Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3136372e302f32342d3234203d3e203138303539.roa
File:                     3230322e34332e3136372e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          hXkHCk2IOUbnw1gbm+U2yrMkT+DqghfhVMNRO2Msa80=
Subject key identifier:   AA:B1:A1:AF:FC:EA:88:15:C2:41:80:CA:8C:C8:AF:24:38:76:D6:84
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       748E6E797E1316D05EF3174A2A8BCD8B67581BAA
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3136372e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 24 Nov 2023 03:22:49 +0000
ROA not before:           Fri 24 Nov 2023 03:17:49 +0000
ROA not after:            Fri 22 Nov 2024 03:22:49 +0000
asID:                     18059
IP address blocks:        202.43.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 04:41:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:8e:6e:79:7e:13:16:d0:5e:f3:17:4a:2a:8b:cd:8b:67:58:1b:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Nov 24 03:17:49 2023 GMT
            Not After : Nov 22 03:22:49 2024 GMT
        Subject: CN=AAB1A1AFFCEA8815C24180CA8CC8AF243876D684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:24:92:09:bd:7d:f0:b2:24:29:bf:36:fa:17:
                    4d:b8:a5:f1:d4:16:63:04:b0:1c:c2:1b:10:d2:70:
                    21:3b:93:28:d6:40:61:6a:6c:3d:5c:e6:bf:e3:e8:
                    9e:b6:77:4c:aa:53:7e:10:2e:bd:5c:08:7a:69:7f:
                    69:25:ce:78:71:28:cb:77:f8:2d:8f:93:09:09:df:
                    9e:ca:64:2e:55:58:8b:13:46:b7:67:85:9b:c7:89:
                    81:c3:c6:cd:6f:a3:43:61:95:5b:fc:00:90:f5:20:
                    9b:25:12:71:9e:4b:6d:75:82:bf:b8:9f:56:f6:2e:
                    9e:e7:13:04:06:7d:19:cb:a6:23:d7:32:7f:3a:35:
                    04:53:0e:58:f2:a5:bb:0d:7d:f5:72:e1:f4:7c:1b:
                    0f:cb:f3:96:74:1e:f8:94:4e:46:0e:31:51:a4:2b:
                    24:fb:43:f9:5d:94:a1:2e:49:da:85:f7:4d:04:4f:
                    63:83:82:c8:65:c2:32:47:f6:38:18:06:f1:af:13:
                    07:03:da:78:7c:90:d8:9e:14:90:af:11:bb:68:63:
                    bd:0b:4d:90:1d:12:fa:e9:29:dc:70:5b:a6:90:89:
                    3e:94:7b:51:bc:3d:a3:32:60:d3:fd:e8:a3:e5:e5:
                    45:d8:f4:d1:29:ef:ae:01:6b:03:7b:f8:c9:4f:ec:
                    5f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B1:A1:AF:FC:EA:88:15:C2:41:80:CA:8C:C8:AF:24:38:76:D6:84
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3136372e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.43.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:89:53:38:cf:4c:cc:3a:47:ea:6b:45:ea:3b:93:2e:e8:82:
         d5:fe:ed:9a:f3:54:c9:ff:56:23:ac:a8:10:0d:59:4e:84:84:
         fe:7f:03:67:02:73:58:60:79:c3:4e:ee:00:52:79:75:c6:28:
         d2:a5:a4:58:e3:91:d9:43:b3:4d:e2:be:15:3c:6e:11:25:82:
         98:85:5e:a9:28:c8:29:7d:57:54:6b:48:a1:af:cf:35:06:55:
         ae:f2:2d:3d:75:2c:72:f9:c2:fd:e4:cc:d4:14:05:63:f4:fb:
         14:4d:d6:4b:4a:54:9a:11:de:d5:83:11:64:c5:42:9b:35:8c:
         35:77:bb:bb:e6:7a:8b:f1:2c:91:c9:b2:e7:10:7d:af:80:99:
         94:c8:05:87:4e:7d:f1:c6:7e:93:25:89:5f:8f:29:c5:f2:45:
         eb:21:fd:52:dc:89:81:96:b4:fe:6d:d1:2d:c8:49:4f:a4:b4:
         89:c6:e8:8e:68:5b:e5:3f:79:ae:91:3c:40:09:2b:4a:b3:f4:
         e4:fc:e9:be:99:b9:05:7b:79:cd:24:00:80:68:1c:30:bd:c6:
         0a:b1:ce:a1:b3:0b:1e:a1:58:90:77:26:fd:ac:9f:6a:5a:b1:
         85:2e:99:62:f2:bf:8c:82:02:99:24:40:5e:b2:dc:81:4d:65:
         e3:ed:a4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 10:13:54 2024 by rpki-client on console-fra.rpki-client.org