Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3139372e302f32342d3234203d3e20313333383431.roa
File:                     3132332e3233312e3139372e302f32342d3234203d3e20313333383431.roa (raw, json)
Hash identifier:          hBtcRSn2HmoF1pLPMG601Ye1/YVyZ8EshG5txS7LNIU=
Subject key identifier:   1E:EF:A2:DB:8A:10:CB:79:41:BB:73:32:75:D2:03:05:3A:D0:85:19
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       113BE2D129717DBA28A7073C6F98EFE8143B0F02
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3139372e302f32342d3234203d3e20313333383431.roa
Signing time:             Mon 01 Jul 2024 01:03:19 +0000
ROA not before:           Mon 01 Jul 2024 00:58:19 +0000
ROA not after:            Mon 30 Jun 2025 01:03:19 +0000
asID:                     133841
IP address blocks:        123.231.197.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 11:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:3b:e2:d1:29:71:7d:ba:28:a7:07:3c:6f:98:ef:e8:14:3b:0f:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jul  1 00:58:19 2024 GMT
            Not After : Jun 30 01:03:19 2025 GMT
        Subject: CN=1EEFA2DB8A10CB7941BB733275D203053AD08519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:76:d1:dc:e5:c7:9e:1f:4c:f0:ef:5d:98:8d:
                    62:ab:33:69:94:b6:11:cd:d4:03:ef:9a:cd:31:44:
                    0c:d2:65:1c:06:c8:f4:f7:aa:de:41:e0:41:ff:09:
                    9f:67:81:c8:4d:be:a5:2c:08:a7:f5:69:a8:8a:0a:
                    0d:49:ce:2f:90:49:c0:f0:d9:fa:61:75:f1:56:39:
                    48:23:a5:36:34:65:a2:7f:d3:d6:d2:95:d7:c5:59:
                    b5:98:8e:1c:c4:ca:a7:b8:6c:d3:de:f5:9a:65:68:
                    92:09:7d:f3:5f:e5:44:cc:e5:50:e3:70:60:c1:73:
                    2b:54:54:bf:0d:b4:47:df:9d:b7:03:36:8b:47:ce:
                    cf:53:1b:53:2d:2d:22:8d:27:63:cb:d4:03:d5:07:
                    05:5c:b9:0d:08:32:7a:07:78:b3:35:6b:c8:d1:99:
                    91:f4:5d:ac:0d:24:d7:4e:30:0f:f9:83:6a:39:a0:
                    8f:3e:aa:ea:f1:7f:b2:fe:8f:1e:86:94:ea:0a:91:
                    f3:53:66:37:4e:f7:da:2c:a7:25:80:e1:d7:58:21:
                    fd:2a:99:9d:5e:6d:31:a4:01:72:e1:82:82:d7:7c:
                    c5:72:1f:fe:9d:5f:67:0e:a8:48:c9:6b:2b:7b:52:
                    80:55:c5:a0:bf:55:4a:c8:7c:d8:0c:a4:19:5a:4e:
                    19:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:EF:A2:DB:8A:10:CB:79:41:BB:73:32:75:D2:03:05:3A:D0:85:19
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3139372e302f32342d3234203d3e20313333383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.231.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:5c:ec:e8:f0:5d:e5:20:de:aa:75:fe:1c:18:4c:d6:55:22:
         47:b0:52:f2:c9:fd:4d:8f:3f:2d:50:00:12:90:eb:e4:ff:80:
         cd:7a:cc:e9:1f:bc:00:f2:cd:92:67:12:94:70:55:e7:f6:08:
         4c:e4:76:bd:5f:a5:f8:4d:2e:10:0c:1d:cf:24:6e:11:dc:65:
         73:bc:6d:b7:07:68:1a:d0:11:c6:2b:ee:48:c7:b5:04:5d:fa:
         2b:2f:a7:99:ff:9f:23:b5:93:b9:f8:9e:ef:f9:1b:f0:09:2e:
         18:6c:36:62:f4:95:a0:2c:07:6e:f0:ce:03:dc:fd:22:54:25:
         e6:2c:62:fe:4b:2e:62:3a:1c:b2:e5:7b:fc:41:7a:ff:7f:36:
         8f:88:7c:3a:52:f2:bb:d8:6e:5e:47:6a:f6:8f:33:80:b4:24:
         6f:26:97:aa:da:48:ad:58:53:e5:e5:7a:82:81:ff:1b:fb:47:
         6c:82:6a:6c:e7:40:cd:69:e9:42:66:56:68:1c:4f:a4:6f:41:
         15:03:78:ce:06:4a:0c:7f:43:3c:ee:35:e2:db:90:1e:b5:68:
         ed:ab:88:20:a6:95:49:d7:fd:8d:06:22:a8:e7:dd:5b:13:75:
         d5:8b:55:59:60:9a:87:3d:f1:cc:08:ac:d3:57:c9:2e:a1:0e:
         b9:60:93:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:37 2024 by rpki-client on console-ams.rpki-client.org