Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/34332e3233302e3132382e302f32322d3234203d3e203233363739.roa
File:                     34332e3233302e3132382e302f32322d3234203d3e203233363739.roa (raw, json)
Hash identifier:          iVgjD5E8sGhROpxGguldzCeUgXu88Z9qqtEYNLbn7CI=
Subject key identifier:   E4:CE:2E:04:C5:D8:D3:E0:8B:F6:05:0E:9A:9B:23:D4:42:A5:65:F7
Certificate issuer:       /CN=084550E9619FF5ABD20864D9A6383053B59BF91E
Certificate serial:       7F55983CD0670340861E8F30B9055B87C8ACF902
Authority key identifier: 08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/34332e3233302e3132382e302f32322d3234203d3e203233363739.roa
Signing time:             Tue 11 Jul 2023 03:18:03 +0000
ROA not before:           Tue 11 Jul 2023 03:13:03 +0000
ROA not after:            Tue 09 Jul 2024 03:18:03 +0000
asID:                     23679
IP address blocks:        43.230.128.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl
                          rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:55:98:3c:d0:67:03:40:86:1e:8f:30:b9:05:5b:87:c8:ac:f9:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084550E9619FF5ABD20864D9A6383053B59BF91E
        Validity
            Not Before: Jul 11 03:13:03 2023 GMT
            Not After : Jul  9 03:18:03 2024 GMT
        Subject: CN=E4CE2E04C5D8D3E08BF6050E9A9B23D442A565F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1e:b1:ba:aa:28:bd:21:1b:09:1c:81:f9:3f:
                    a3:4e:37:06:da:ee:a6:a6:75:5b:25:35:e6:bf:de:
                    76:1f:b7:f3:c8:ab:d7:a7:cd:91:be:be:d3:81:e3:
                    9b:ad:fa:1a:2f:31:b7:74:1a:e2:9f:88:22:c4:73:
                    42:d9:b1:cc:e3:1f:07:5f:61:f6:f0:42:ef:f4:25:
                    97:b3:d7:88:00:78:a5:77:be:a9:dd:ce:92:35:a8:
                    ff:f2:71:77:07:f9:c5:d7:31:d8:b4:0a:6f:df:2a:
                    7b:fe:d4:04:fd:9e:49:49:62:07:cd:a5:42:b0:c7:
                    65:02:4a:3e:a4:18:80:3a:01:ab:a0:e1:a9:ff:ce:
                    d1:d9:8a:bd:14:ff:99:ff:6b:c3:43:26:be:54:12:
                    9a:b6:91:42:cc:aa:53:db:ef:f7:a0:da:89:8d:24:
                    ea:0a:4e:7c:5c:aa:91:d4:e1:b1:b9:af:84:65:de:
                    2d:2a:11:be:de:8f:22:58:7d:67:4c:f3:59:8a:6c:
                    d7:ce:46:62:71:7e:3e:8f:8c:28:b5:13:d4:cc:f9:
                    29:ea:97:a6:81:04:0d:14:13:47:75:98:44:c3:99:
                    e6:f2:11:92:22:5a:bb:44:79:7f:1f:3a:da:b7:2d:
                    c1:d5:c8:6d:6f:de:3e:7f:2c:35:3b:3f:2b:0f:64:
                    3d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:CE:2E:04:C5:D8:D3:E0:8B:F6:05:0E:9A:9B:23:D4:42:A5:65:F7
            X509v3 Authority Key Identifier:
                keyid:08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/34332e3233302e3132382e302f32322d3234203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.230.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:6c:74:f9:08:da:85:ce:c6:89:ba:21:06:30:03:6b:57:95:
         68:63:52:d6:dd:52:5b:df:3b:f6:86:98:e5:03:43:2d:40:eb:
         f4:8f:73:91:8c:27:c1:ea:68:db:f9:97:f8:b2:d8:41:a2:80:
         87:c9:ba:c6:dc:2c:72:81:76:20:00:d0:a3:e3:2f:bc:15:bb:
         80:9b:27:dc:ba:0a:f3:02:fc:7f:96:85:47:e8:7d:ec:35:8d:
         a2:be:1b:ba:7c:24:ac:3e:a4:e7:8d:9d:77:b5:79:bc:0a:0f:
         2d:8d:24:8c:e3:fa:65:fa:77:8f:45:d0:b1:63:0e:e9:f0:9d:
         b5:bd:10:fa:e9:5b:3a:16:a4:f2:d3:98:29:84:ed:42:3d:ce:
         94:c1:1f:ce:12:80:2e:0b:9f:ea:19:d0:73:02:6a:da:2c:7e:
         52:40:62:dc:1c:8c:3a:90:e9:09:9e:df:83:8e:01:91:37:d4:
         3c:a2:f7:59:47:df:7d:76:9a:81:4b:8f:2d:fa:68:65:1d:09:
         f7:f4:3f:1f:75:9d:a1:2b:7e:86:85:75:51:6b:f6:ae:9d:96:
         2a:27:a8:5d:a3:2b:d7:db:f8:c6:aa:bf:78:aa:ba:aa:f1:84:
         b6:e8:28:3e:c9:64:a8:81:5c:f4:8a:bb:b5:5d:b1:77:56:e1:
         1f:2e:16:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:34:29 2024 by rpki-client on console-fra.rpki-client.org