Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e31322e302f32342d3234203d3e203234323034.roa
File:                     3230332e38302e31322e302f32342d3234203d3e203234323034.roa (raw, json)
Hash identifier:          o8WCNHqPgFVCcJIPMMNyY9wNR4s4bWFgWCE9Rc1XnKc=
Subject key identifier:   84:79:5E:0F:A2:5D:0F:A2:D0:8D:98:66:BF:31:A4:7A:D8:62:8A:0D
Certificate issuer:       /CN=28351380A86044778274FC7CEC0F116CF3B3CA39
Certificate serial:       28DB1178BA0D65348A42681C33DFC7E72DAECF84
Authority key identifier: 28:35:13:80:A8:60:44:77:82:74:FC:7C:EC:0F:11:6C:F3:B3:CA:39
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28351380A86044778274FC7CEC0F116CF3B3CA39.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e31322e302f32342d3234203d3e203234323034.roa
Signing time:             Mon 01 Jul 2024 01:04:23 +0000
ROA not before:           Mon 01 Jul 2024 00:59:23 +0000
ROA not after:            Mon 30 Jun 2025 01:04:23 +0000
asID:                     24204
IP address blocks:        203.80.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.crl
                          rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28351380A86044778274FC7CEC0F116CF3B3CA39.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 21:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:db:11:78:ba:0d:65:34:8a:42:68:1c:33:df:c7:e7:2d:ae:cf:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28351380A86044778274FC7CEC0F116CF3B3CA39
        Validity
            Not Before: Jul  1 00:59:23 2024 GMT
            Not After : Jun 30 01:04:23 2025 GMT
        Subject: CN=84795E0FA25D0FA2D08D9866BF31A47AD8628A0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1b:90:f0:24:89:00:3e:4e:3d:80:b3:d2:4a:
                    e0:5e:44:84:f1:11:fc:65:66:e3:74:bc:05:2e:8d:
                    f4:80:98:ab:c4:74:ec:09:87:b9:33:28:24:82:c5:
                    fb:bb:a9:26:0e:c8:4c:81:d1:84:c9:61:e8:bd:de:
                    ca:cb:22:1e:fc:a3:6e:a5:4a:7d:82:8c:35:fc:62:
                    2f:1e:77:e8:59:08:cb:fc:74:3c:f3:a8:35:b7:4e:
                    34:7e:0c:b7:91:c9:18:96:2d:0d:26:7f:52:d6:2b:
                    89:d8:1c:5c:49:62:f3:bc:9b:38:8e:a6:a1:88:62:
                    89:86:a7:18:d4:be:82:72:9a:41:40:20:3f:b4:42:
                    aa:65:e4:fd:d5:09:ce:9f:42:c4:57:e0:a4:e6:a1:
                    d6:45:59:2d:4a:14:44:5c:9f:cf:7e:ef:76:4b:ff:
                    57:b5:cb:4b:9e:46:f9:ba:ec:fd:5b:b8:c1:9f:f6:
                    72:33:89:03:70:ec:5f:45:30:5e:bc:35:07:74:0f:
                    5e:00:3c:4b:63:c8:fb:90:b3:4d:33:a4:6a:34:52:
                    20:7f:d3:40:fb:53:67:d8:9c:3f:30:d9:2c:1f:64:
                    40:f4:84:a4:2d:60:8c:5a:7f:16:b0:47:31:19:e8:
                    32:d6:07:95:36:73:6c:88:41:5d:83:c2:b0:60:fc:
                    d5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:79:5E:0F:A2:5D:0F:A2:D0:8D:98:66:BF:31:A4:7A:D8:62:8A:0D
            X509v3 Authority Key Identifier:
                keyid:28:35:13:80:A8:60:44:77:82:74:FC:7C:EC:0F:11:6C:F3:B3:CA:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28351380A86044778274FC7CEC0F116CF3B3CA39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e31322e302f32342d3234203d3e203234323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.80.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:53:a2:a2:9d:17:a6:fd:48:84:b2:ac:4c:78:88:95:cd:ee:
         f0:16:fb:17:db:bf:ca:53:df:ed:a0:63:72:82:11:d3:6e:b1:
         63:72:d0:67:bd:74:7c:ab:54:e6:16:63:ab:d2:a6:f2:15:11:
         5f:69:e3:04:63:4e:05:f9:5d:b1:f5:6a:21:a1:91:23:f8:67:
         e2:26:0f:1c:24:65:5b:66:58:a6:55:d8:3e:ca:12:ef:61:63:
         70:86:f4:d5:86:8e:af:70:2d:6f:ed:11:c1:29:f2:54:1e:16:
         b0:48:54:94:0e:3c:3d:7b:b3:f4:41:ae:46:cd:19:ac:27:e8:
         d6:f7:25:0e:74:2b:f2:d5:fb:b3:38:36:19:6e:b7:ef:01:3c:
         1a:aa:74:08:6f:d4:ce:91:93:49:3b:84:6c:51:f1:56:7a:18:
         2d:9a:e7:3e:72:24:41:2f:30:a7:83:c4:46:c7:27:f3:12:04:
         06:92:2f:07:c1:d7:f6:f0:59:78:de:22:9f:39:20:44:92:85:
         07:92:f0:d4:be:6a:05:2a:93:dc:52:67:c3:03:fc:1f:46:56:
         bf:e7:87:a8:e6:a9:9d:04:90:da:1c:3d:3c:38:e9:60:ab:ce:
         b4:22:68:fa:9d:5d:19:4e:c7:72:1f:d9:02:55:41:86:2b:c9:
         e4:9a:aa:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:20:41 2024 by rpki-client on console-fra.rpki-client.org