Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3136312e302f32342d3234203d3e203137373639.roa
File:                     3230322e35352e3136312e302f32342d3234203d3e203137373639.roa (raw, json)
Hash identifier:          8A6KrYH+dj9wNUaf7TMrV6iMEFu2XxyRsY9Ml1K1x3w=
Subject key identifier:   F8:05:D3:D5:58:12:3C:32:50:E5:66:59:09:58:F5:31:C1:72:00:9D
Certificate issuer:       /CN=C451166D49539649063AF8F493F51CB1ACE0AB09
Certificate serial:       76AE6C3B895827FE3AC513A41928DA69881287B2
Authority key identifier: C4:51:16:6D:49:53:96:49:06:3A:F8:F4:93:F5:1C:B1:AC:E0:AB:09
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3136312e302f32342d3234203d3e203137373639.roa
Signing time:             Fri 27 Oct 2023 05:00:02 +0000
ROA not before:           Fri 27 Oct 2023 04:55:02 +0000
ROA not after:            Fri 25 Oct 2024 05:00:02 +0000
asID:                     17769
IP address blocks:        202.55.161.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.crl
                          rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 13:43:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:ae:6c:3b:89:58:27:fe:3a:c5:13:a4:19:28:da:69:88:12:87:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C451166D49539649063AF8F493F51CB1ACE0AB09
        Validity
            Not Before: Oct 27 04:55:02 2023 GMT
            Not After : Oct 25 05:00:02 2024 GMT
        Subject: CN=F805D3D558123C3250E566590958F531C172009D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f8:c9:29:73:11:61:77:a0:f3:a9:94:e3:a8:
                    65:ba:28:35:05:fb:a9:d2:05:77:e9:9c:ca:f8:fc:
                    79:a9:73:9c:0c:29:ef:c2:8c:15:ef:8b:b3:e7:30:
                    d5:62:14:ce:62:e4:63:99:0a:42:cd:17:75:f8:f4:
                    36:99:68:bd:f8:7e:84:f3:4f:d3:79:cb:15:9e:d0:
                    d8:0d:34:29:e2:82:59:c8:37:73:8c:35:66:8d:d8:
                    f7:67:99:ad:9a:3b:fd:14:0b:d9:26:dd:e6:1f:b8:
                    16:f7:fc:f0:c0:48:97:78:97:ea:e5:f0:d7:a6:74:
                    8a:f0:f1:70:a7:f6:98:87:c2:30:17:11:1e:1e:72:
                    80:b9:de:7d:1c:7c:4a:3d:df:9a:1f:13:6c:5e:96:
                    72:5e:c2:1e:a8:29:83:39:6f:cc:3c:c7:a1:4f:e2:
                    b0:2a:26:3b:98:48:26:a0:01:5a:7e:de:7b:52:21:
                    c4:ef:93:f4:2b:a6:8f:e7:8f:ab:97:e9:0e:e9:64:
                    5a:8d:7b:2a:de:98:d4:8d:34:e3:a1:32:68:9e:68:
                    3d:38:20:45:fc:9e:e8:82:90:25:99:2a:90:95:24:
                    67:03:47:8c:fb:58:af:41:46:01:a7:1a:66:48:50:
                    f0:90:5c:76:29:af:6d:df:8f:21:fd:44:4c:30:25:
                    61:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:05:D3:D5:58:12:3C:32:50:E5:66:59:09:58:F5:31:C1:72:00:9D
            X509v3 Authority Key Identifier:
                keyid:C4:51:16:6D:49:53:96:49:06:3A:F8:F4:93:F5:1C:B1:AC:E0:AB:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3136312e302f32342d3234203d3e203137373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.55.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:4f:8b:46:e6:0d:ea:63:82:d9:8a:93:b1:22:dd:8f:00:26:
         38:79:f1:34:dc:75:6f:6e:25:46:f1:06:3c:33:e7:8f:57:3a:
         b1:8b:65:51:77:da:b2:39:47:93:84:65:9e:33:36:37:e1:b8:
         32:ae:00:77:84:a1:63:fc:e4:5f:0a:4b:50:a4:83:c9:56:95:
         c4:46:f1:91:01:46:83:97:4f:3b:8b:c6:38:11:2a:09:f8:96:
         a4:2b:f8:3f:fb:40:ca:3f:50:0e:86:6d:4f:88:57:b5:72:4c:
         3c:43:a5:75:a0:2e:9d:c1:8b:c1:78:71:a9:2c:8c:54:4a:bd:
         25:35:b9:15:db:7a:e5:6c:e7:d3:88:5d:ad:fc:14:90:1d:0e:
         0b:5f:b3:ba:78:2d:60:ff:74:ed:50:f6:f9:27:53:f7:1d:be:
         6f:1a:26:99:10:cd:de:cd:db:1b:82:5f:d3:e9:ea:62:ab:1d:
         1c:01:51:e6:c5:f3:9f:23:f9:5e:f8:8e:cf:df:e9:f1:6d:ac:
         69:9a:ad:3f:c5:f4:1e:5b:48:59:97:8f:fa:ea:31:02:f5:20:
         5e:d7:38:04:9f:17:07:6b:28:40:7f:81:e1:8e:7b:37:ff:9d:
         d8:0c:ae:51:42:92:65:c6:d2:01:24:ee:fe:ad:47:4e:2c:2c:
         81:74:7c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 12:55:38 2024 by rpki-client on console-fra.rpki-client.org