Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa
File:                     3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa (raw, json)
Hash identifier:          Ppce4Vm64drnslQGpTeuSycmePfRpm7u8qF54zWMba0=
Subject key identifier:   23:0E:DC:70:17:5B:05:43:A9:8A:D7:49:99:A7:EC:A3:9A:5C:D9:6E
Certificate issuer:       /CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F
Certificate serial:       464393A9CCC0FC16542125B49325D53D2C1234AB
Authority key identifier: 8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa
Signing time:             Mon 31 Jul 2023 00:05:28 +0000
ROA not before:           Mon 31 Jul 2023 00:00:28 +0000
ROA not after:            Mon 29 Jul 2024 00:05:28 +0000
asID:                     131745
IP address blocks:        210.247.244.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl
                          rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 15:42:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:43:93:a9:cc:c0:fc:16:54:21:25:b4:93:25:d5:3d:2c:12:34:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F
        Validity
            Not Before: Jul 31 00:00:28 2023 GMT
            Not After : Jul 29 00:05:28 2024 GMT
        Subject: CN=230EDC70175B0543A98AD74999A7ECA39A5CD96E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d5:92:75:82:16:31:b8:60:9c:2b:e7:45:ca:
                    82:e1:24:d4:bb:70:03:1f:51:1d:2a:23:91:1b:a9:
                    c7:81:40:d0:90:41:3f:88:8a:f8:ab:53:99:c5:e2:
                    b2:f0:2b:f1:8c:ac:65:78:b7:82:82:63:93:38:28:
                    b8:e2:50:f8:c0:a7:ad:e2:b0:d0:14:86:48:1e:5c:
                    56:f4:0d:b0:82:d0:db:1f:99:45:0e:62:86:ca:46:
                    6a:48:5a:f6:c0:98:0e:c7:2a:94:ba:5b:68:c8:7a:
                    8f:37:8b:b9:27:4e:bb:91:a5:b3:f0:79:ce:65:c4:
                    f9:3b:4c:09:40:c4:fc:d3:09:6f:dc:53:58:88:ff:
                    f5:7a:56:a7:51:91:75:d2:26:0c:ec:c4:b4:87:4d:
                    af:33:be:bf:11:a8:89:ab:72:2b:ea:35:e6:d3:c6:
                    5b:39:db:68:cf:ce:da:f0:70:ff:24:44:a3:4f:f9:
                    e9:08:09:79:71:00:c3:28:ee:ad:e2:9c:e5:d0:46:
                    8b:af:b4:71:da:80:e0:03:c1:72:1a:26:1a:45:a1:
                    34:47:00:4e:4c:1b:61:d9:f4:fc:70:a2:61:32:f6:
                    45:38:49:6d:ef:2f:6b:ba:c8:ef:5f:f9:50:91:c8:
                    ec:d4:78:5d:19:16:5c:2f:69:0c:71:4d:5a:57:70:
                    1c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:0E:DC:70:17:5B:05:43:A9:8A:D7:49:99:A7:EC:A3:9A:5C:D9:6E
            X509v3 Authority Key Identifier:
                keyid:8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.247.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:1e:84:c3:91:89:a4:67:09:4f:23:0f:ca:b9:e2:d3:25:a1:
         3d:ee:e6:7d:e9:b3:04:4c:14:54:69:f7:c0:18:e3:d0:2e:1f:
         2a:d4:c5:99:7e:f8:5b:8e:7e:54:ee:bf:20:89:5e:26:9b:b4:
         ed:25:71:5d:55:38:73:90:92:de:ea:e0:75:59:fc:4e:e4:10:
         91:98:7f:e8:eb:fb:41:9b:c0:29:34:21:2a:a4:f7:e6:31:62:
         5e:b7:da:e6:e5:fa:9d:2b:3f:33:c8:79:de:4a:7b:c2:c9:ee:
         c1:7d:fc:7e:cb:fe:af:73:00:14:d2:7a:76:3f:0c:03:37:ae:
         fd:6f:3b:12:0d:25:54:c7:e8:fa:49:b9:1e:3f:9c:64:47:b5:
         56:87:06:8a:55:a4:29:0a:bd:5a:fd:4e:16:ea:8d:76:cf:b1:
         9a:04:3a:83:0c:6a:4f:0d:45:80:b4:bb:57:af:b2:78:06:b7:
         a4:27:b0:20:c6:81:58:fb:3c:da:d4:a3:01:c5:9d:df:db:6a:
         3c:1b:87:6e:d5:02:14:20:a4:be:8f:e0:6f:af:77:6c:80:d5:
         9d:42:46:1e:28:70:fd:bc:75:2d:33:a0:5d:75:76:d2:a8:bf:
         47:2d:b6:52:e7:83:03:79:af:15:4b:d0:62:eb:ad:ba:ca:ec:
         59:02:06:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:27:47 2024 by rpki-client on console-fra.rpki-client.org