Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132352e3231332e3132382e302f31392d3234203d3e2034383030.roa
File:                     3132352e3231332e3132382e302f31392d3234203d3e2034383030.roa (raw, json)
Hash identifier:          Ytv098Hz+gA+aOOByzZnc5RY5BqeqgWGO38GcwdKEro=
Subject key identifier:   FC:CE:D3:D1:A0:CE:13:F0:9F:06:D3:B2:DC:D0:5A:04:B0:75:06:6E
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       0E7CC7080232DEB83AA3696B0DE4458998D39FA5
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132352e3231332e3132382e302f31392d3234203d3e2034383030.roa
Signing time:             Mon 01 Jul 2024 01:03:20 +0000
ROA not before:           Mon 01 Jul 2024 00:58:20 +0000
ROA not after:            Mon 30 Jun 2025 01:03:20 +0000
asID:                     4800
IP address blocks:        125.213.128.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 11:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:7c:c7:08:02:32:de:b8:3a:a3:69:6b:0d:e4:45:89:98:d3:9f:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jul  1 00:58:20 2024 GMT
            Not After : Jun 30 01:03:20 2025 GMT
        Subject: CN=FCCED3D1A0CE13F09F06D3B2DCD05A04B075066E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b0:d4:7c:18:ea:04:a3:7a:09:88:8f:28:24:
                    27:39:bf:24:d4:ad:54:ab:d9:28:31:b3:f4:a5:99:
                    e3:8b:76:a1:44:17:e3:a8:6c:39:3c:bf:34:96:04:
                    93:83:ff:5e:d5:88:15:e8:f3:59:21:02:b6:be:36:
                    3d:99:b0:e0:63:ef:9a:ea:ed:f4:a4:3a:0c:44:ea:
                    46:72:6f:ec:b6:f1:4c:f9:a5:18:f7:71:06:b0:95:
                    17:22:7f:70:89:2c:d0:fc:45:8b:5c:c5:6b:0b:23:
                    73:7d:d6:86:df:8d:61:5a:55:e3:49:05:cb:53:a9:
                    94:8b:24:1d:13:e9:e0:ea:ec:cd:90:fa:bb:77:bc:
                    77:8f:2b:15:29:55:7d:d5:87:05:bd:fe:5b:4a:36:
                    cb:5b:72:27:63:02:bb:6c:57:a7:7d:74:7a:19:dc:
                    72:87:5a:a2:9f:fb:b2:eb:ae:ba:02:6a:54:03:b1:
                    c5:3a:d0:62:6e:e7:8c:b6:2c:17:ee:64:4e:8c:04:
                    ff:6f:76:d4:13:f0:ca:14:46:cb:04:bf:39:76:6e:
                    4f:43:29:47:49:1e:60:b5:d7:1c:ed:a0:f3:dc:24:
                    60:39:86:13:8a:55:fc:e3:a3:6b:b2:02:89:e2:74:
                    19:c0:fe:eb:f4:d2:65:8b:c0:1b:d5:e1:d1:ca:56:
                    a2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:CE:D3:D1:A0:CE:13:F0:9F:06:D3:B2:DC:D0:5A:04:B0:75:06:6E
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132352e3231332e3132382e302f31392d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.213.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         86:15:c9:a6:ff:f7:6c:ae:92:e6:1b:62:a1:c3:48:3c:3a:e3:
         e1:cf:bc:78:f9:7d:96:a5:eb:38:5c:9f:f4:18:3a:b1:5e:0b:
         fe:7c:71:57:50:88:85:fc:d1:a0:3c:67:4b:67:2a:53:69:5a:
         f0:6f:a8:e0:df:f2:1e:0c:8e:4d:d7:8b:17:72:8a:79:85:e4:
         0b:14:e0:a6:cc:eb:83:5f:75:99:50:1c:c4:2f:12:3a:21:af:
         15:9e:d6:11:f0:5c:66:d4:47:f7:ba:d6:54:23:2b:24:cf:9c:
         e7:37:52:4a:8b:1f:fa:e8:82:49:d2:14:00:e0:56:75:4f:9a:
         8f:bb:a3:1c:11:cc:bb:05:fd:6b:6c:7d:d0:74:5a:44:da:9e:
         d6:15:2a:1d:fe:eb:70:5b:ba:35:a1:34:d0:59:12:ca:ad:86:
         c1:ab:77:c5:ac:6d:6a:6c:7a:c1:8a:d7:d7:35:a4:69:28:12:
         74:05:fd:3a:a5:9d:ed:57:54:23:9f:7d:2d:af:6e:48:c8:0b:
         22:0f:9b:d7:32:2d:ae:cc:fc:93:a1:bc:39:d7:bc:77:36:12:
         4d:7d:bb:c5:0d:dd:c0:37:92:f5:75:6c:36:bf:ef:f0:d3:99:
         f1:3d:e6:3d:e7:ca:d2:46:50:fe:d2:19:5f:2b:c2:93:72:34:
         17:de:d8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:11 2024 by rpki-client on console-fra.rpki-client.org