Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3136302e302f32342d3234203d3e203138303539.roa
File:                     3230322e34332e3136302e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          RdVEHL83JIYZSfHu6MCeA4rCNbTY1Ae6mW67piCUOnY=
Subject key identifier:   F5:4F:CB:75:5E:36:DB:1E:2F:F1:B5:C4:CB:87:7F:56:54:6F:8E:82
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       31D5ECE621B909D2B6622D01BA550DD761AD833B
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3136302e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 24 Nov 2023 03:08:33 +0000
ROA not before:           Fri 24 Nov 2023 03:03:33 +0000
ROA not after:            Fri 22 Nov 2024 03:08:33 +0000
asID:                     18059
IP address blocks:        202.43.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 04:41:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d5:ec:e6:21:b9:09:d2:b6:62:2d:01:ba:55:0d:d7:61:ad:83:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Nov 24 03:03:33 2023 GMT
            Not After : Nov 22 03:08:33 2024 GMT
        Subject: CN=F54FCB755E36DB1E2FF1B5C4CB877F56546F8E82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0b:a1:fa:ee:bd:32:47:6e:70:bf:36:2c:fe:
                    79:75:7c:aa:c5:97:9d:ca:9e:53:09:ce:15:af:c4:
                    ea:5d:eb:05:2a:4c:f4:c8:54:eb:d7:92:c4:14:ce:
                    0e:5a:ea:a8:7f:51:c9:bf:eb:5e:8b:a5:a5:f2:ea:
                    88:c2:5d:53:ba:f6:c9:42:3e:b5:34:61:d4:31:35:
                    7d:c1:4e:a7:97:08:14:11:01:cd:06:d0:0e:3b:85:
                    28:2a:d1:a0:c2:e9:18:9f:4a:f5:bb:86:50:ef:04:
                    77:33:fe:3b:cb:b4:c5:bc:79:8b:1c:15:66:7b:9f:
                    d6:68:4c:28:47:31:df:82:ba:a8:b6:a3:30:31:03:
                    37:0e:90:8c:46:af:56:5c:b5:22:c1:bf:ad:65:ec:
                    c6:97:7b:e3:73:bf:d4:9f:e3:db:3b:a3:35:8d:13:
                    11:00:c8:7a:47:2a:0d:d4:38:84:21:08:f9:07:cf:
                    9e:b6:a4:43:f3:72:67:03:a6:fc:e1:ff:9d:41:af:
                    4c:65:55:dd:ae:45:85:b0:76:c5:fd:91:26:8a:b1:
                    39:fb:05:98:aa:92:14:d5:da:14:13:b0:c7:bd:9f:
                    dc:63:14:6a:55:e6:27:a2:26:cc:ec:71:ce:f1:b4:
                    41:26:29:e9:ba:65:25:5d:36:82:a0:b6:64:e6:bb:
                    73:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:4F:CB:75:5E:36:DB:1E:2F:F1:B5:C4:CB:87:7F:56:54:6F:8E:82
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3136302e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.43.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:1c:74:c0:73:bf:23:19:62:d4:6a:76:5d:56:95:80:1a:2b:
         e0:6f:20:38:60:b2:23:2c:4c:60:90:32:14:b2:fc:8c:6d:1a:
         cc:1c:98:ea:20:85:62:b2:c9:08:21:5e:24:da:d9:9e:70:e3:
         c7:f8:84:c7:20:69:af:86:7f:b2:8e:f8:6a:81:93:db:c2:48:
         04:ce:92:41:00:3e:f5:e3:b8:5d:f7:2a:8e:3f:6e:dc:88:c7:
         9f:ad:2b:43:76:6f:51:61:3f:ed:d0:35:4b:cf:8d:8e:db:15:
         8e:db:d1:69:7c:10:57:ec:23:33:2e:98:11:f9:fb:1b:4d:53:
         e3:ac:17:6e:3e:98:bb:2c:80:f8:b2:0e:c2:eb:81:39:df:ee:
         42:10:80:40:42:b1:1f:55:ab:fb:76:3e:5a:a6:7f:7a:1a:22:
         6e:54:73:c0:1f:44:64:34:d0:8a:29:72:7d:9e:af:aa:08:af:
         af:54:ff:9e:60:41:e7:17:02:d8:4e:d2:96:1f:bf:de:4e:86:
         ae:8e:56:82:5d:94:d1:e7:c3:cf:75:00:25:f9:28:4d:dc:f2:
         c3:4d:4b:ea:b8:38:99:de:7d:69:ba:55:85:36:f0:2e:2e:cf:
         de:89:58:a5:00:d3:f5:89:6d:d9:74:ac:a5:ed:6d:7e:28:88:
         1f:6a:57:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 10:13:54 2024 by rpki-client on console-fra.rpki-client.org