74:47:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/365454AF0090F9E623861AF2120855412F7447D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/365454AF0090F9E623861AF2120855412F7447D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/3230322e3138302e34392e302f32342d3234203d3e203338313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.180.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:8c:e5:2d:6e:ab:95:89:d6:05:50:92:37:45:fd:05:8e:a1:
         64:d7:e7:1e:20:ec:be:aa:b2:43:a7:85:e1:6f:18:a8:73:45:
         3c:f2:1b:47:92:9f:56:72:51:74:0f:5f:c5:29:64:05:bf:39:
         6b:a5:88:0c:94:0e:b7:16:30:86:f6:33:70:81:07:a7:a0:73:
         02:42:5f:ee:8c:8d:66:f0:0c:a3:7b:e2:c2:0f:dd:b9:86:50:
         c8:d9:e3:c9:97:f8:82:d4:29:77:75:06:55:a5:db:3a:6e:34:
         73:91:7a:05:11:2d:0e:24:69:4c:13:0b:51:b2:f7:1c:ec:23:
         cc:6f:99:b9:59:37:46:01:e9:6e:e6:cb:7c:f3:3a:88:89:5e:
         70:ed:b4:b7:ac:7d:19:11:ce:12:cc:e9:40:5e:2d:78:6c:e4:
         21:f3:2d:f1:28:47:41:bc:7b:38:57:19:5c:1c:f6:7d:ca:c4:
         bf:fd:83:39:af:68:48:0f:c8:e5:cd:0d:c3:cd:a8:70:45:b1:
         c1:b6:22:29:90:9c:20:50:79:7b:ba:d2:82:29:68:c0:de:27:
         2e:27:ac:df:0a:00:ac:9a:79:cf:19:5b:07:39:09:e4:83:bd:
         dd:54:35:50:98:ab:34:4f:99:af:c1:45:88:2b:3e:0a:27:54:
         89:6c:b8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 07:05:33 2024 by rpki-client on console-fra.rpki-client.org