Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e33302e302f32342d3234203d3e203138303539.roa
File:                     3132322e3132382e33302e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          rFaLUsa/YsJj2m2/JaF2QAbMZoYbQvGYXKNt3L1DAkw=
Subject key identifier:   89:4A:DB:8B:5D:1D:2A:AB:A5:32:24:72:5C:FB:CA:A3:3F:34:CD:A2
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       72622EBF847A7D1563E93C4AC7985FC393F01647
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e33302e302f32342d3234203d3e203138303539.roa
Signing time:             Wed 22 Nov 2023 10:36:00 +0000
ROA not before:           Wed 22 Nov 2023 10:31:00 +0000
ROA not after:            Wed 20 Nov 2024 10:36:00 +0000
asID:                     18059
IP address blocks:        122.128.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 04:41:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:62:2e:bf:84:7a:7d:15:63:e9:3c:4a:c7:98:5f:c3:93:f0:16:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Nov 22 10:31:00 2023 GMT
            Not After : Nov 20 10:36:00 2024 GMT
        Subject: CN=894ADB8B5D1D2AABA53224725CFBCAA33F34CDA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7c:3e:42:df:95:02:a7:ed:75:c7:26:86:8d:
                    2e:0d:3e:f8:08:26:aa:23:5a:69:35:38:87:b5:d9:
                    81:12:43:02:c7:6c:54:90:22:d8:7a:64:3f:c7:37:
                    1e:ac:a8:0b:73:dd:15:84:1d:4e:23:f6:da:6e:92:
                    96:af:c0:bf:4c:22:7d:61:a6:02:58:84:ef:9c:01:
                    20:a9:b1:39:8f:79:b8:83:a8:88:7e:b8:ec:32:35:
                    2f:a3:d0:30:94:b7:34:20:a5:13:64:c6:7b:e6:0c:
                    47:0e:ad:53:7f:18:fd:c0:f7:f7:c7:af:13:21:37:
                    62:46:f0:16:6f:dd:6a:ef:6d:bf:ac:c7:42:bd:0c:
                    e1:c1:f3:5f:d3:d5:4e:24:c6:76:39:03:62:24:e5:
                    44:44:cf:f6:bc:8d:fd:98:6b:f8:b3:b4:51:93:09:
                    50:6a:e5:1b:1b:98:21:d4:f0:41:28:5b:46:54:e9:
                    c8:27:c3:13:5b:f1:de:27:cb:73:61:db:ba:31:72:
                    57:ce:e2:77:ec:88:30:f8:e4:2e:fc:f2:1a:81:be:
                    80:23:a2:dd:6f:03:f5:39:de:9c:f2:8d:2e:92:43:
                    f4:b7:c9:01:e0:31:f4:2b:e1:0c:87:97:16:0f:4c:
                    a3:6f:95:c2:4a:fd:a8:e1:1d:d4:00:8c:c1:f4:ed:
                    10:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:4A:DB:8B:5D:1D:2A:AB:A5:32:24:72:5C:FB:CA:A3:3F:34:CD:A2
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e33302e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.128.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:73:c2:fc:e1:eb:9e:6f:8e:3e:d9:05:a5:72:23:20:a0:94:
         5e:f1:a8:63:81:3a:28:13:fc:75:f6:3d:82:02:76:86:94:e1:
         f1:49:66:ba:ed:b4:d8:0d:e2:47:d0:c6:8f:f8:be:ab:8a:8b:
         bb:22:53:88:22:eb:ae:b3:22:28:80:40:f5:6b:77:87:ea:5a:
         50:51:e1:15:5a:7c:9d:af:9a:66:c1:fe:39:06:50:79:b9:10:
         63:3b:64:67:2d:ae:9d:6a:fe:2a:88:f7:26:bd:c4:13:8e:88:
         35:7d:16:b7:b6:ce:19:0e:07:e6:ca:82:a8:a3:31:0a:d5:f4:
         69:7e:4c:b1:cb:eb:8d:d5:ee:75:60:55:2a:f5:a8:e5:3d:4d:
         54:aa:fb:e5:9a:2d:7d:2d:93:52:ec:86:a8:eb:24:01:b8:34:
         5e:06:36:ad:75:a9:42:57:e9:a3:75:01:11:52:f4:dc:6a:66:
         18:20:c8:ef:bf:f9:e4:2f:3a:28:46:06:98:31:72:cf:6f:cf:
         64:39:61:fe:9b:b3:fe:c1:83:40:88:cc:9e:3a:85:b3:5a:c6:
         46:63:df:e0:80:1e:b5:80:67:14:54:09:bd:c1:7c:b5:b5:c5:
         74:e3:87:9b:49:97:94:8b:a5:6f:4c:01:34:be:5c:73:b4:80:
         7b:d8:4c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 10:13:54 2024 by rpki-client on console-fra.rpki-client.org