Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/3230332e3134352e35382e302f32342d3234203d3e20313432333735.roa
File:                     3230332e3134352e35382e302f32342d3234203d3e20313432333735.roa (raw, json)
Hash identifier:          qY/yuZGDhvvAK/RtJftgjGfm17i7p9Xys3XHDkRcIf0=
Subject key identifier:   DC:2F:2D:EE:9A:25:F7:5B:D8:39:B0:56:B3:35:5E:04:AA:B9:D1:D1
Certificate issuer:       /CN=C2F956B126884B5EFD8DDADCEB0E33E1B5306336
Certificate serial:       3BED0BC57E7839B8AC5A863A9DBEC3C1C1B2A83F
Authority key identifier: C2:F9:56:B1:26:88:4B:5E:FD:8D:DA:DC:EB:0E:33:E1:B5:30:63:36
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/3230332e3134352e35382e302f32342d3234203d3e20313432333735.roa
Signing time:             Sun 03 Mar 2024 06:58:34 +0000
ROA not before:           Sun 03 Mar 2024 06:53:34 +0000
ROA not after:            Sun 02 Mar 2025 06:58:34 +0000
asID:                     142375
IP address blocks:        203.145.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.crl
                          rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Jun 2024 07:40:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ed:0b:c5:7e:78:39:b8:ac:5a:86:3a:9d:be:c3:c1:c1:b2:a8:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2F956B126884B5EFD8DDADCEB0E33E1B5306336
        Validity
            Not Before: Mar  3 06:53:34 2024 GMT
            Not After : Mar  2 06:58:34 2025 GMT
        Subject: CN=DC2F2DEE9A25F75BD839B056B3355E04AAB9D1D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:24:17:c7:08:79:5b:e1:51:b1:88:e8:ea:00:
                    3d:86:2f:75:c9:2d:28:e8:39:a1:eb:9f:c9:81:d5:
                    86:8c:d4:8f:d1:e1:20:03:83:6a:fb:f8:77:8a:a1:
                    df:fd:ac:eb:30:88:92:0c:51:88:1c:fb:14:ec:b3:
                    6f:06:4c:50:df:51:d0:93:fc:0c:a3:a7:8e:de:68:
                    4b:3a:12:93:d1:20:f6:5e:8f:cd:9f:5e:9a:95:c0:
                    8f:a0:2e:7d:de:d5:ef:5c:eb:aa:b7:c2:20:d2:47:
                    99:24:b9:83:c7:29:75:a4:99:ac:bc:b0:f4:5d:02:
                    a4:b7:8f:f6:3f:a4:57:1a:1d:51:92:1a:7f:83:b8:
                    f5:63:ab:47:94:f5:8b:a5:1b:96:50:90:84:d7:80:
                    47:0c:83:5e:e8:03:b2:5a:8b:f4:da:27:94:16:bc:
                    87:64:1b:97:a2:61:9d:90:d6:5c:a8:bd:b2:4c:1e:
                    22:f6:60:69:21:32:fc:2f:c3:4f:97:f4:33:54:89:
                    ac:e3:da:17:bf:f9:34:25:1b:b3:32:bb:77:7f:68:
                    17:37:64:c4:26:b8:83:ec:d7:fd:b7:de:4a:e1:2c:
                    5a:16:6e:c9:15:3e:47:8a:57:b2:ef:2a:cb:6e:60:
                    d9:07:59:b4:3e:ce:5c:12:b2:28:3f:07:7d:6e:23:
                    9e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:2F:2D:EE:9A:25:F7:5B:D8:39:B0:56:B3:35:5E:04:AA:B9:D1:D1
            X509v3 Authority Key Identifier:
                keyid:C2:F9:56:B1:26:88:4B:5E:FD:8D:DA:DC:EB:0E:33:E1:B5:30:63:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/3230332e3134352e35382e302f32342d3234203d3e20313432333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.145.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:c9:82:49:80:71:3a:d9:f2:2a:f6:96:ee:01:85:58:18:2a:
         31:6a:46:70:76:a0:1e:17:47:98:4a:6c:f3:06:dc:59:ee:31:
         0b:43:c1:25:20:51:ed:fb:b4:4f:06:10:fc:8c:d8:0d:55:f4:
         12:6e:27:02:a4:ec:c7:d9:6e:08:5c:50:ed:42:0b:28:5d:82:
         e9:79:f3:7c:e0:8e:95:26:c8:77:89:05:9f:9f:4b:43:0d:a7:
         a9:56:57:bd:47:e1:d6:87:3c:05:e1:f2:b1:87:24:bc:99:e2:
         37:f2:11:27:7d:db:3e:5b:eb:56:28:dd:3f:b7:5e:81:c3:b7:
         88:e7:79:00:e9:7a:2f:6a:0d:4b:fd:f7:77:b3:26:17:b2:f8:
         2e:e1:39:e8:a5:c1:56:9c:52:73:7a:41:e5:c0:35:c4:40:75:
         70:26:b1:7b:0c:ce:06:a5:a4:70:28:81:2c:df:76:9f:bd:67:
         61:bf:28:17:23:50:91:0b:90:72:c2:49:d8:7f:9c:27:6a:c8:
         4c:25:58:e1:5a:1a:6c:e0:a0:de:ca:22:a3:80:46:18:bc:91:
         01:42:2e:f1:9b:ec:35:eb:80:ef:6c:95:4f:84:d2:8e:4b:c4:
         e8:69:ed:e9:ab:92:03:34:4f:47:6f:f4:c8:14:6d:1f:5c:b0:
         ea:01:b7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 14:21:50 2024 by rpki-client on console-ams.rpki-client.org