Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233332e302f32342d3234203d3e203138303539.roa
File:                     3230332e3133342e3233332e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          wk7T3QqIg2B22nRhzXv/YvQ1lgVGLaqqgKHfj01sAXs=
Subject key identifier:   F3:09:DE:9A:55:F7:D8:E0:01:9B:04:7A:5B:CC:89:10:F8:6F:15:07
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       1B258736C67FDE4DDF047E217A13D8248B33B895
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233332e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 24 Nov 2023 04:06:36 +0000
ROA not before:           Fri 24 Nov 2023 04:01:36 +0000
ROA not after:            Fri 22 Nov 2024 04:06:36 +0000
asID:                     18059
IP address blocks:        203.134.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Apr 2024 21:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:25:87:36:c6:7f:de:4d:df:04:7e:21:7a:13:d8:24:8b:33:b8:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Nov 24 04:01:36 2023 GMT
            Not After : Nov 22 04:06:36 2024 GMT
        Subject: CN=F309DE9A55F7D8E0019B047A5BCC8910F86F1507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:64:91:65:7a:65:b1:34:ac:1c:4a:92:35:6a:
                    ad:73:fc:d8:e0:7f:d6:a5:6f:3f:c4:91:50:24:07:
                    19:24:85:a3:f7:98:b9:93:b1:f7:51:4d:52:9e:5e:
                    a9:7c:ef:aa:a0:36:a4:12:24:ce:2e:5a:10:0b:94:
                    30:15:6f:01:97:b3:4e:44:60:d1:3c:74:bf:98:47:
                    d5:d2:7d:00:67:db:41:d4:7b:f2:83:65:29:69:0d:
                    3e:00:16:45:21:54:64:49:7e:58:e0:ff:1e:d7:ff:
                    fc:20:df:05:db:1e:6d:a1:90:01:55:10:90:78:bb:
                    86:6f:7f:e6:d6:34:86:8e:7f:ec:36:66:f5:55:2e:
                    4b:db:85:b3:59:aa:0c:08:5f:e1:9f:f6:94:37:93:
                    03:3a:6e:9f:ae:2c:8e:d8:e1:bc:46:39:2d:ab:39:
                    53:79:73:cf:8c:6e:ba:25:df:98:1c:b8:c1:f4:87:
                    3d:36:f4:6f:fd:b8:a0:49:a4:4b:7a:2d:ec:0c:cb:
                    9c:e3:f1:a1:44:40:9b:d9:8e:3f:11:a7:62:ca:f2:
                    b1:37:01:7c:1f:c3:0d:0d:a9:da:4e:92:a5:e6:7b:
                    fa:56:44:28:df:64:2f:0a:8a:63:4f:42:70:ee:71:
                    9d:a3:d4:7c:6a:2c:21:3f:64:b8:b7:53:3c:b1:8a:
                    61:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:09:DE:9A:55:F7:D8:E0:01:9B:04:7A:5B:CC:89:10:F8:6F:15:07
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233332e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.134.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:1d:9f:d9:33:b4:ff:72:b1:5b:f9:0e:81:f1:e5:f1:cf:b0:
         a8:3e:31:89:ae:61:53:c3:6c:02:36:74:2f:d6:14:f9:84:2c:
         d9:b6:16:29:c0:9e:60:59:50:90:2d:f2:4f:60:43:f4:1b:d5:
         2a:5d:25:c7:ca:64:29:ac:4d:df:23:01:c3:92:a0:d1:3b:9d:
         d2:e3:02:ba:c4:8b:64:16:d0:2a:b1:4f:a1:25:0d:d1:46:16:
         61:e1:1c:fb:9a:34:b2:6c:94:6d:ca:2e:a4:2a:1b:17:7c:01:
         d8:66:5b:b1:ce:cd:bb:be:65:77:3a:b9:d5:85:12:af:af:dd:
         41:16:14:2e:11:b8:8f:83:47:e5:ae:a4:ff:f5:30:63:a7:07:
         b0:09:6a:f3:8d:8e:0e:3f:0a:c3:0c:c1:56:fb:91:f9:f4:c8:
         bc:e0:b9:13:7f:ac:a1:8f:fe:74:f2:0c:d3:7b:f2:58:51:ca:
         66:a8:1c:e4:d1:14:2b:d8:76:21:04:7f:cc:16:6c:ed:0b:84:
         43:43:96:82:d2:db:ba:5b:b4:c1:0c:07:1b:8e:3b:be:40:67:
         fb:0a:9a:02:02:90:a8:a0:a8:8b:97:e0:83:b6:8d:14:3c:99:
         02:db:66:c6:76:ec:39:06:40:d5:3e:f4:a9:a1:2d:97:9c:0b:
         27:77:79:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 15:44:29 2024 by rpki-client on console-fra.rpki-client.org