Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e32352e302f32342d3234203d3e203138303539.roa
File:                     3132322e3132382e32352e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          x7KE8kWSTyGan0hOzoJAQL4O7g/puVI1fJIm9z/a8tY=
Subject key identifier:   BD:83:47:18:9E:FF:76:85:4A:7B:CB:6E:5A:10:6E:7C:62:6B:06:C4
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       3186A04267A4F58559392D772F0BDED32B0BDC07
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e32352e302f32342d3234203d3e203138303539.roa
Signing time:             Wed 22 Nov 2023 10:29:15 +0000
ROA not before:           Wed 22 Nov 2023 10:24:15 +0000
ROA not after:            Wed 20 Nov 2024 10:29:15 +0000
asID:                     18059
IP address blocks:        122.128.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 04:41:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:86:a0:42:67:a4:f5:85:59:39:2d:77:2f:0b:de:d3:2b:0b:dc:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Nov 22 10:24:15 2023 GMT
            Not After : Nov 20 10:29:15 2024 GMT
        Subject: CN=BD8347189EFF76854A7BCB6E5A106E7C626B06C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ab:ce:4e:3c:cd:c8:73:a8:01:c6:5e:f8:a2:
                    5d:df:4b:16:a5:db:fa:c3:27:e5:b3:1c:4c:22:97:
                    45:90:f4:46:e1:5b:9c:6f:63:ce:e8:36:67:ad:da:
                    d0:24:22:89:ac:a7:85:70:cf:2c:d0:4e:9d:3f:1f:
                    e0:7c:cf:06:21:05:1f:92:f2:c8:23:b8:c9:f3:06:
                    67:fb:12:ff:65:ed:cf:7b:3c:3b:47:49:a6:f3:dc:
                    3d:70:1b:9c:1f:1e:52:9e:ad:71:fc:6d:30:04:3a:
                    42:e7:e9:56:85:29:7d:e0:90:b2:cc:b6:6a:b3:4d:
                    e5:20:42:32:a7:a5:41:3b:d3:38:4f:d7:52:b5:2f:
                    ec:60:32:60:c3:0b:ba:1c:c5:f4:72:c7:5e:0c:56:
                    8d:5d:3d:0c:9e:c4:db:03:c5:78:13:cd:d9:10:22:
                    e9:78:8a:8f:30:1c:4b:cc:38:fa:4d:9c:c2:72:3a:
                    b8:59:94:5a:96:8f:f4:e3:5e:42:98:ed:33:b3:89:
                    de:58:ae:1a:b7:8b:45:37:ca:17:f1:c5:07:64:cd:
                    48:0c:82:98:2d:e9:02:58:3c:ab:09:71:eb:0f:a3:
                    cd:d0:e7:59:0c:80:ea:f7:6c:6e:0f:ef:62:1f:37:
                    13:2b:22:aa:62:f2:41:c6:45:4d:4d:23:86:91:ca:
                    4e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:83:47:18:9E:FF:76:85:4A:7B:CB:6E:5A:10:6E:7C:62:6B:06:C4
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e32352e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.128.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:09:3b:03:77:07:7d:b0:4d:e5:a2:f5:cf:41:d8:6d:30:50:
         1e:df:b8:01:79:80:d5:f6:57:91:db:f1:7e:12:fc:e8:d9:cf:
         06:1d:28:95:a2:72:67:69:16:4c:a9:ff:90:47:55:4b:31:4c:
         b7:0e:a8:c1:82:76:d7:66:58:74:9d:f0:cf:6e:78:94:b8:ea:
         8d:92:c5:9c:73:4b:38:0b:20:b3:a1:1b:1b:cb:e1:02:53:b0:
         a3:b5:82:ab:15:aa:57:f6:d3:87:d6:6d:0e:da:b4:7d:ad:4f:
         59:f4:b7:63:64:1a:d6:18:f1:98:7a:c1:ad:c0:51:89:d7:ad:
         52:50:cd:7f:cb:34:6a:03:aa:e5:a0:2b:e7:40:c4:0d:5e:c7:
         a3:0e:58:ca:a9:1d:c0:bb:05:64:c5:70:15:be:17:96:c2:c8:
         ed:6d:5f:21:32:98:09:56:06:2e:b8:89:b3:6d:f2:37:13:9f:
         aa:4c:4c:2b:76:64:bc:4b:93:c9:68:77:27:98:27:81:de:a4:
         19:bf:61:95:06:5f:5f:bf:b8:9a:48:36:72:ec:d1:07:2b:d3:
         28:11:63:e3:c0:04:ab:80:c0:14:87:de:b5:72:9d:a8:e1:ea:
         a6:df:cd:9d:5b:fc:6c:63:23:3a:b3:36:63:49:dd:a7:0a:58:
         8b:5f:39:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 10:13:54 2024 by rpki-client on console-fra.rpki-client.org