Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3230332e302f32342d3234203d3e20313333383431.roa
File:                     3132332e3233312e3230332e302f32342d3234203d3e20313333383431.roa (raw, json)
Hash identifier:          g5Eg8f2uwK8bPhT+Svfx9lnRuLA5TdKgNa3EsSTSVmI=
Subject key identifier:   A4:7C:BE:24:BB:96:3B:CF:54:D4:7B:1B:29:54:32:C7:49:EE:BC:9A
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       3CBE02329ABCCA3391CFC8825007ED147852B2F2
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3230332e302f32342d3234203d3e20313333383431.roa
Signing time:             Mon 01 Jul 2024 01:03:19 +0000
ROA not before:           Mon 01 Jul 2024 00:58:19 +0000
ROA not after:            Mon 30 Jun 2025 01:03:19 +0000
asID:                     133841
IP address blocks:        123.231.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 11:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:be:02:32:9a:bc:ca:33:91:cf:c8:82:50:07:ed:14:78:52:b2:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jul  1 00:58:19 2024 GMT
            Not After : Jun 30 01:03:19 2025 GMT
        Subject: CN=A47CBE24BB963BCF54D47B1B295432C749EEBC9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:02:eb:9b:c6:2f:35:b0:b2:eb:ad:11:28:43:
                    7f:2c:e1:61:59:42:1f:b0:fe:5f:3c:a8:a2:6c:6f:
                    89:ce:f2:86:bb:6f:fc:de:ce:f7:eb:37:10:23:b9:
                    08:ca:f2:96:f4:64:c8:39:5f:d9:de:f3:e0:e2:ac:
                    75:1a:72:f1:55:31:1d:3b:23:13:9a:00:cb:2f:f5:
                    f2:db:76:94:e7:80:91:43:fc:b7:6e:a4:b9:4b:25:
                    d6:16:d0:14:80:3d:20:de:71:ce:e5:85:06:dd:39:
                    3b:7e:9c:f3:ea:7b:13:df:43:69:9e:0d:72:c8:58:
                    ba:7c:5c:d6:8a:83:64:9c:17:78:c3:b7:5b:26:0e:
                    5a:64:13:83:97:78:b8:93:35:49:39:b5:fe:30:cc:
                    63:74:02:6b:46:04:95:2f:ad:73:0a:bd:73:f9:e3:
                    84:62:cc:ea:61:22:10:9e:2c:69:4e:04:b4:70:ca:
                    46:46:fc:ab:e6:f0:e4:09:c6:a2:4f:1b:53:42:03:
                    3f:5f:0e:a6:57:23:d1:74:20:85:93:12:5f:01:e1:
                    a6:f2:f3:3c:94:df:ef:8f:0e:84:bc:17:3f:9e:34:
                    d7:06:a0:7a:68:1c:e9:9e:76:f0:00:dd:83:f3:35:
                    ed:a0:37:71:ce:ad:15:aa:a2:99:92:fa:db:88:e6:
                    b2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:7C:BE:24:BB:96:3B:CF:54:D4:7B:1B:29:54:32:C7:49:EE:BC:9A
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3230332e302f32342d3234203d3e20313333383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.231.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:0d:0a:6d:ad:18:3e:07:d1:13:cf:7b:1c:8d:06:54:43:e5:
         08:27:fe:9f:dc:3c:ba:c7:ce:4d:4d:6b:df:1d:06:65:7f:5b:
         12:b7:55:0b:66:4f:13:8d:3c:a2:0a:11:25:e5:42:41:4f:93:
         0b:48:af:9f:1a:58:c7:12:3f:4d:fd:73:2a:82:b2:b4:cb:cd:
         fe:45:ad:98:ec:28:4d:83:0d:40:92:8f:fd:28:69:0a:56:d3:
         bc:30:2d:a0:08:e1:fc:d9:2a:0f:d9:e0:98:17:d1:06:ca:68:
         62:fa:32:5f:71:8b:ec:85:1f:8d:44:cb:2f:b3:1b:38:1f:c1:
         7d:ef:0d:56:4a:5b:9e:a3:32:a2:33:81:99:54:43:04:fa:9f:
         e1:77:12:c5:cc:29:f6:cd:25:bb:74:c2:5c:17:10:e3:c2:69:
         f9:4d:a1:95:c8:02:77:cb:03:fb:c3:ea:38:fa:37:46:d7:f9:
         67:48:59:e9:d9:b2:e6:64:e6:bd:16:b6:7a:5e:40:43:5a:e2:
         6e:aa:7b:b6:1c:2a:f4:86:d8:d0:24:8f:d9:48:ff:26:79:f6:
         0d:0e:6d:a1:0a:4a:01:28:d7:c2:f8:9b:6c:f1:a9:a3:fe:f3:
         25:d6:71:13:c0:0c:e5:c7:3c:8a:71:32:a0:23:f9:44:f6:ec:
         fc:fa:b8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:37 2024 by rpki-client on console-ams.rpki-client.org