Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3235312e302f32342d3234203d3e20313331373435.roa
File:                     3231302e3234372e3235312e302f32342d3234203d3e20313331373435.roa (raw, json)
Hash identifier:          BrjRE8H7YFQPvDuh44o7X1R/3YCQrNGnZgPrzzB7jrA=
Subject key identifier:   15:00:E5:4B:24:EE:EB:2D:A8:1E:5A:6A:44:CA:BB:13:73:1D:22:4E
Certificate issuer:       /CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F
Certificate serial:       3BB97F808B87662BC688957A8BC21798CF21AA88
Authority key identifier: 8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3235312e302f32342d3234203d3e20313331373435.roa
Signing time:             Mon 31 Jul 2023 00:05:28 +0000
ROA not before:           Mon 31 Jul 2023 00:00:28 +0000
ROA not after:            Mon 29 Jul 2024 00:05:28 +0000
asID:                     131745
IP address blocks:        210.247.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl
                          rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 15:42:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:b9:7f:80:8b:87:66:2b:c6:88:95:7a:8b:c2:17:98:cf:21:aa:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F
        Validity
            Not Before: Jul 31 00:00:28 2023 GMT
            Not After : Jul 29 00:05:28 2024 GMT
        Subject: CN=1500E54B24EEEB2DA81E5A6A44CABB13731D224E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:71:25:95:53:7b:77:f1:23:08:4d:23:05:7c:
                    0c:b5:75:69:3b:43:d0:d8:76:14:88:35:27:7e:01:
                    11:87:f3:48:14:ed:f1:e5:1f:4b:2d:6f:33:3e:8f:
                    9f:a5:30:10:8b:f3:ae:15:c8:0a:21:68:85:66:5d:
                    a5:ac:92:c9:c5:b2:95:87:b9:da:ec:f1:e6:39:7e:
                    dc:69:c8:32:5d:58:81:3a:9c:ba:32:7e:68:6e:91:
                    4a:e1:2c:fb:56:e7:d1:78:35:64:3f:01:1f:ab:09:
                    80:70:74:24:96:c7:7a:86:81:32:f9:42:cc:17:bc:
                    41:8a:db:6b:d7:39:23:fe:b0:2a:ce:26:79:92:6d:
                    6e:0a:10:25:50:09:34:51:21:70:c4:cf:b7:9f:0a:
                    2d:04:9f:39:63:74:06:13:0c:f7:7e:34:6f:a5:49:
                    42:65:4b:8d:0c:37:e5:c1:6f:71:70:41:8c:55:02:
                    86:3f:6d:0d:4d:0f:50:c2:c1:ae:d5:42:f7:8a:97:
                    d7:48:79:52:3d:b1:ba:0a:b0:52:d6:65:89:5b:44:
                    ba:f6:47:69:f4:b1:48:86:d5:30:d6:d1:98:14:e3:
                    66:d0:46:c9:43:cf:84:8f:38:ad:26:d8:71:f2:ff:
                    bf:e5:9a:1f:39:2c:11:b5:da:5a:bd:19:6f:c2:a1:
                    b7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:00:E5:4B:24:EE:EB:2D:A8:1E:5A:6A:44:CA:BB:13:73:1D:22:4E
            X509v3 Authority Key Identifier:
                keyid:8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3235312e302f32342d3234203d3e20313331373435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.247.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:31:14:b5:40:ab:64:74:0b:d6:a4:3a:07:6f:05:da:c7:99:
         01:6e:13:ae:0a:31:d6:05:9b:77:72:d1:46:97:dc:88:b0:fe:
         ba:ba:97:03:b0:b6:bf:8e:5f:77:87:ae:89:35:bf:61:83:fd:
         af:6a:bb:15:32:4c:71:87:d0:b0:e4:50:68:12:da:85:1c:b6:
         fd:bd:95:6a:c5:7d:0b:31:34:19:b2:36:9d:35:de:2a:28:ff:
         ed:e8:63:9c:30:15:87:f2:58:a0:da:80:f0:f0:2e:62:39:a3:
         88:2f:83:a6:f5:d3:74:6a:a2:84:23:ee:8c:11:cc:d7:ef:ba:
         78:80:c3:9c:ac:2b:b2:4e:00:aa:30:f3:ea:b9:59:c2:e1:06:
         9b:64:90:d4:52:cb:8e:5d:40:33:d7:d7:a8:3d:43:ec:8f:f8:
         ec:ad:b1:37:07:c4:64:7e:25:c2:e7:af:69:7e:ed:79:08:06:
         27:79:0c:03:ef:e6:ce:81:fe:5b:7c:61:81:bc:7a:1f:30:59:
         f0:b6:ba:74:0b:e8:14:93:18:53:5e:9f:b1:81:96:59:30:0a:
         34:79:db:a6:07:69:fb:62:f6:7c:5c:5d:97:93:a0:5c:87:c6:
         4b:d0:13:68:e5:19:9e:fb:34:44:aa:f9:5f:47:52:8f:39:e7:
         20:f1:b5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:36:12 2024 by rpki-client on console-ams.rpki-client.org