Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/3230332e3134352e36322e302f32342d3234203d3e203436303233.roa
File:                     3230332e3134352e36322e302f32342d3234203d3e203436303233.roa (raw, json)
Hash identifier:          Fs6GYexOru9x4QlpPyF/xOPAyzwPnZ2E7+vfemQK+fg=
Subject key identifier:   37:76:25:DA:2B:F5:7E:DE:97:FF:0C:DC:F0:15:E8:E7:EC:22:EE:37
Certificate issuer:       /CN=21AB9EB0A860D2619CF210410608EB831A463442
Certificate serial:       56697F3DF2D8B4339D4C961C9D780C0127B7D35F
Authority key identifier: 21:AB:9E:B0:A8:60:D2:61:9C:F2:10:41:06:08:EB:83:1A:46:34:42
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/3230332e3134352e36322e302f32342d3234203d3e203436303233.roa
Signing time:             Tue 05 Nov 2024 12:00:24 +0000
ROA not before:           Tue 05 Nov 2024 11:55:24 +0000
ROA not after:            Tue 04 Nov 2025 12:00:24 +0000
asID:                     46023
IP address blocks:        203.145.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.crl
                          rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:69:7f:3d:f2:d8:b4:33:9d:4c:96:1c:9d:78:0c:01:27:b7:d3:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21AB9EB0A860D2619CF210410608EB831A463442
        Validity
            Not Before: Nov  5 11:55:24 2024 GMT
            Not After : Nov  4 12:00:24 2025 GMT
        Subject: CN=377625DA2BF57EDE97FF0CDCF015E8E7EC22EE37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:13:ae:d6:84:07:b6:d9:05:a6:2f:b1:a9:23:
                    24:db:3b:d0:87:bf:05:e0:20:29:b8:3d:f1:14:34:
                    af:68:81:81:10:48:46:fb:29:b5:ed:98:98:e5:72:
                    73:7c:63:48:28:d1:fc:57:0e:fb:60:a7:b2:e4:38:
                    3c:06:95:68:fb:73:06:16:59:4a:1e:28:3a:55:74:
                    c1:09:4a:73:6b:3e:66:4a:92:21:0e:04:84:c1:2b:
                    d6:6e:ee:55:6f:2f:85:91:70:e1:29:39:47:ef:8e:
                    c6:72:4f:a4:aa:6f:1c:b5:0b:3c:9a:fc:7d:b7:7d:
                    cb:a0:50:8c:82:69:7b:4a:95:84:5b:96:9e:3e:88:
                    33:71:be:4b:5d:8a:e0:64:a4:68:59:8b:ce:75:d6:
                    d7:23:7a:20:0d:1a:52:11:08:f7:a0:8b:6e:d4:52:
                    f2:27:49:d7:bb:fe:7c:d0:43:3d:b2:82:34:b1:81:
                    4a:a6:8a:b3:ae:67:a0:fe:9a:f1:78:6a:4e:b9:59:
                    57:06:e8:7d:a0:42:a0:74:a1:65:10:54:11:71:ba:
                    11:a7:cf:c1:78:4e:0e:09:35:6d:59:39:5f:8e:eb:
                    bc:49:5a:66:e3:15:31:77:e2:18:d1:c8:b1:9d:61:
                    19:35:5d:bf:29:3e:9b:82:11:bc:81:c5:07:14:2f:
                    6f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:76:25:DA:2B:F5:7E:DE:97:FF:0C:DC:F0:15:E8:E7:EC:22:EE:37
            X509v3 Authority Key Identifier:
                keyid:21:AB:9E:B0:A8:60:D2:61:9C:F2:10:41:06:08:EB:83:1A:46:34:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/3230332e3134352e36322e302f32342d3234203d3e203436303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.145.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:c2:a7:bc:f7:3c:0a:d6:ec:40:dd:00:49:f0:21:7b:45:c3:
         ad:b9:a9:ea:d1:7f:1f:8b:a3:82:ba:88:b8:69:69:f4:01:1d:
         2b:fc:73:8d:af:ca:84:10:d6:6e:36:5e:35:3e:91:5d:49:52:
         d0:17:cd:95:c9:97:6f:11:64:08:73:fc:bc:79:da:f2:c4:5a:
         bd:7e:7e:dd:af:6c:87:eb:49:1e:9e:c5:cb:5e:42:10:16:d6:
         c4:3c:03:f2:4d:18:84:30:b7:14:26:6c:d8:ed:c7:40:06:1f:
         86:61:a9:35:dc:73:43:92:39:30:1e:7a:95:1a:5d:7a:00:f9:
         29:f9:36:36:92:3a:c0:21:ee:b6:79:53:a7:dd:87:16:4e:bc:
         f3:e1:37:b3:8a:f6:1f:10:79:00:19:7b:4f:4d:d9:0f:e8:71:
         35:52:86:cb:e9:d7:2b:d1:3d:bd:52:48:ad:c6:be:f1:51:37:
         8e:84:03:50:eb:96:0a:26:ac:9d:fe:a2:5b:55:dd:bc:04:8f:
         d9:c5:9b:44:d6:b1:30:87:11:06:7d:e1:f5:49:17:4b:dc:a7:
         f6:02:73:c3:bd:34:ce:91:e4:fd:1c:0b:d3:49:9b:84:cd:f0:
         30:57:1e:64:c4:1d:bc:00:5d:b2:e0:bb:8e:1a:ad:96:9f:55:
         9b:89:fa:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:03 2024 by rpki-client on console-ams.rpki-client.org