Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132352e3231332e3132392e302f32342d3234203d3e203338353133.roa
File:                     3132352e3231332e3132392e302f32342d3234203d3e203338353133.roa (raw, json)
Hash identifier:          2mEsmdzqCdf1bpy14PomfdBu/XEEKenJBEZiSoIrnsI=
Subject key identifier:   68:E0:FD:DF:DB:14:4C:0B:1A:70:0D:9A:BD:BE:6F:5E:5C:75:80:42
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       2050FFD41FAED1593D1947F9620BAA7D025A201E
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132352e3231332e3132392e302f32342d3234203d3e203338353133.roa
Signing time:             Mon 01 Jul 2024 01:03:17 +0000
ROA not before:           Mon 01 Jul 2024 00:58:17 +0000
ROA not after:            Mon 30 Jun 2025 01:03:17 +0000
asID:                     38513
IP address blocks:        125.213.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 11:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:50:ff:d4:1f:ae:d1:59:3d:19:47:f9:62:0b:aa:7d:02:5a:20:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jul  1 00:58:17 2024 GMT
            Not After : Jun 30 01:03:17 2025 GMT
        Subject: CN=68E0FDDFDB144C0B1A700D9ABDBE6F5E5C758042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ad:a1:a4:0a:14:bb:93:9e:85:fe:00:80:83:
                    75:84:76:be:e0:71:3b:c1:19:1a:89:6b:c6:bf:2a:
                    d1:b0:2f:cc:e5:e2:c4:4a:df:fe:80:04:72:c1:40:
                    e4:c1:31:38:7d:a8:d3:66:24:7d:36:2b:b2:29:10:
                    fb:30:f3:02:ee:70:cd:dd:68:45:1b:d5:57:23:e7:
                    80:61:94:89:fb:5a:8e:09:0c:ba:9f:ee:94:3c:74:
                    e8:c2:a9:62:59:4b:06:55:8c:34:39:04:7a:87:8f:
                    d2:14:fa:2f:bf:ff:65:e5:a7:e4:bf:5d:0c:2b:7c:
                    f3:22:7f:98:54:e3:07:ae:47:7d:08:2b:85:13:95:
                    89:8a:70:8e:3c:08:9c:d2:89:67:de:47:22:39:54:
                    79:f6:26:55:39:58:e0:f8:fa:c3:d7:49:a5:b0:f5:
                    ff:fc:cb:10:21:a3:d9:f6:df:7f:4f:f9:c0:e2:56:
                    57:03:c9:e8:21:bb:b1:9c:85:94:a6:3e:8b:03:3d:
                    40:b2:78:5b:23:89:47:3a:10:05:95:b5:b9:73:69:
                    2b:d4:f2:96:d4:5d:18:c2:24:fb:b0:0e:b0:fd:60:
                    1a:46:ff:cf:4d:58:1d:58:c5:be:bb:9a:9f:2b:c8:
                    13:c9:26:8d:67:9d:da:e7:ae:e3:cb:d4:f6:82:0d:
                    7e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E0:FD:DF:DB:14:4C:0B:1A:70:0D:9A:BD:BE:6F:5E:5C:75:80:42
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132352e3231332e3132392e302f32342d3234203d3e203338353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.213.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:e7:84:a6:0e:e1:9d:cc:66:46:0c:84:fe:ae:38:b8:38:13:
         3b:3a:db:55:ae:05:02:60:02:68:9e:3f:6a:8c:3c:84:fa:a2:
         0a:ee:2a:6d:2b:22:5b:de:0a:ed:98:66:9a:2e:9f:57:7d:5f:
         e3:1f:cb:a7:b9:60:e1:7a:38:bf:6a:59:6d:36:50:6a:bd:ea:
         6f:cf:5a:63:1b:1f:50:06:16:e3:e9:79:20:9a:b2:7b:50:90:
         2a:e9:0e:96:fa:8b:c4:8c:65:1a:ca:a4:f3:c9:c0:4a:13:78:
         b0:25:26:18:9d:f2:ef:0d:ff:3f:18:3e:15:35:99:86:48:a1:
         0e:01:8c:90:27:8c:be:69:5c:cb:07:70:f3:1c:70:d5:e8:57:
         db:dd:59:fe:b6:b1:40:3a:6a:21:66:c4:31:81:66:02:8a:9a:
         da:f1:74:5b:56:18:bd:2e:a3:b8:4e:41:89:a4:7b:d6:cb:00:
         9c:4d:18:fa:dd:18:94:3a:12:09:6f:0e:a9:4d:7d:a6:91:a8:
         12:16:8f:29:8b:3f:9a:b9:e0:2b:06:60:37:35:46:e6:46:a4:
         6a:af:22:05:a5:c4:c9:e5:46:8e:10:20:13:0e:71:fa:22:2e:
         93:2f:79:76:42:3c:81:13:99:95:3a:11:c2:3c:40:f8:9d:ff:
         1e:97:b1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:37 2024 by rpki-client on console-ams.rpki-client.org