Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e32342e302f32342d3234203d3e203138303539.roa
File:                     3132322e3132382e32342e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          017DJuyF4n0XUfymq9ivyBkBh/mmwK4aPH/FUYk11AE=
Subject key identifier:   C9:D8:49:78:8E:BA:6B:BF:C8:63:DB:C4:FD:74:3B:28:F0:DF:03:8B
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       4A1714EBEEEF89C154A2E53A073102B157639958
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e32342e302f32342d3234203d3e203138303539.roa
Signing time:             Wed 22 Nov 2023 10:28:46 +0000
ROA not before:           Wed 22 Nov 2023 10:23:46 +0000
ROA not after:            Wed 20 Nov 2024 10:28:46 +0000
asID:                     18059
IP address blocks:        122.128.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Apr 2024 21:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:17:14:eb:ee:ef:89:c1:54:a2:e5:3a:07:31:02:b1:57:63:99:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Nov 22 10:23:46 2023 GMT
            Not After : Nov 20 10:28:46 2024 GMT
        Subject: CN=C9D849788EBA6BBFC863DBC4FD743B28F0DF038B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c8:9f:8e:29:11:1e:9e:ea:f7:6e:09:5d:68:
                    bd:db:10:3d:7c:85:94:5b:ca:a6:90:33:63:b9:74:
                    e9:96:1a:c4:65:9a:82:d2:06:c0:12:75:2f:de:0e:
                    a9:5c:c1:42:f1:2b:4f:f8:af:f6:58:7f:0e:9c:bf:
                    d1:02:96:a1:0c:bf:6e:83:6a:6d:fc:f0:4d:4f:68:
                    8d:43:c8:9d:0a:1c:f4:7f:e7:3e:a3:01:5e:92:33:
                    18:48:9f:7c:b6:90:01:e3:20:98:db:3b:f4:47:09:
                    64:35:6a:85:dd:01:07:a7:13:0c:a4:3d:58:cf:eb:
                    e0:5e:d8:67:23:63:69:22:bc:f1:f5:43:69:ae:f8:
                    23:df:f4:b4:4c:84:98:69:91:3e:6a:8d:fc:c3:aa:
                    4b:f1:44:db:1d:ab:89:93:62:f2:56:7a:41:3e:d9:
                    7e:37:e3:df:23:6f:96:ea:97:3f:31:36:a5:2e:b4:
                    76:88:7c:0a:f6:0d:73:50:ca:41:4d:07:a5:a6:3b:
                    64:58:97:50:31:0f:af:ea:3e:32:f7:e2:79:27:70:
                    68:23:a7:54:cf:0b:65:56:da:fb:d9:73:23:ff:80:
                    87:4b:23:e5:7c:3a:a6:84:fd:b5:e6:78:8e:0d:aa:
                    05:31:b0:ca:14:16:b3:d9:85:55:e1:2f:d8:00:72:
                    71:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:D8:49:78:8E:BA:6B:BF:C8:63:DB:C4:FD:74:3B:28:F0:DF:03:8B
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e32342e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.128.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:d3:1c:01:f7:7c:07:44:27:17:17:df:7c:d2:d3:a2:b4:26:
         90:29:4f:82:a6:66:9c:20:bd:3a:1d:a2:b9:6c:f4:4c:e4:0e:
         3e:8d:cd:42:2e:68:5e:99:8b:ad:a7:8b:48:f0:3e:b3:83:85:
         c2:33:9c:e8:26:15:ca:07:17:ea:8b:45:35:4a:60:42:ce:2d:
         f6:76:92:73:f3:45:e8:2e:aa:93:08:fa:dc:46:86:48:d3:43:
         0f:ed:9c:9b:f7:e5:06:a4:3b:2a:96:8a:6d:66:96:10:8e:a9:
         b6:1f:a6:43:b4:ab:15:c6:55:3e:d0:89:36:1d:48:06:02:3d:
         2e:c6:7a:7c:20:55:e3:36:08:f5:b5:ef:c1:03:a8:a9:f1:14:
         e9:78:92:6e:6c:34:ba:8b:24:41:38:80:09:15:fa:07:50:21:
         ca:fe:9f:14:8e:4d:d5:f8:0c:40:82:07:36:e9:62:3e:7d:d6:
         35:c9:5b:bc:a5:dd:ff:13:9d:a6:c7:e7:5e:1c:c7:19:a9:e5:
         6b:a2:a0:2d:a5:71:c2:f6:a7:04:30:f8:93:f0:95:8a:3f:81:
         5b:38:6d:5f:34:0c:a8:e6:3d:2c:b8:52:07:3f:55:24:8a:a7:
         24:81:ce:0a:cd:27:ae:ea:5a:45:0f:d4:39:2d:1f:46:c0:16:
         67:13:69:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 15:44:29 2024 by rpki-client on console-fra.rpki-client.org