Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/3230322e3138302e35352e302f32342d3234203d3e203338313435.roa
File:                     3230322e3138302e35352e302f32342d3234203d3e203338313435.roa (raw, json)
Hash identifier:          uw7rov6Jmkw88u/yqU2VutRwMIlC6Mp+xNQnLOxxjKI=
Subject key identifier:   09:78:56:E4:37:7E:E2:E1:CA:7D:70:CD:6C:C0:0D:10:A1:9A:F3:2C
Certificate issuer:       /CN=365454AF0090F9E623861AF2120855412F7447D1
Certificate serial:       45DEC615EF45D9270743971B553CD2414023AD0C
Authority key identifier: 36:54:54:AF:00:90:F9:E6:23:86:1A:F2:12:08:55:41:2F:74:47:D1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/365454AF0090F9E623861AF2120855412F7447D1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/3230322e3138302e35352e302f32342d3234203d3e203338313435.roa
Signing time:             Thu 12 Oct 2023 05:00:00 +0000
ROA not before:           Thu 12 Oct 2023 04:55:00 +0000
ROA not after:            Thu 10 Oct 2024 05:00:00 +0000
asID:                     38145
IP address blocks:        202.180.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/365454AF0090F9E623861AF2120855412F7447D1.crl
                          rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/365454AF0090F9E623861AF2120855412F7447D1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/365454AF0090F9E623861AF2120855412F7447D1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 12:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:de:c6:15:ef:45:d9:27:07:43:97:1b:55:3c:d2:41:40:23:ad:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=365454AF0090F9E623861AF2120855412F7447D1
        Validity
            Not Before: Oct 12 04:55:00 2023 GMT
            Not After : Oct 10 05:00:00 2024 GMT
        Subject: CN=097856E4377EE2E1CA7D70CD6CC00D10A19AF32C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d0:37:b4:d7:4f:47:6c:11:9d:2d:77:e6:86:
                    cc:35:34:55:7a:b3:82:9c:a4:ec:49:1b:e4:2a:6a:
                    69:cc:8d:83:d0:ad:f1:6c:aa:a0:48:e6:46:8a:11:
                    a6:c1:ce:24:c5:c5:a5:cb:f1:8f:9a:2f:2b:92:71:
                    65:38:c9:73:2c:ae:d2:7e:05:55:63:08:44:5a:6f:
                    8d:b6:66:17:7c:a5:d4:fd:62:f0:94:5c:22:8d:77:
                    df:ad:00:09:86:1a:67:71:4a:f2:e6:a5:21:48:7d:
                    81:7d:67:27:f9:60:69:8a:1f:7c:2c:6a:93:80:52:
                    7c:e7:b5:b8:95:69:a0:14:12:e4:f1:d9:21:0a:a9:
                    67:3e:a9:21:bb:e0:bf:2a:00:57:c0:5b:31:08:bf:
                    9e:42:3c:e5:fa:0a:49:2b:72:7f:1f:e2:4f:b4:d7:
                    d8:33:a2:be:10:be:d4:a1:f4:9b:01:0f:31:21:cc:
                    8c:dd:ed:26:32:b3:b9:85:dc:1e:5a:64:4f:4b:c2:
                    39:c3:1f:fc:48:0a:b8:9d:20:c1:34:48:8f:7f:81:
                    a2:19:1f:c6:f4:4f:33:4f:01:af:5f:76:ca:db:1b:
                    4b:fe:6e:f7:49:41:56:ef:45:6c:d4:fe:cf:a5:73:
                    3f:28:03:e1:f6:32:73:d3:14:c9:9f:83:9d:fd:4b:
                    f9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:78:56:E4:37:7E:E2:E1:CA:7D:70:CD:6C:C0:0D:10:A1:9A:F3:2C
            X509v3 Authority Key Identifier:
                keyid:36:54:54:AF:00:90:F9:E6:23:86:1A:F2:12:08:55:41:2F:74:47:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/365454AF0090F9E623861AF2120855412F7447D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/365454AF0090F9E623861AF2120855412F7447D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/3230322e3138302e35352e302f32342d3234203d3e203338313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.180.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:52:ab:11:4d:c4:90:3c:6f:f0:28:b4:61:07:64:43:58:f5:
         d8:ba:ee:4b:f7:d5:0e:4f:97:91:be:60:e1:80:04:bd:06:30:
         41:f4:e6:df:48:90:6e:27:3b:13:ea:27:39:bb:54:e2:8b:42:
         a1:28:e4:c4:50:fa:60:75:77:bf:f6:54:f9:43:42:79:7e:f3:
         40:43:06:2b:fa:12:15:65:09:ed:11:ca:26:bd:a5:67:7e:52:
         5e:42:d1:4f:cc:29:27:3e:c1:ef:a5:45:11:6d:37:42:5d:71:
         dd:a9:51:d0:2e:e9:e3:4a:b8:1a:08:ed:e8:58:74:d2:78:85:
         4c:d2:fc:97:9d:b8:66:71:ec:8a:51:f3:84:93:29:f4:cc:1f:
         12:f8:70:e4:c7:ca:6a:cc:fe:82:7f:db:9e:be:9c:db:28:58:
         4e:3d:2f:82:5f:36:cd:72:b1:50:3b:75:6f:54:80:73:86:06:
         6b:04:a7:d5:7c:a3:14:2b:df:5f:9c:60:c0:1a:8e:14:dc:43:
         00:1c:f9:f8:d1:15:b4:64:d2:fd:9e:29:8f:77:f6:1d:6e:a6:
         7e:e5:b7:4b:79:27:ee:4b:e2:3a:1b:df:14:b5:bb:99:3a:87:
         d9:16:f2:94:cd:b3:21:b0:2f:17:6d:4d:0f:9b:d8:12:24:19:
         f1:5e:c0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 07:05:33 2024 by rpki-client on console-fra.rpki-client.org