Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3230322e3136322e3230322e302f32342d3234203d3e203233363739.roa
File:                     3230322e3136322e3230322e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier:          x1JF9RhjUhlpJprTxNjPO+SKz+HjNKe1MwngjBFEAAo=
Subject key identifier:   DC:77:1C:11:48:0E:73:44:D7:AE:A9:60:24:6B:40:3D:2B:49:D3:C9
Certificate issuer:       /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial:       2B15EF8F8CDD5ADB2EDE2505C479013136BF985C
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3230322e3136322e3230322e302f32342d3234203d3e203233363739.roa
Signing time:             Fri 23 Aug 2024 06:00:04 +0000
ROA not before:           Fri 23 Aug 2024 05:55:04 +0000
ROA not after:            Fri 22 Aug 2025 06:00:04 +0000
asID:                     23679
IP address blocks:        202.162.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
                          rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:15:ef:8f:8c:dd:5a:db:2e:de:25:05:c4:79:01:31:36:bf:98:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
        Validity
            Not Before: Aug 23 05:55:04 2024 GMT
            Not After : Aug 22 06:00:04 2025 GMT
        Subject: CN=DC771C11480E7344D7AEA960246B403D2B49D3C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b1:8c:65:1a:28:9d:f9:6d:89:5d:22:ac:91:
                    94:3a:99:7d:00:fd:69:9a:84:33:ec:73:46:5a:e1:
                    c0:fa:37:bc:b9:64:eb:af:76:e4:89:7b:cc:03:1f:
                    47:7f:11:b7:26:9d:a3:a4:5d:73:79:a9:eb:89:4a:
                    94:97:3c:b1:cf:41:4b:22:73:e3:a0:07:cb:2a:f6:
                    a9:95:e7:97:84:7f:ae:a4:6a:98:d7:b5:01:59:ac:
                    91:fd:85:47:96:ed:98:84:10:d4:c0:f2:d6:ac:b0:
                    28:82:29:7d:72:ae:56:90:6e:15:18:67:4d:5f:3d:
                    5d:e9:22:3e:b5:27:8b:70:e2:e5:00:5f:8c:da:b7:
                    17:e2:fa:16:4a:c4:19:6c:6f:37:0b:c6:60:6a:39:
                    b9:28:1d:8f:01:ee:9f:40:e1:3f:99:42:e9:44:95:
                    bb:44:8d:ce:6f:90:d4:98:eb:92:cb:92:9c:2d:23:
                    84:36:7b:28:60:9b:e3:cf:c3:88:a4:a2:01:7b:c5:
                    f3:af:8e:f4:6c:d0:19:31:b8:cb:b1:c4:bc:29:43:
                    50:24:53:13:52:56:2d:d9:a7:b9:56:e2:29:33:c7:
                    33:72:83:ad:80:33:61:c3:ae:16:7d:8e:84:d5:8c:
                    d2:c7:12:f0:5b:b5:08:e3:47:48:f2:40:ff:d5:a6:
                    d7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:77:1C:11:48:0E:73:44:D7:AE:A9:60:24:6B:40:3D:2B:49:D3:C9
            X509v3 Authority Key Identifier:
                keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3230322e3136322e3230322e302f32342d3234203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.162.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:57:ed:95:08:cc:b5:9c:0d:b2:1f:bd:d0:86:d0:c5:17:60:
         bb:43:50:ec:d3:54:0b:dd:6f:2f:30:56:cc:fe:17:e7:92:c8:
         d6:90:1d:4d:d5:ec:34:54:9e:7f:4a:db:85:77:e8:d1:7f:7e:
         ea:78:7f:eb:11:72:66:8a:25:63:ad:1b:15:9e:0f:ac:72:46:
         e5:36:9a:32:29:60:10:97:5a:cd:2e:31:22:de:74:6d:a4:b8:
         03:ce:15:a5:23:54:ef:95:48:00:26:e0:91:48:8d:62:56:21:
         b0:8e:9d:47:8c:c2:69:3d:f2:7f:a8:54:d1:8c:52:7c:a6:bc:
         54:3e:a2:ed:e6:9f:61:94:85:6a:47:a3:fe:b6:13:a4:56:47:
         56:29:7f:cb:3e:24:5f:75:64:fc:87:08:b3:9f:16:32:62:06:
         77:9c:04:62:c1:77:7a:d4:d2:57:ec:9a:3c:25:81:21:7a:45:
         7b:99:91:9b:ca:53:0d:0e:3b:6b:8c:d0:6e:a5:96:22:13:8d:
         ed:92:9b:14:ec:b9:66:03:28:d5:09:7f:28:a7:68:ca:ec:1b:
         a7:b9:37:04:2e:6c:1b:77:db:9f:36:1d:b9:68:89:9d:46:31:
         96:b7:de:99:cf:5e:7c:a2:8b:d0:01:80:2a:8b:69:35:5b:8a:
         ce:3a:23:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:20 2024 by rpki-client on console-fra.rpki-client.org