Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/3230332e3134352e35392e302f32342d3234203d3e20313432333735.roa
File:                     3230332e3134352e35392e302f32342d3234203d3e20313432333735.roa (raw, json)
Hash identifier:          9Ps4lpyCI5AkpUO4H4klRIWsvqZu5uuBAWc0+OF7K50=
Subject key identifier:   B8:F7:0A:0A:59:DD:DA:0B:F9:80:89:AE:CB:F3:BC:8F:B7:16:13:0E
Certificate issuer:       /CN=C2F956B126884B5EFD8DDADCEB0E33E1B5306336
Certificate serial:       7243FF2097939E9520FC2E306E1D495DD0201324
Authority key identifier: C2:F9:56:B1:26:88:4B:5E:FD:8D:DA:DC:EB:0E:33:E1:B5:30:63:36
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/3230332e3134352e35392e302f32342d3234203d3e20313432333735.roa
Signing time:             Sun 03 Mar 2024 06:58:55 +0000
ROA not before:           Sun 03 Mar 2024 06:53:55 +0000
ROA not after:            Sun 02 Mar 2025 06:58:55 +0000
asID:                     142375
IP address blocks:        203.145.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.crl
                          rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 00:56:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:43:ff:20:97:93:9e:95:20:fc:2e:30:6e:1d:49:5d:d0:20:13:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2F956B126884B5EFD8DDADCEB0E33E1B5306336
        Validity
            Not Before: Mar  3 06:53:55 2024 GMT
            Not After : Mar  2 06:58:55 2025 GMT
        Subject: CN=B8F70A0A59DDDA0BF98089AECBF3BC8FB716130E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d3:3c:4d:b9:8b:94:16:ca:39:a3:d2:c1:40:
                    d1:2e:a6:d8:b1:58:c8:e0:62:de:25:c2:eb:7e:30:
                    77:3b:88:b1:9a:17:3e:32:e2:14:05:52:75:85:dd:
                    0f:bd:e4:ab:08:83:4f:53:21:10:7f:ea:5a:26:ae:
                    14:b9:c3:01:0c:e3:d2:c6:47:ed:44:54:63:8c:57:
                    ab:80:46:21:80:e4:69:53:1e:ab:8c:f3:1d:36:e6:
                    8c:82:25:d7:c1:45:8d:f0:a3:7a:45:27:a0:c4:5c:
                    7d:6b:ad:e8:e5:e8:78:d0:cb:9f:2e:f3:29:dc:4e:
                    fd:12:36:88:b6:c0:3a:38:9f:1d:ec:61:1a:29:83:
                    b5:bc:9c:37:b8:6e:cf:44:10:aa:a0:2f:65:bd:ca:
                    60:5e:48:e2:ea:f2:79:3f:4a:c9:46:a9:2c:35:f3:
                    de:d0:84:82:01:7e:57:2f:b7:ec:99:87:5d:39:bd:
                    0f:af:dd:f8:42:23:b5:16:88:4e:47:36:d4:80:09:
                    84:68:dc:f5:60:c7:96:67:76:49:b5:79:3f:75:a8:
                    bd:4e:63:16:69:4c:ab:df:6d:20:a5:02:7e:06:4c:
                    c9:a5:c6:c3:b0:0d:ad:c3:79:cf:3a:34:e6:f7:5a:
                    56:dd:8b:fe:34:05:f2:03:d1:3f:5a:ec:d0:26:e1:
                    4e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F7:0A:0A:59:DD:DA:0B:F9:80:89:AE:CB:F3:BC:8F:B7:16:13:0E
            X509v3 Authority Key Identifier:
                keyid:C2:F9:56:B1:26:88:4B:5E:FD:8D:DA:DC:EB:0E:33:E1:B5:30:63:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/3230332e3134352e35392e302f32342d3234203d3e20313432333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.145.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:40:4b:9d:e9:79:07:ca:21:58:15:4a:85:67:e2:b9:e0:ce:
         8f:28:c7:e6:50:ed:77:d8:29:53:31:4d:d8:23:ba:68:3e:83:
         0f:83:04:a9:2a:f2:0b:bb:79:cf:4e:8e:41:98:fa:9d:03:0e:
         ea:e2:9f:5a:80:c6:c4:6a:3a:ca:3e:6a:33:80:90:cb:5c:79:
         d5:06:ca:3e:b1:c0:7d:20:aa:b7:48:f7:b6:89:4d:35:a3:27:
         6a:d1:34:5c:48:2b:b9:79:f5:76:98:a2:63:37:0b:c8:11:de:
         68:52:c7:13:2e:e4:eb:3c:9a:1c:8e:48:fa:aa:2d:5b:75:44:
         87:61:04:54:d5:c5:ee:87:4e:aa:f2:0f:e7:4e:db:1d:02:82:
         5a:c0:bf:a5:77:b9:e8:53:7f:45:53:79:32:c1:6d:31:53:db:
         57:f7:2b:a8:5a:80:b9:64:bf:d8:b8:ff:17:f1:9e:22:a9:a5:
         7c:ff:19:4a:d0:96:0e:5c:e5:aa:56:e3:17:39:9f:cb:7c:bd:
         fc:94:68:4d:d7:55:69:d7:4b:65:c1:80:f6:d4:8a:a4:3b:1a:
         a1:d3:01:12:d2:fb:56:91:e9:67:d1:4d:f5:7f:22:3f:46:77:
         00:f0:1e:0a:3b:00:24:a4:0f:f7:fb:2a:e7:7c:32:c2:16:d6:
         d3:9e:71:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:41 2024 by rpki-client on console-fra.rpki-client.org