Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3136372e302f32342d3234203d3e203137373639.roa
File:                     3230322e35352e3136372e302f32342d3234203d3e203137373639.roa (raw, json)
Hash identifier:          rVehiMxjKh+u5hyAecMv+9/ebyeqRDUSb/8JPJn2zHM=
Subject key identifier:   8D:9A:11:E2:45:A3:15:27:4B:A9:E6:09:10:D2:D6:0E:A3:83:9F:1E
Certificate issuer:       /CN=C451166D49539649063AF8F493F51CB1ACE0AB09
Certificate serial:       79248B7EB9EDFFDC0EEE8359047F9BE2A30A073E
Authority key identifier: C4:51:16:6D:49:53:96:49:06:3A:F8:F4:93:F5:1C:B1:AC:E0:AB:09
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3136372e302f32342d3234203d3e203137373639.roa
Signing time:             Fri 27 Oct 2023 05:00:03 +0000
ROA not before:           Fri 27 Oct 2023 04:55:03 +0000
ROA not after:            Fri 25 Oct 2024 05:00:03 +0000
asID:                     17769
IP address blocks:        202.55.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.crl
                          rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 13:43:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:24:8b:7e:b9:ed:ff:dc:0e:ee:83:59:04:7f:9b:e2:a3:0a:07:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C451166D49539649063AF8F493F51CB1ACE0AB09
        Validity
            Not Before: Oct 27 04:55:03 2023 GMT
            Not After : Oct 25 05:00:03 2024 GMT
        Subject: CN=8D9A11E245A315274BA9E60910D2D60EA3839F1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:47:3a:cd:bb:34:3d:74:07:01:d5:be:7a:e8:
                    2f:7c:5c:68:5b:63:c1:ad:3e:32:10:07:cc:d2:98:
                    50:66:19:0a:51:d1:49:df:b7:d8:88:16:63:8c:ea:
                    62:52:a0:52:a4:9a:83:6b:45:74:a4:6f:c4:ec:f5:
                    d3:8d:2e:c9:a3:37:38:5b:b2:17:7b:79:65:7f:e7:
                    78:6e:98:ec:bb:93:73:15:3f:0e:34:ca:ea:c5:96:
                    a7:3c:fe:bd:cb:3d:ea:09:c8:f5:ba:da:af:5f:69:
                    8d:b3:64:34:70:9e:cf:56:6f:8f:94:ef:8b:5a:86:
                    e6:06:69:f9:d4:05:55:83:4f:a2:96:ad:21:26:65:
                    01:09:48:d9:82:79:57:9f:76:91:15:3e:8e:3f:e3:
                    db:27:99:4b:bc:48:99:ae:33:a1:e8:1a:68:c5:3d:
                    d7:39:59:0f:28:3f:54:cc:38:9d:5f:09:1b:ed:1a:
                    34:4c:dd:79:d0:50:5b:71:b2:03:a4:19:da:7b:4b:
                    a8:22:3d:37:22:57:47:8f:4c:98:b9:4e:04:f3:49:
                    65:4b:6c:a5:d3:d9:a7:1d:c4:f4:af:a0:28:66:14:
                    4d:36:33:d2:34:cb:4b:d0:04:1b:ff:b3:3a:83:da:
                    a7:d3:1b:f3:6a:2b:9e:88:23:d7:4e:77:9f:27:40:
                    af:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:9A:11:E2:45:A3:15:27:4B:A9:E6:09:10:D2:D6:0E:A3:83:9F:1E
            X509v3 Authority Key Identifier:
                keyid:C4:51:16:6D:49:53:96:49:06:3A:F8:F4:93:F5:1C:B1:AC:E0:AB:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/C451166D49539649063AF8F493F51CB1ACE0AB09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C451166D49539649063AF8F493F51CB1ACE0AB09.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/130dc140-6cd4-4a59-b25c-3a141851c9ec/0/3230322e35352e3136372e302f32342d3234203d3e203137373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.55.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:0f:dc:4f:44:4f:17:cf:20:37:a1:6c:63:5c:e7:21:4b:e9:
         8e:ac:6c:c0:ea:3e:e7:e3:15:a5:e4:a0:af:3d:b2:37:4c:aa:
         f6:47:d3:d3:07:f0:f8:79:96:8a:33:ab:7f:5f:05:10:f2:a0:
         62:ef:9d:0b:6c:7e:92:72:01:7e:be:7f:63:ba:ba:fc:16:cf:
         64:9c:7b:09:69:21:06:52:81:c9:be:f5:c5:a9:a2:42:f3:c9:
         ab:ee:8c:6b:2e:2d:bb:64:fe:2f:36:f0:38:02:15:fa:d3:54:
         0c:bb:a2:bf:f6:39:22:62:aa:5d:8c:1b:a6:b7:17:68:90:86:
         6a:f0:e8:0b:9d:72:d8:21:c0:84:9c:79:5d:e7:d9:b2:1c:61:
         25:46:bd:ad:24:62:ce:a4:01:96:6b:3d:79:cf:ff:05:3b:62:
         c4:fd:6a:52:02:7c:a2:bc:92:d8:3a:5a:33:35:05:4b:78:ed:
         f5:3c:6b:c1:ce:1f:6d:83:ad:13:be:53:79:5b:74:57:23:b7:
         7d:1a:d5:33:1a:d5:94:f0:9b:b4:4c:39:c0:52:71:d2:eb:ab:
         2d:76:8b:60:c5:cb:c3:66:b1:41:0d:99:06:e2:b0:e6:06:08:
         df:7a:dd:01:79:c7:95:fb:c0:e5:9d:69:84:e7:35:b2:9d:5c:
         38:0b:37:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 19:12:29 2024 by rpki-client on console-ams.rpki-client.org