Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/3230332e3137352e3132342e302f32342d3234203d3e20313339393532.roa
File:                     3230332e3137352e3132342e302f32342d3234203d3e20313339393532.roa (raw, json)
Hash identifier:          bouZAasMgOPM9QXaYDi4csM+kLJSSiEoYCEC3ZJXQLg=
Subject key identifier:   46:3B:D8:C4:A5:66:41:5F:A3:5C:73:98:E5:33:28:36:43:84:E1:A4
Certificate issuer:       /CN=4E4C9A47789406B9086713C5B821524B664E7C90
Certificate serial:       6E84E56F612B049C5BA81B8A7DB4E92DA81D58C8
Authority key identifier: 4E:4C:9A:47:78:94:06:B9:08:67:13:C5:B8:21:52:4B:66:4E:7C:90
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E4C9A47789406B9086713C5B821524B664E7C90.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/3230332e3137352e3132342e302f32342d3234203d3e20313339393532.roa
Signing time:             Tue 26 Dec 2023 23:29:50 +0000
ROA not before:           Tue 26 Dec 2023 23:24:50 +0000
ROA not after:            Tue 24 Dec 2024 23:29:50 +0000
asID:                     139952
IP address blocks:        203.175.124.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.crl
                          rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E4C9A47789406B9086713C5B821524B664E7C90.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:84:e5:6f:61:2b:04:9c:5b:a8:1b:8a:7d:b4:e9:2d:a8:1d:58:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E4C9A47789406B9086713C5B821524B664E7C90
        Validity
            Not Before: Dec 26 23:24:50 2023 GMT
            Not After : Dec 24 23:29:50 2024 GMT
        Subject: CN=463BD8C4A566415FA35C7398E53328364384E1A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:28:b2:27:ed:a1:7b:fc:59:b9:38:a3:ff:03:
                    a0:81:fe:06:2e:cf:14:7a:94:1c:49:5e:7e:c3:14:
                    e5:6c:37:f2:75:86:97:72:f2:cb:22:f1:a4:9a:64:
                    77:dc:6d:bd:a9:29:23:f4:f0:26:48:3a:61:f2:cc:
                    d3:4a:73:3c:68:65:ae:29:06:c9:1c:46:f2:f9:88:
                    d8:4e:ea:ed:71:d2:21:dc:51:cb:e7:26:dc:68:30:
                    3c:c1:3c:56:68:12:f7:ed:1a:8c:20:8e:66:e2:fd:
                    47:40:be:9c:ad:12:32:0b:f7:9f:3b:7c:d9:d1:17:
                    65:b4:b4:bd:d8:63:f4:b5:29:62:46:af:78:26:68:
                    ac:de:b1:f7:47:2e:a2:a5:46:3d:ab:e9:d8:d6:2a:
                    ce:52:05:28:bb:f0:09:01:ca:31:d8:77:71:a5:3d:
                    6e:d1:46:f3:c2:02:02:dd:34:03:2b:e1:f1:bf:d3:
                    f4:e3:d5:80:9c:90:88:05:d1:d9:d8:fa:be:c5:31:
                    65:aa:43:5a:ca:f8:ee:81:ba:e7:33:13:cb:37:70:
                    6c:9e:e5:8e:42:a4:fa:cf:ba:fd:e0:0b:b8:b9:d3:
                    44:59:ad:4f:f3:fc:cd:7c:63:52:df:cc:fd:3f:5a:
                    2d:83:ef:c6:c0:79:e6:38:4b:ea:9a:55:2f:9e:a3:
                    6a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:3B:D8:C4:A5:66:41:5F:A3:5C:73:98:E5:33:28:36:43:84:E1:A4
            X509v3 Authority Key Identifier:
                keyid:4E:4C:9A:47:78:94:06:B9:08:67:13:C5:B8:21:52:4B:66:4E:7C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E4C9A47789406B9086713C5B821524B664E7C90.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/3230332e3137352e3132342e302f32342d3234203d3e20313339393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.175.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:a6:de:1e:44:5b:33:bd:9c:73:5c:0e:1a:c2:94:ff:66:cb:
         cd:42:fb:f1:a1:c0:c4:45:a6:65:a9:63:24:43:d8:bd:e3:ce:
         ff:0c:fb:b8:78:d5:7e:4e:0b:69:f8:49:03:98:3d:1d:69:18:
         9b:18:4b:a2:15:19:e3:3b:ec:70:d9:0e:58:e0:6a:6c:94:7f:
         b3:af:d4:db:4c:1a:9d:65:d9:7b:49:d8:45:13:ff:50:3d:94:
         7b:43:38:42:77:39:1a:84:09:a4:4f:68:a6:f6:90:5d:69:85:
         5f:63:b0:74:a7:6c:15:36:a2:7e:ac:bf:41:2b:d9:79:f7:c6:
         0b:a3:f2:8b:2c:63:b3:07:9b:11:3b:b1:99:cf:b7:47:e5:74:
         d8:71:ff:9d:59:ef:b8:09:a5:4f:c3:ac:ce:09:79:fa:85:cf:
         11:be:62:de:b8:d4:da:d2:83:07:69:4d:13:30:08:3b:30:35:
         aa:88:c7:09:4a:b7:11:f8:e4:67:64:2e:58:d5:af:63:be:e9:
         ff:01:01:0f:5b:5d:53:02:cd:05:0a:74:5f:15:cf:d4:17:1a:
         d2:3d:77:f5:d5:6e:6e:bf:83:b8:82:c6:d2:1c:f6:25:cc:24:
         fe:e4:d9:ed:46:52:83:3b:c9:3c:c2:13:88:56:57:bf:51:d6:
         08:88:11:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org