Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e31352e302f32342d3234203d3e203234323034.roa
File:                     3230332e38302e31352e302f32342d3234203d3e203234323034.roa (raw, json)
Hash identifier:          c52sokWCxiHM47HXpwxIRcIDim32PalL1alwxXZgY9U=
Subject key identifier:   8F:3C:B7:34:68:BB:6D:52:E8:61:29:3A:60:B9:47:6B:7F:9A:42:54
Certificate issuer:       /CN=28351380A86044778274FC7CEC0F116CF3B3CA39
Certificate serial:       15DCF15A96E6B5B8F446B8A3665F507DA64BDC93
Authority key identifier: 28:35:13:80:A8:60:44:77:82:74:FC:7C:EC:0F:11:6C:F3:B3:CA:39
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28351380A86044778274FC7CEC0F116CF3B3CA39.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e31352e302f32342d3234203d3e203234323034.roa
Signing time:             Mon 01 Jul 2024 01:04:22 +0000
ROA not before:           Mon 01 Jul 2024 00:59:22 +0000
ROA not after:            Mon 30 Jun 2025 01:04:22 +0000
asID:                     24204
IP address blocks:        203.80.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.crl
                          rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28351380A86044778274FC7CEC0F116CF3B3CA39.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 21:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:dc:f1:5a:96:e6:b5:b8:f4:46:b8:a3:66:5f:50:7d:a6:4b:dc:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28351380A86044778274FC7CEC0F116CF3B3CA39
        Validity
            Not Before: Jul  1 00:59:22 2024 GMT
            Not After : Jun 30 01:04:22 2025 GMT
        Subject: CN=8F3CB73468BB6D52E861293A60B9476B7F9A4254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b6:25:5f:64:bd:09:b2:6d:9f:23:f8:93:ba:
                    4d:7e:4a:df:91:5d:91:5c:5b:e1:49:1e:34:4b:c5:
                    13:30:24:e1:f8:b5:39:bc:3d:ef:75:da:41:c9:b6:
                    4d:cc:78:0f:7f:11:d9:c3:63:ff:54:b8:b9:c3:38:
                    59:e8:cf:63:31:db:ac:50:f3:3f:79:57:87:9d:99:
                    02:c4:b5:d1:91:e2:e1:f5:83:c5:de:35:ca:92:48:
                    e3:60:be:03:f5:5f:f3:a7:18:87:77:b9:31:43:e7:
                    08:b5:dc:6f:14:1c:be:01:3d:49:5c:4e:cb:07:7c:
                    f4:f7:61:4e:84:0c:52:6d:8f:89:d5:9f:49:08:38:
                    f8:0e:8e:f9:b0:ec:1d:26:c1:6a:21:3a:fe:8a:83:
                    c4:81:78:3f:80:cf:ff:93:ec:ea:84:8c:3f:e6:f2:
                    1a:99:ae:c8:53:4f:28:7a:39:db:9d:59:f0:80:6a:
                    e5:32:ae:8d:13:a1:d4:0b:6a:39:07:a1:fd:42:7a:
                    bd:d0:54:cf:3b:6d:48:45:bb:8c:44:9e:33:39:82:
                    3f:48:8e:7f:6d:69:42:61:17:0d:04:c7:9d:66:6d:
                    28:f7:93:a6:82:e9:6d:89:76:7f:9d:17:38:83:f4:
                    0c:dd:64:34:15:9e:6a:c3:af:4b:42:3e:d3:f8:07:
                    66:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:3C:B7:34:68:BB:6D:52:E8:61:29:3A:60:B9:47:6B:7F:9A:42:54
            X509v3 Authority Key Identifier:
                keyid:28:35:13:80:A8:60:44:77:82:74:FC:7C:EC:0F:11:6C:F3:B3:CA:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28351380A86044778274FC7CEC0F116CF3B3CA39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e31352e302f32342d3234203d3e203234323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.80.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:3e:9f:65:2e:b1:58:fa:6f:7e:df:a3:0e:37:a1:45:ea:63:
         41:bd:c7:ea:26:b1:6b:d4:e0:4b:27:69:fb:9d:b0:cc:9c:37:
         d7:e7:6e:49:76:cf:0f:89:bb:ab:a2:de:2f:9b:c5:1d:e7:68:
         94:ec:e8:aa:01:0f:7e:43:ab:ff:15:80:ca:7b:02:7a:7f:77:
         5a:a1:db:7c:a1:9b:46:b5:d3:37:4f:09:a3:d8:80:5f:6f:0a:
         9c:12:0f:e2:d9:c4:de:d2:a0:c1:b2:c6:f6:60:8d:50:e6:0d:
         65:24:bc:74:9d:2d:c4:1f:0e:f5:34:e2:5e:db:31:5f:b4:80:
         c6:5a:84:0d:70:03:40:b7:75:32:56:c4:58:1b:40:85:75:f8:
         c9:64:95:15:4e:1e:8a:04:0d:9d:96:9c:19:f5:60:80:28:77:
         ba:41:9e:2e:3b:71:b0:c6:ad:9b:fe:75:8c:91:35:f4:56:55:
         a6:dc:47:df:ec:aa:89:b6:08:cd:01:0b:2a:03:51:36:ef:93:
         e0:d8:22:de:a9:86:e1:59:02:fc:7e:4f:6e:1e:1c:4a:dd:ff:
         29:3d:1d:70:77:80:90:75:07:2b:69:24:8a:f9:00:83:d2:da:
         55:4b:db:60:6d:94:6d:9c:b2:44:42:99:73:0e:cd:5c:7d:74:
         48:1e:53:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:20:41 2024 by rpki-client on console-fra.rpki-client.org