Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/3230322e3138302e35332e302f32342d3234203d3e203338313435.roa
File:                     3230322e3138302e35332e302f32342d3234203d3e203338313435.roa (raw, json)
Hash identifier:          8OKT6xCCYoabd/qkXTL0y0p75e7WhS4ltJa5t4ks0O0=
Subject key identifier:   A6:96:D0:33:4E:BF:47:89:69:C1:E4:5B:EA:5F:A3:81:D9:FC:D6:62
Certificate issuer:       /CN=365454AF0090F9E623861AF2120855412F7447D1
Certificate serial:       1677FE6F68A2DF54BF2CC3BD7A207041B7EBB9E9
Authority key identifier: 36:54:54:AF:00:90:F9:E6:23:86:1A:F2:12:08:55:41:2F:74:47:D1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/365454AF0090F9E623861AF2120855412F7447D1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/3230322e3138302e35332e302f32342d3234203d3e203338313435.roa
Signing time:             Thu 12 Oct 2023 05:00:00 +0000
ROA not before:           Thu 12 Oct 2023 04:55:00 +0000
ROA not after:            Thu 10 Oct 2024 05:00:00 +0000
asID:                     38145
IP address blocks:        202.180.53.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/365454AF0090F9E623861AF2120855412F7447D1.crl
                          rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/365454AF0090F9E623861AF2120855412F7447D1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/365454AF0090F9E623861AF2120855412F7447D1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 12:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:77:fe:6f:68:a2:df:54:bf:2c:c3:bd:7a:20:70:41:b7:eb:b9:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=365454AF0090F9E623861AF2120855412F7447D1
        Validity
            Not Before: Oct 12 04:55:00 2023 GMT
            Not After : Oct 10 05:00:00 2024 GMT
        Subject: CN=A696D0334EBF478969C1E45BEA5FA381D9FCD662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c1:27:44:25:82:5c:a9:61:27:ed:39:11:24:
                    c7:13:85:ca:00:fc:b0:59:38:a6:b2:af:be:0f:74:
                    c3:ee:5d:55:07:bf:b5:05:b2:3a:13:1c:64:97:59:
                    1d:63:a4:47:2e:7b:3c:24:6c:4d:5c:33:74:1c:d1:
                    d9:a7:0c:55:fa:6d:54:84:39:fe:d4:e1:2d:11:89:
                    be:de:ce:95:22:b0:05:fd:42:8e:f6:d6:85:a1:65:
                    7f:c1:fb:96:ff:d2:d5:19:be:fa:49:d4:55:4d:49:
                    6a:19:bf:c3:d0:8a:dd:b3:8c:4e:a9:45:e9:1e:9a:
                    dd:96:ae:5a:a2:e1:f0:04:63:b1:a5:59:3e:77:28:
                    89:a5:5f:6c:59:d8:e3:7a:d9:e8:d4:8c:a7:04:34:
                    46:91:8d:81:68:d7:9c:83:e6:5c:d6:20:52:b3:17:
                    60:32:24:d0:64:f3:08:ef:7a:39:98:5c:8c:46:98:
                    b3:cb:52:ee:f8:4b:c7:9d:48:4f:f5:d3:fd:66:2f:
                    81:27:f3:75:e8:55:66:67:3b:62:6d:f9:a1:fd:aa:
                    7a:fb:4a:98:72:58:76:4c:60:b6:55:5b:85:87:69:
                    35:07:22:15:02:bf:a9:25:1e:35:69:2a:90:2e:be:
                    22:31:dc:08:0b:82:1c:48:a9:ea:aa:5e:f5:d7:af:
                    37:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:96:D0:33:4E:BF:47:89:69:C1:E4:5B:EA:5F:A3:81:D9:FC:D6:62
            X509v3 Authority Key Identifier:
                keyid:36:54:54:AF:00:90:F9:E6:23:86:1A:F2:12:08:55:41:2F:74:47:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/365454AF0090F9E623861AF2120855412F7447D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/365454AF0090F9E623861AF2120855412F7447D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/3230322e3138302e35332e302f32342d3234203d3e203338313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.180.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:06:ca:9b:15:1a:eb:15:21:fb:41:b9:0d:f8:2d:06:bc:95:
         b3:10:6a:82:9b:78:c9:16:8c:a4:ae:21:a4:5e:f4:58:1e:57:
         e1:d1:97:af:c3:6e:42:57:a1:b8:f0:0e:02:e3:99:17:05:e4:
         06:2c:bb:03:b9:4b:e2:34:f6:87:c1:99:6f:07:c1:19:99:c0:
         44:1c:a5:0e:3e:f8:a2:e5:95:52:32:64:c1:fe:e6:de:94:68:
         9d:02:40:1b:50:64:8d:37:7c:73:e3:9c:22:32:a0:34:e5:ba:
         a4:7c:5a:87:24:5b:aa:45:75:b9:df:a5:ec:d0:f4:a1:b5:2c:
         c7:ef:96:19:ab:e8:e3:71:24:fd:89:f5:18:f4:c2:03:76:a1:
         ab:b8:a5:f3:26:0b:ba:e1:ed:68:c2:5d:32:91:38:53:bd:25:
         6d:a0:bf:dc:46:2b:b1:25:14:fc:14:a1:6f:90:51:e4:6d:49:
         c3:b6:9d:11:0a:3d:aa:16:6e:27:7e:01:50:01:4d:ba:45:d7:
         c6:1e:bd:ed:24:e6:07:bb:72:37:01:ad:1e:c1:a3:d4:bf:29:
         2d:44:73:8b:77:f2:e6:db:bd:6e:b2:0d:28:d7:fc:84:3c:9d:
         d3:2c:23:3c:9e:6f:7b:5f:39:6e:ad:5a:e0:7c:bc:ce:ef:98:
         5a:36:7b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 07:23:20 2024 by rpki-client on console-ams.rpki-client.org