Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3132342e3135382e3137362e302f32302d3234203d3e203535363835.roa
File:                     3132342e3135382e3137362e302f32302d3234203d3e203535363835.roa (raw, json)
Hash identifier:          OIslYDsE7cbNj9ngLFKFvRZUw+1VsfV13zpqqJ1jAoQ=
Subject key identifier:   76:DF:FD:B8:90:65:17:C0:BC:A3:84:F6:B7:10:FA:FD:25:83:D0:06
Certificate issuer:       /CN=B6F0131510E62F73E5F29246F9C8F691811A704D
Certificate serial:       342B01F79B3CB8058C9D3566B7907DFA6482278B
Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3132342e3135382e3137362e302f32302d3234203d3e203535363835.roa
Signing time:             Mon 31 Jul 2023 00:13:02 +0000
ROA not before:           Mon 31 Jul 2023 00:08:02 +0000
ROA not after:            Mon 29 Jul 2024 00:13:02 +0000
asID:                     55685
IP address blocks:        124.158.176.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl
                          rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Mar 2024 20:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:2b:01:f7:9b:3c:b8:05:8c:9d:35:66:b7:90:7d:fa:64:82:27:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D
        Validity
            Not Before: Jul 31 00:08:02 2023 GMT
            Not After : Jul 29 00:13:02 2024 GMT
        Subject: CN=76DFFDB8906517C0BCA384F6B710FAFD2583D006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7a:88:97:f7:06:fc:f0:d2:72:48:d3:1b:59:
                    50:6d:51:ff:28:2b:fd:16:c6:0a:4d:4a:f0:e4:8f:
                    45:aa:ef:6c:0b:ca:1b:5b:45:7f:a0:5a:23:a1:ef:
                    13:0f:12:34:af:20:9d:d0:1e:22:a2:ab:46:8b:88:
                    18:3f:db:11:dd:1b:d8:1f:f3:c0:7d:00:39:68:ed:
                    64:bc:5f:0c:31:4b:04:e1:7d:d4:57:96:d2:37:6e:
                    d4:c2:06:a7:ff:f3:17:2a:fe:c4:bb:40:81:87:9c:
                    75:d3:61:aa:cd:96:16:45:58:94:c0:2d:39:2d:25:
                    4c:c3:18:13:6a:53:03:41:3c:35:54:0e:b8:48:5d:
                    f3:5a:12:55:93:c6:46:e6:8f:0b:9c:3c:72:9f:68:
                    61:a3:f8:3a:25:40:2c:d6:e2:a8:6c:4d:c5:12:e8:
                    05:80:0c:e8:b0:0a:e1:a5:a5:43:b8:c9:e3:23:20:
                    f1:c1:a7:59:3e:ca:8d:0b:a3:3e:ce:70:14:dd:8c:
                    72:19:cd:1c:1c:4a:17:c8:fc:6b:ba:15:1d:d6:5d:
                    bd:0b:93:c5:9c:f0:98:37:af:d2:b8:91:77:8a:5f:
                    a4:36:f0:41:a5:0c:c0:82:5b:82:85:32:3e:7f:bd:
                    5b:be:14:47:a8:09:ed:77:66:f6:d2:ca:10:cb:60:
                    88:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:DF:FD:B8:90:65:17:C0:BC:A3:84:F6:B7:10:FA:FD:25:83:D0:06
            X509v3 Authority Key Identifier:
                keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3132342e3135382e3137362e302f32302d3234203d3e203535363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.158.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         49:f0:24:28:de:95:85:35:b6:b9:91:e7:d1:1d:3b:58:41:38:
         ef:2c:03:45:ba:a4:02:00:27:fc:dd:eb:05:15:2d:81:75:07:
         ce:ca:c8:b1:30:c1:95:aa:e6:0f:fd:d2:47:00:60:09:28:79:
         59:a9:ba:e4:12:2b:6b:5a:25:7b:80:80:df:2c:7d:77:f6:eb:
         b6:0d:78:8d:d5:d5:7a:2e:f7:21:6f:c5:b7:78:18:b4:dd:2a:
         72:5c:dc:1e:a8:51:a9:f6:29:60:df:98:5e:b5:aa:19:21:98:
         38:fb:5f:eb:e5:ad:5c:56:a2:28:d6:0a:5a:d3:9d:a6:bc:76:
         5a:20:b1:ca:70:b3:1c:16:5d:7a:9d:42:e9:4e:4e:d6:f2:84:
         15:9e:31:83:90:4b:62:a8:79:06:5d:ab:e3:7a:81:f7:89:98:
         7e:88:8d:d9:4b:6e:1b:47:d1:4d:f6:20:b3:6d:1d:f7:c0:0e:
         db:87:43:2a:32:d1:1f:1b:2a:6a:04:89:2f:f8:2f:31:58:bb:
         85:38:6a:37:f8:c2:e7:1f:37:c5:12:43:8c:37:00:57:c3:19:
         28:a0:bf:d2:93:54:b4:64:7c:a0:76:c4:96:d7:5a:d5:52:4f:
         a4:d2:e7:8b:57:dd:d6:a4:13:a3:af:b7:1d:7f:fd:52:91:18:
         3d:50:d9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 18:48:30 2024 by rpki-client on console-fra.rpki-client.org