Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233322e302f32312d3234203d3e203138303539.roa
File:                     3230332e3133342e3233322e302f32312d3234203d3e203138303539.roa (raw, json)
Hash identifier:          /bBYNcZM9SCSh28flGBZy0vVTT/TOePAnG1iIQws/tM=
Subject key identifier:   35:89:19:93:7D:D5:03:D1:E5:05:8E:11:CF:5D:90:FD:85:EA:78:E2
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       2149E5385E3986B6DAE68E28FE916457BC6F4909
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233322e302f32312d3234203d3e203138303539.roa
Signing time:             Fri 19 Apr 2024 09:01:25 +0000
ROA not before:           Fri 19 Apr 2024 08:56:25 +0000
ROA not after:            Fri 18 Apr 2025 09:01:25 +0000
asID:                     18059
IP address blocks:        203.134.232.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 04:41:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:49:e5:38:5e:39:86:b6:da:e6:8e:28:fe:91:64:57:bc:6f:49:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Apr 19 08:56:25 2024 GMT
            Not After : Apr 18 09:01:25 2025 GMT
        Subject: CN=358919937DD503D1E5058E11CF5D90FD85EA78E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6a:0b:46:f4:4a:6d:92:bc:10:d2:b9:92:dc:
                    30:60:20:49:8c:a0:7f:db:fd:39:f7:4e:6c:5e:e9:
                    c2:a2:bb:30:35:01:7a:9b:ab:70:3e:d8:f0:d0:ec:
                    1c:74:4e:af:15:e0:3a:8c:c2:4b:a3:21:b0:70:cc:
                    54:91:ab:c7:60:a8:4d:ae:e5:28:db:cb:34:53:00:
                    6d:06:bc:21:ef:fd:eb:56:d2:ff:da:e4:83:e7:4e:
                    a9:c3:0f:35:5b:01:94:11:41:b9:e4:78:50:2e:2e:
                    16:d6:68:69:81:9c:a9:8c:e4:c2:23:46:02:88:4f:
                    6c:61:96:87:e8:53:c1:f6:38:99:28:5a:e5:bf:b6:
                    55:87:26:1d:d1:f5:a2:00:38:e8:5f:5d:d9:cb:1b:
                    07:62:54:00:3b:f9:b7:9e:15:1d:a8:42:a5:9d:ab:
                    b5:69:b1:4d:e4:cb:27:26:f6:f1:2a:99:b9:aa:02:
                    5b:fd:15:0b:df:2a:c7:e6:11:f1:86:92:08:f8:88:
                    e5:48:a9:7a:31:88:3f:92:d0:5d:32:de:69:ea:5d:
                    fc:a9:f4:7e:d2:73:d3:f7:ef:c5:12:24:68:68:71:
                    fd:95:29:31:39:29:96:93:5a:d2:69:fb:78:89:9d:
                    0f:08:99:e7:ca:e4:06:69:d9:93:b4:cb:99:5a:c2:
                    65:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:89:19:93:7D:D5:03:D1:E5:05:8E:11:CF:5D:90:FD:85:EA:78:E2
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233322e302f32312d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.134.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3f:31:c6:fa:b6:bf:d3:16:a1:f3:4e:fb:24:d6:dd:b2:2d:b3:
         b3:dc:f1:fa:f8:58:87:94:52:71:0b:fd:8d:11:59:10:82:f8:
         cf:fa:07:2f:9b:1e:81:b3:0f:85:70:d7:7e:54:d0:00:0d:14:
         c0:c1:df:b8:19:21:8c:5f:d2:36:b7:ae:2b:fc:2d:b0:63:69:
         2e:be:b4:7e:3d:6b:f3:28:db:88:1e:e9:08:f8:dd:8b:70:2c:
         58:85:ab:33:fc:46:1f:4a:0d:67:48:86:6b:86:1e:8c:c1:26:
         76:ba:ec:f1:f1:d8:b7:ca:95:78:38:bc:2d:01:45:2a:65:1e:
         15:9f:2c:0e:3f:dd:0d:c4:5b:62:7f:c8:1a:49:18:1b:6e:19:
         5c:3c:ee:e4:ee:16:8c:df:21:30:69:0c:e0:62:d0:94:82:10:
         69:a0:f3:4c:55:88:6a:c8:88:2a:d3:51:32:19:16:e0:71:86:
         aa:5e:76:bf:79:a0:96:96:6d:76:6d:7d:25:41:93:ae:41:6c:
         d3:b7:a4:c4:2e:ac:aa:dc:68:86:bc:b2:21:6d:86:be:03:4e:
         cf:40:34:db:bf:fb:61:37:38:97:94:40:a0:e8:22:47:11:f1:
         e3:c2:6a:fb:f2:f8:1e:71:42:f4:b0:cd:04:95:bd:45:59:c0:
         b1:8c:55:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 10:13:55 2024 by rpki-client on console-fra.rpki-client.org