Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3132342e3130392e32322e302f32342d3234203d3e203338353237.roa
File:                     3132342e3130392e32322e302f32342d3234203d3e203338353237.roa (raw, json)
Hash identifier:          radLee8jKyOqtTKA/5KUI0z20EAw6UagbI424s1rKQQ=
Subject key identifier:   C8:15:4A:18:F3:02:D6:39:5D:97:56:8B:C9:69:56:89:09:3F:32:6A
Certificate issuer:       /CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Certificate serial:       7F1855698E198383164C620CD5A70637A4AF71AE
Authority key identifier: 22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3132342e3130392e32322e302f32342d3234203d3e203338353237.roa
Signing time:             Wed 14 Feb 2024 12:00:02 +0000
ROA not before:           Wed 14 Feb 2024 11:55:02 +0000
ROA not after:            Wed 12 Feb 2025 12:00:02 +0000
asID:                     38527
IP address blocks:        124.109.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl
                          rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 18 Jun 2024 08:36:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:18:55:69:8e:19:83:83:16:4c:62:0c:d5:a7:06:37:a4:af:71:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
        Validity
            Not Before: Feb 14 11:55:02 2024 GMT
            Not After : Feb 12 12:00:02 2025 GMT
        Subject: CN=C8154A18F302D6395D97568BC9695689093F326A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ba:20:8b:24:42:d0:45:c0:1e:28:9b:37:0d:
                    e5:7a:43:5f:8a:00:73:c2:51:45:e6:d5:d7:42:18:
                    0a:a3:8d:b4:fa:c5:b9:10:93:41:8a:e9:d8:29:c8:
                    d3:3c:0b:db:1e:35:05:2b:5a:04:22:af:83:52:60:
                    8c:f4:ee:fe:45:f7:9e:c3:e7:34:1c:09:8d:92:34:
                    a5:93:f0:e4:99:62:90:49:70:0f:3f:8a:a9:5e:f4:
                    6c:1a:83:3c:de:15:1e:c8:cd:0d:f0:82:38:88:cd:
                    64:73:2f:7d:ae:bd:a2:c9:30:c4:9b:96:68:7b:29:
                    22:93:d3:e5:0d:32:17:7b:61:04:ca:85:5f:9f:de:
                    e1:1a:30:f6:db:ac:79:4b:0a:ec:e6:8c:e5:a6:80:
                    d4:50:e4:ea:5f:6b:bc:f2:63:73:ca:91:2e:8d:3a:
                    c5:ce:e8:bc:e0:68:15:57:23:40:b9:fe:7c:63:d6:
                    84:ef:18:58:83:df:1f:83:4b:37:9a:94:4d:68:9b:
                    5d:6d:90:35:b8:b8:32:ad:1d:ca:0f:99:02:b5:51:
                    71:d9:e7:4d:ad:de:c1:97:ee:3e:07:83:a7:a3:d9:
                    15:8a:37:be:df:13:03:bc:b2:94:af:b7:6d:31:a3:
                    36:6b:08:d3:2e:1e:3b:7f:ce:33:67:4c:2a:4a:54:
                    52:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:15:4A:18:F3:02:D6:39:5D:97:56:8B:C9:69:56:89:09:3F:32:6A
            X509v3 Authority Key Identifier:
                keyid:22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3132342e3130392e32322e302f32342d3234203d3e203338353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.109.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:95:ff:68:62:d2:16:be:7a:23:d4:27:3e:62:84:e7:06:5f:
         8c:7e:dc:f7:4b:ac:2b:a6:20:23:22:4e:7a:e5:29:a1:f0:ec:
         3f:7c:02:7f:53:bf:c3:0b:67:47:1e:00:cd:2e:bd:4c:c6:dd:
         15:9e:9d:59:19:d5:9c:03:9d:35:4d:3f:6e:50:52:3d:37:7e:
         c0:15:01:42:d7:98:ea:03:99:cc:08:23:e2:b2:13:00:31:53:
         86:0a:76:62:41:ac:5d:78:03:46:68:a8:b9:94:d0:3f:94:30:
         c0:92:42:d9:7d:d7:a3:09:cb:5b:0b:c8:c1:93:3d:5b:b6:53:
         83:67:b4:53:15:42:82:a3:88:fa:28:a2:46:a3:a9:dd:93:19:
         d7:2f:e0:24:ac:19:28:73:ed:85:d5:2a:df:9e:2c:26:65:37:
         e0:50:c0:ee:dd:94:f9:b2:59:e1:20:7e:15:48:80:74:a5:54:
         c2:9f:68:cf:bb:5a:d4:0d:3b:12:ea:a4:cc:e7:4a:9a:df:f3:
         ae:8c:a0:36:42:51:02:ce:e3:10:e5:01:a5:c8:06:a3:6e:a9:
         50:c5:b1:be:23:ac:e5:c6:95:d3:af:1c:76:1c:08:d8:ff:f7:
         59:bf:41:76:7c:5e:80:ca:76:dc:ea:a8:e7:bd:4a:58:d2:f8:
         34:a5:ff:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:35:54 2024 by rpki-client on console-fra.rpki-client.org