Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e392e302f32342d3234203d3e203234323034.roa
File:                     3230332e38302e392e302f32342d3234203d3e203234323034.roa (raw, json)
Hash identifier:          rBGdSMT8TyCX1hza79EhNX5rZ23TWWthY7OuvHhtfMI=
Subject key identifier:   23:18:BA:D7:EF:FF:46:6E:0B:E3:A3:E1:A4:57:C2:8A:2A:80:CD:6A
Certificate issuer:       /CN=28351380A86044778274FC7CEC0F116CF3B3CA39
Certificate serial:       549B7786C8D9445E3439BDF7B233870285DC582E
Authority key identifier: 28:35:13:80:A8:60:44:77:82:74:FC:7C:EC:0F:11:6C:F3:B3:CA:39
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28351380A86044778274FC7CEC0F116CF3B3CA39.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e392e302f32342d3234203d3e203234323034.roa
Signing time:             Mon 01 Jul 2024 01:04:23 +0000
ROA not before:           Mon 01 Jul 2024 00:59:23 +0000
ROA not after:            Mon 30 Jun 2025 01:04:23 +0000
asID:                     24204
IP address blocks:        203.80.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.crl
                          rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28351380A86044778274FC7CEC0F116CF3B3CA39.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 21:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:9b:77:86:c8:d9:44:5e:34:39:bd:f7:b2:33:87:02:85:dc:58:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28351380A86044778274FC7CEC0F116CF3B3CA39
        Validity
            Not Before: Jul  1 00:59:23 2024 GMT
            Not After : Jun 30 01:04:23 2025 GMT
        Subject: CN=2318BAD7EFFF466E0BE3A3E1A457C28A2A80CD6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:33:e6:d0:7b:5d:96:68:11:3f:b4:b2:bc:f5:
                    4c:12:9a:dd:a3:7f:6b:ef:a2:34:73:a6:9b:55:5a:
                    b9:16:b0:41:7a:a6:c6:fd:37:d0:0c:2a:b5:20:4d:
                    7d:97:e7:22:6d:df:8f:3a:0f:aa:b4:a1:88:fb:6b:
                    ca:6f:e8:54:58:54:a4:d4:1b:c5:40:f2:b5:18:2c:
                    4b:b1:ca:b7:c3:d4:7c:53:e6:fa:02:48:5a:42:fc:
                    52:a9:eb:a1:e0:36:f7:41:11:9a:ac:65:d6:e7:0d:
                    a4:25:ce:af:3e:c5:86:06:72:51:b1:5b:cc:e1:a2:
                    46:2a:5a:46:fd:bc:21:a5:c2:f2:fc:9d:c3:79:f3:
                    b0:30:7f:a7:51:2e:5b:9a:5d:d9:d5:9a:8e:a7:b6:
                    a3:bb:36:10:01:0d:f7:9e:ab:6c:00:41:88:b1:a9:
                    69:68:d7:82:77:a2:13:b7:d0:76:7d:a0:ae:0e:82:
                    8f:13:3f:5d:7e:fe:14:cc:8b:4f:1c:d1:69:b6:88:
                    ef:71:ad:ec:50:39:19:4a:11:e7:a7:d9:aa:7b:57:
                    dd:1b:c7:e7:c2:90:23:6e:94:b3:07:d2:41:4a:88:
                    0e:96:d4:c5:b8:6b:68:b6:77:05:86:c7:1c:80:ec:
                    0c:2a:6e:4b:ca:07:02:8a:5b:a2:51:f3:de:10:7c:
                    96:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:18:BA:D7:EF:FF:46:6E:0B:E3:A3:E1:A4:57:C2:8A:2A:80:CD:6A
            X509v3 Authority Key Identifier:
                keyid:28:35:13:80:A8:60:44:77:82:74:FC:7C:EC:0F:11:6C:F3:B3:CA:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28351380A86044778274FC7CEC0F116CF3B3CA39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e392e302f32342d3234203d3e203234323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.80.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:58:01:48:d0:3b:3a:0b:89:c1:89:15:0d:48:09:cd:17:4b:
         95:86:69:7a:b1:35:49:cb:59:44:ef:c6:6b:93:f2:e2:2d:14:
         d3:e9:de:76:82:06:1d:c9:1a:f0:cb:7d:be:ce:a4:81:4d:95:
         32:8b:8e:96:8e:ca:2a:4b:1b:ba:2f:d7:a9:8c:57:d6:4c:d3:
         01:ee:81:c2:b6:85:99:c4:ca:8d:6c:80:c6:53:ba:86:98:66:
         f6:1f:8b:35:81:5d:28:a1:7b:65:b1:20:7e:35:00:ca:86:fa:
         13:53:de:f9:7f:37:59:7a:5a:56:3c:26:be:8d:e6:d2:c4:03:
         6c:d5:5c:d4:aa:4f:c1:1d:b4:0e:c7:b7:7b:08:ef:de:b2:67:
         f0:ef:10:bb:84:62:2d:4e:e1:99:0e:3c:4b:16:48:11:f3:92:
         5a:13:0e:3a:5f:9c:20:5c:22:15:3d:ef:aa:cd:71:06:9a:71:
         e3:1b:8b:03:11:99:5b:3e:2a:1d:99:03:c2:e7:b0:ad:23:51:
         86:3b:1b:11:ef:f8:a0:d0:e6:fa:7d:9a:d9:6a:fb:05:95:c3:
         17:31:7d:fe:b9:23:23:56:6e:5e:18:5b:61:04:94:2f:8f:36:
         c4:52:17:5a:4b:5c:a4:15:05:9b:70:21:af:4e:e5:36:62:fb:
         ef:e8:88:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:28 2024 by rpki-client on console-ams.rpki-client.org