Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3137332e39352e302f32342d3234203d3e203138303539.roa
File:                     3230332e3137332e39352e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          fb69CU5qjagD7fLGoHZvK+hrE9nbVeUomBP5sO02gSg=
Subject key identifier:   91:B2:3C:F1:0D:A7:13:F0:F9:5E:1C:72:75:B4:7C:0E:BD:7F:F5:4C
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       3F2F192723564CDF7ED5409B04A3872E9532B3BA
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3137332e39352e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 24 Nov 2023 03:58:51 +0000
ROA not before:           Fri 24 Nov 2023 03:53:51 +0000
ROA not after:            Fri 22 Nov 2024 03:58:51 +0000
asID:                     18059
IP address blocks:        203.173.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 04:41:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:2f:19:27:23:56:4c:df:7e:d5:40:9b:04:a3:87:2e:95:32:b3:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Nov 24 03:53:51 2023 GMT
            Not After : Nov 22 03:58:51 2024 GMT
        Subject: CN=91B23CF10DA713F0F95E1C7275B47C0EBD7FF54C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3b:6e:f1:a3:68:5a:7a:06:02:02:b8:57:53:
                    c8:4e:2b:6b:37:ae:91:a0:9e:a3:c5:d4:fd:a1:a0:
                    7a:54:1e:ee:d7:e7:fd:f8:31:30:33:a6:89:40:63:
                    5d:2a:d4:fc:9c:9a:51:e9:81:53:b2:4d:8e:2d:26:
                    cd:b9:69:ca:c1:ad:8c:a7:e0:cb:e5:8d:c4:29:65:
                    7a:f7:b5:db:3b:13:1d:18:7a:5d:77:b3:79:5c:af:
                    5f:5f:71:b2:b4:5c:71:58:ae:8d:f6:df:c8:e5:e4:
                    99:b9:5e:5e:39:e3:d0:b4:ed:03:48:4b:0e:dd:c5:
                    fd:a8:ba:56:cf:96:8c:4b:89:57:55:cd:96:d4:b7:
                    cc:a9:6c:f7:83:d8:95:eb:ad:a0:99:ed:c7:82:d0:
                    31:91:25:df:e5:f3:72:01:11:02:15:e7:50:e4:50:
                    2f:9f:ab:91:18:eb:a5:5d:69:09:b0:62:7f:cc:4c:
                    4b:0a:91:79:08:5a:aa:c3:86:51:33:42:01:3d:47:
                    60:0d:fe:33:5b:72:42:c7:39:51:6d:f7:43:95:5c:
                    08:36:94:e7:04:7f:fd:d1:c2:b7:c0:1f:a3:bc:2d:
                    e1:d6:0d:38:5e:6c:ba:98:2a:90:7e:42:d2:3d:f9:
                    69:90:43:f3:4e:8f:97:0b:86:55:f8:fc:34:25:e8:
                    20:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B2:3C:F1:0D:A7:13:F0:F9:5E:1C:72:75:B4:7C:0E:BD:7F:F5:4C
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3137332e39352e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.173.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:da:20:07:41:b7:36:5a:f8:32:fb:5c:e8:e6:25:dc:a0:0d:
         03:b8:ee:a4:f8:88:8a:9a:42:9f:5a:ce:c0:af:10:d9:0e:5a:
         52:83:d6:78:43:a5:94:63:f7:13:e7:fc:75:0e:51:24:a1:58:
         90:6c:e8:3a:11:31:9e:b8:37:ac:c0:35:eb:df:4e:2c:b6:6c:
         3a:90:d6:0c:74:56:ee:12:4c:47:3d:a6:43:eb:e6:2d:4e:2a:
         4b:21:6e:72:f8:97:97:1b:c6:dd:c2:1a:e1:33:ed:61:e7:a5:
         74:dc:e1:95:48:ff:a8:9b:40:74:52:ed:d1:10:83:d0:f4:cf:
         70:7d:47:4e:c7:65:2b:68:50:b7:16:4e:24:66:74:e2:4e:4f:
         82:8b:6c:25:4d:b3:81:94:80:e0:ec:81:52:a8:3d:9d:43:0d:
         2e:5a:b8:1d:5b:7e:bd:9d:59:8d:43:ba:83:e4:5d:b8:8e:1e:
         15:6f:d0:b1:cb:aa:ee:5c:b0:a0:1f:0b:b7:96:78:3a:b3:ad:
         72:67:11:7e:bb:12:41:a4:76:27:30:72:d8:9d:39:7a:0f:d1:
         be:b7:27:bb:c8:d3:cc:66:b7:56:63:66:d8:8d:76:d5:91:6d:
         9e:ee:7d:87:15:04:b6:28:9b:ab:8e:7b:21:b3:8b:45:40:db:
         84:9c:01:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 10:13:55 2024 by rpki-client on console-fra.rpki-client.org