Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3136322e302f32342d3234203d3e203137373639.roa
File:                     3230322e35352e3136322e302f32342d3234203d3e203137373639.roa (raw, json)
Hash identifier:          IIDMo3gmEbTRvQmVIMTGVsjNa8fzEKPCyqDykoqt4KY=
Subject key identifier:   10:08:02:10:D8:6D:0B:65:83:77:95:6E:45:59:0E:71:DA:95:C3:FC
Certificate issuer:       /CN=C451166D49539649063AF8F493F51CB1ACE0AB09
Certificate serial:       3258852FA6EEFFFF7806F8767498ED5350CF7D67
Authority key identifier: C4:51:16:6D:49:53:96:49:06:3A:F8:F4:93:F5:1C:B1:AC:E0:AB:09
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3136322e302f32342d3234203d3e203137373639.roa
Signing time:             Fri 27 Oct 2023 05:00:03 +0000
ROA not before:           Fri 27 Oct 2023 04:55:03 +0000
ROA not after:            Fri 25 Oct 2024 05:00:03 +0000
asID:                     17769
IP address blocks:        202.55.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.crl
                          rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 13:43:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:58:85:2f:a6:ee:ff:ff:78:06:f8:76:74:98:ed:53:50:cf:7d:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C451166D49539649063AF8F493F51CB1ACE0AB09
        Validity
            Not Before: Oct 27 04:55:03 2023 GMT
            Not After : Oct 25 05:00:03 2024 GMT
        Subject: CN=10080210D86D0B658377956E45590E71DA95C3FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3b:62:39:16:1a:2c:62:55:26:e4:03:9d:83:
                    bd:c6:ba:43:c1:33:59:eb:90:87:b8:1a:f4:1c:d3:
                    fa:cf:3c:f6:98:f0:7c:9a:e8:67:f9:90:04:b8:ce:
                    c6:3e:12:9c:7e:d5:cd:c4:c8:dc:08:ca:25:7c:f9:
                    03:ae:a4:3d:c9:63:2c:e6:52:de:8c:be:f4:9d:a4:
                    4a:d2:64:a0:0a:fd:f3:fb:de:24:b8:cf:04:44:57:
                    f9:95:ea:49:79:ae:e7:ce:da:4f:39:e2:65:a1:6c:
                    d4:31:18:87:3e:8c:cd:f6:0d:30:53:8c:fa:cc:e3:
                    d9:04:a5:3b:6d:a5:26:f5:5f:ba:4e:19:2a:d6:c9:
                    13:89:0d:2d:28:f3:c3:3f:5d:fa:ac:3d:93:14:4e:
                    78:ad:1c:f6:83:ea:22:d3:5e:ed:eb:4b:c8:0b:46:
                    14:30:f4:2d:d9:97:15:89:49:b3:50:4b:74:b3:14:
                    b4:95:12:c1:68:29:7f:d4:17:9c:dc:be:49:4b:c9:
                    9b:39:a2:d6:45:fe:ee:e7:61:b7:87:59:d6:cb:22:
                    42:db:de:36:54:bb:9d:23:af:ad:a3:91:d0:25:d3:
                    71:21:d5:16:5c:df:a4:fb:ca:82:c8:0d:71:95:8f:
                    85:61:50:57:9d:bb:c3:55:8a:d8:81:ae:7f:42:ea:
                    e6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:08:02:10:D8:6D:0B:65:83:77:95:6E:45:59:0E:71:DA:95:C3:FC
            X509v3 Authority Key Identifier:
                keyid:C4:51:16:6D:49:53:96:49:06:3A:F8:F4:93:F5:1C:B1:AC:E0:AB:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3136322e302f32342d3234203d3e203137373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.55.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:11:bb:f5:f0:12:6f:44:1e:0c:8a:0c:e0:e0:3f:a9:1a:c1:
         8e:e0:53:d1:58:e7:f5:2d:19:06:0f:a5:ec:72:b2:6d:e6:00:
         0a:e7:75:1b:78:ed:e1:c0:de:bd:07:f5:4d:78:3a:a4:87:81:
         f2:f0:70:b3:b6:15:69:c0:37:f8:10:cb:c5:68:69:dd:c6:01:
         26:43:4d:70:51:d2:ce:72:73:73:9f:11:b9:19:8e:35:a5:03:
         02:37:51:07:9d:0b:c0:e4:bd:5d:8c:70:ac:8c:a3:9d:28:9d:
         de:eb:be:24:04:34:5f:49:37:53:0a:b8:d6:96:80:84:99:11:
         de:b5:88:2f:56:60:79:bc:88:2c:4e:4e:9a:95:20:57:73:d7:
         43:42:68:ec:89:4c:1c:f6:e1:e5:46:1a:1e:9e:f9:d0:4e:ed:
         47:78:82:f3:7b:fe:01:b4:a7:be:a5:c0:12:c4:19:11:62:69:
         19:a3:0f:c3:fd:0e:34:82:b8:36:62:07:2e:de:84:77:33:97:
         3d:5e:d5:bc:f3:ba:ef:1b:50:9b:ea:6b:f3:0c:4f:a1:c5:b8:
         db:2c:74:3a:1c:7a:7c:6b:b0:86:d1:84:f6:c4:53:22:8e:17:
         5c:c9:70:e7:49:4a:59:22:cc:25:b9:1a:13:99:bb:e3:31:01:
         35:d9:17:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 19:12:29 2024 by rpki-client on console-ams.rpki-client.org