Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e32382e302f32342d3234203d3e203138303539.roa
File:                     3132322e3132382e32382e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          sivXRc3d6yC8pKHCaLlrpd85BinwHlzSobhZZGtVlt4=
Subject key identifier:   7B:BA:30:E4:89:63:97:FB:E6:DE:59:1A:E0:16:1A:6C:13:B2:B2:4D
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       6EB67A816D429C1631D1606F602ED2AB819149B2
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e32382e302f32342d3234203d3e203138303539.roa
Signing time:             Wed 22 Nov 2023 10:30:03 +0000
ROA not before:           Wed 22 Nov 2023 10:25:03 +0000
ROA not after:            Wed 20 Nov 2024 10:30:03 +0000
asID:                     18059
IP address blocks:        122.128.28.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 04:41:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:b6:7a:81:6d:42:9c:16:31:d1:60:6f:60:2e:d2:ab:81:91:49:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Nov 22 10:25:03 2023 GMT
            Not After : Nov 20 10:30:03 2024 GMT
        Subject: CN=7BBA30E4896397FBE6DE591AE0161A6C13B2B24D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bc:63:fb:ac:05:b3:b0:09:8b:ee:10:ab:33:
                    6e:80:74:df:a2:a1:40:6c:96:1e:bc:58:06:1d:34:
                    03:0e:99:1e:90:c3:68:aa:cb:53:ee:f6:a3:d1:3e:
                    62:f4:e7:76:9c:9c:7f:4c:f9:0b:a6:2a:92:28:34:
                    aa:1f:aa:67:6d:6f:03:3b:04:b6:d8:f0:15:d6:51:
                    57:78:85:c6:f5:9f:d7:05:9b:83:aa:8d:ed:ed:b1:
                    8a:cf:3c:b6:2f:99:ab:4e:df:59:be:2f:86:60:9a:
                    fb:db:81:62:59:1d:cb:0d:e3:e8:45:48:3f:60:8c:
                    36:6e:e2:d5:7c:e9:53:d8:54:af:47:1a:ff:0d:26:
                    1a:3c:bc:d4:c8:6b:1c:a6:e8:9d:cf:67:db:e1:b5:
                    29:1d:47:0d:fb:ed:60:28:b5:00:94:52:11:9d:87:
                    38:14:1a:94:c2:2c:36:1c:a1:ed:e0:5b:b4:5a:02:
                    8b:91:39:50:62:27:22:f7:e4:30:19:0d:1a:7a:69:
                    b1:eb:e4:6d:df:d4:db:a1:38:40:42:db:c8:c6:d3:
                    f0:0f:6a:3e:ae:ad:b5:ed:0a:c9:c7:11:1e:39:bb:
                    07:b6:62:84:85:a6:98:e5:8b:bf:c3:56:96:39:38:
                    a6:f9:d5:7d:7c:a9:21:da:a8:d8:7e:75:8c:39:58:
                    c4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:BA:30:E4:89:63:97:FB:E6:DE:59:1A:E0:16:1A:6C:13:B2:B2:4D
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e32382e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.128.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:bd:bd:86:00:ff:78:02:17:be:a8:1c:42:a0:b9:c2:5a:92:
         9b:e6:20:38:19:74:47:fc:72:55:f3:e0:56:24:a9:44:43:d3:
         5c:fe:65:eb:53:88:e7:c6:1b:f6:86:01:9f:7d:48:85:c1:05:
         76:d7:47:ff:f3:1f:72:d9:96:7d:aa:52:37:d9:fe:c8:66:60:
         01:6d:2a:f2:a3:9e:fc:73:d9:d7:c8:75:47:01:69:76:50:9e:
         0b:c4:20:4e:7f:74:54:78:9a:39:9d:5b:23:10:c2:59:1b:dc:
         e1:44:ba:9d:4e:0c:da:d6:64:ca:0d:82:bd:f7:9b:92:2d:ce:
         64:16:a4:72:e8:2f:95:84:f8:e9:7b:79:02:93:c6:4b:ac:bd:
         67:5f:c9:f1:00:ed:68:92:db:f5:d3:13:b7:f5:d7:ca:76:71:
         b2:8e:ad:74:58:b6:7f:dd:54:83:e5:ce:25:32:2e:6e:a2:68:
         96:eb:3e:42:db:17:06:04:56:40:65:1e:fc:ce:a7:06:67:2f:
         5d:97:dd:a0:b9:ed:cb:a9:eb:eb:c8:73:d5:23:95:c8:7a:6c:
         d0:27:da:d6:44:17:cc:1b:e4:d2:e3:02:53:bf:12:8b:f6:cc:
         22:5a:a6:8d:bd:35:cc:b8:a9:a0:a9:b9:37:cb:2d:72:e8:cb:
         95:0b:e1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 10:13:54 2024 by rpki-client on console-fra.rpki-client.org