Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3136342e302f32342d3234203d3e203137373639.roa
File:                     3230322e35352e3136342e302f32342d3234203d3e203137373639.roa (raw, json)
Hash identifier:          t8x/CN60xhPHo1T9M9RoUACF0NlH1+cAkydKmiq6S88=
Subject key identifier:   E6:18:89:D6:F2:98:BC:B4:EA:C7:04:72:B8:75:56:4C:47:1E:D7:16
Certificate issuer:       /CN=C451166D49539649063AF8F493F51CB1ACE0AB09
Certificate serial:       32064B89E54FF440B8E943D343860621A7C6D8F6
Authority key identifier: C4:51:16:6D:49:53:96:49:06:3A:F8:F4:93:F5:1C:B1:AC:E0:AB:09
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3136342e302f32342d3234203d3e203137373639.roa
Signing time:             Fri 27 Oct 2023 05:00:02 +0000
ROA not before:           Fri 27 Oct 2023 04:55:02 +0000
ROA not after:            Fri 25 Oct 2024 05:00:02 +0000
asID:                     17769
IP address blocks:        202.55.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.crl
                          rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 13:43:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:06:4b:89:e5:4f:f4:40:b8:e9:43:d3:43:86:06:21:a7:c6:d8:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C451166D49539649063AF8F493F51CB1ACE0AB09
        Validity
            Not Before: Oct 27 04:55:02 2023 GMT
            Not After : Oct 25 05:00:02 2024 GMT
        Subject: CN=E61889D6F298BCB4EAC70472B875564C471ED716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:33:61:24:72:34:96:0d:c8:9a:c8:3c:db:84:
                    0a:49:05:14:79:27:29:40:8c:19:b7:9a:36:c4:4e:
                    03:4e:8b:72:0f:62:71:67:af:92:d6:b2:e2:ca:78:
                    af:b3:b7:33:5a:5b:19:af:07:b8:d4:0a:1c:7a:51:
                    a7:01:01:d9:ec:43:11:34:c4:04:ee:5e:d3:0b:23:
                    2c:19:11:06:2c:9e:b1:bd:27:d7:20:a1:2c:1e:5f:
                    f4:c0:8a:9a:ef:95:26:4f:86:8f:60:8b:cd:a4:8c:
                    4a:29:f8:6c:c3:e4:16:0d:d7:8b:72:e7:af:3f:36:
                    8c:19:61:fc:23:75:50:24:9e:c3:67:7f:6d:0b:78:
                    92:22:77:ce:81:c3:1e:f0:ff:0a:41:8b:62:c6:df:
                    39:54:5a:9b:4b:72:f4:8c:ee:ec:63:1a:72:17:9d:
                    dd:fe:05:94:d8:6d:fa:61:cc:33:c8:c2:88:3d:70:
                    09:e4:79:f5:d0:dd:2f:20:cc:16:6b:07:7a:64:85:
                    ef:e0:6b:31:01:8b:d1:9f:ed:54:fa:a3:06:b8:e7:
                    c5:f2:44:a5:bd:0b:7b:62:f1:a7:24:7e:95:72:e7:
                    18:54:06:e1:c4:6f:c1:46:c8:4f:ec:10:de:10:15:
                    dc:4d:0a:77:3f:23:df:cd:49:6d:0a:0e:2c:f3:83:
                    88:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:18:89:D6:F2:98:BC:B4:EA:C7:04:72:B8:75:56:4C:47:1E:D7:16
            X509v3 Authority Key Identifier:
                keyid:C4:51:16:6D:49:53:96:49:06:3A:F8:F4:93:F5:1C:B1:AC:E0:AB:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3136342e302f32342d3234203d3e203137373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.55.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:7f:d4:24:6d:82:85:28:a4:1d:97:f0:64:d5:c2:07:07:a8:
         48:9e:3f:5d:02:f6:5d:b4:89:96:ce:5b:d1:12:8d:9e:9d:56:
         ef:31:e8:60:c3:b3:ad:4a:d2:d1:2e:16:8c:6c:d6:09:6f:83:
         c6:b3:10:20:89:70:b7:ab:12:ee:8d:c1:1c:50:98:3c:bd:1a:
         2a:87:04:4d:f5:d9:c0:c8:b7:64:63:f7:7a:05:cc:3d:5f:7a:
         fa:e9:04:ab:19:aa:1d:a2:e2:28:e7:e6:99:f8:2a:80:5b:89:
         be:17:b5:94:7c:8c:ee:f4:67:32:7a:84:55:ff:0b:d6:3a:4e:
         66:c2:e4:11:f7:5d:56:27:a0:76:dc:8e:05:2e:50:36:3c:33:
         6e:41:22:e5:ae:b8:9e:35:d0:78:ba:f5:c0:22:42:10:43:74:
         e0:ab:d1:e2:c9:af:70:59:fd:73:38:73:8a:2a:39:7c:26:35:
         76:2e:95:8a:ad:26:61:91:ab:f0:62:72:86:4d:87:fa:6d:8c:
         29:84:f5:14:06:da:5b:69:eb:03:af:6d:45:02:fe:04:8b:c4:
         10:80:4f:2c:a4:d1:e8:d1:b3:7b:3c:d6:26:90:f7:f9:6e:7b:
         ec:fa:c7:d4:16:55:49:d8:dd:91:16:ea:09:d2:65:86:eb:48:
         10:30:f1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 12:55:38 2024 by rpki-client on console-fra.rpki-client.org