Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132352e3231332e3133312e302f32342d3234203d3e203338353133.roa
File:                     3132352e3231332e3133312e302f32342d3234203d3e203338353133.roa (raw, json)
Hash identifier:          9w8q1makgGaLVVcM/XoNRSN4LXGDgFP1WObIkyKFUxU=
Subject key identifier:   68:1E:F6:6B:95:41:8B:E3:1C:C5:EE:81:DB:C5:1D:0D:AB:55:1B:87
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       2AA1BFD150573DAA72AEC7C2D3A5635191E05D4A
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132352e3231332e3133312e302f32342d3234203d3e203338353133.roa
Signing time:             Mon 01 Jul 2024 01:03:21 +0000
ROA not before:           Mon 01 Jul 2024 00:58:21 +0000
ROA not after:            Mon 30 Jun 2025 01:03:21 +0000
asID:                     38513
IP address blocks:        125.213.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 11:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:a1:bf:d1:50:57:3d:aa:72:ae:c7:c2:d3:a5:63:51:91:e0:5d:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jul  1 00:58:21 2024 GMT
            Not After : Jun 30 01:03:21 2025 GMT
        Subject: CN=681EF66B95418BE31CC5EE81DBC51D0DAB551B87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:67:31:cc:52:a2:ee:df:46:c5:58:f9:81:f1:
                    88:a4:a3:93:f8:0a:68:87:d1:b6:44:94:fe:15:75:
                    48:cf:74:00:14:63:f4:d6:34:05:48:44:90:cb:d4:
                    05:07:dc:33:42:9d:5d:42:46:b9:ad:2c:f0:57:e4:
                    b7:02:36:ed:75:e8:2b:8f:75:cd:9b:f1:bf:e5:f2:
                    28:24:6b:4b:d2:be:c3:ee:f8:44:42:06:a4:6f:11:
                    ef:2f:40:5d:a7:dd:40:ba:c7:ff:45:b1:18:c6:dc:
                    e5:1d:ef:aa:dd:90:f6:bd:6d:d9:13:a0:66:e0:1d:
                    f5:f6:ac:5d:d9:eb:1b:c9:e5:98:c3:e8:d4:17:9a:
                    39:5d:5d:1e:8b:5b:e0:8a:54:12:f1:3c:67:0b:6b:
                    20:ac:6d:2a:fd:d2:99:e9:44:1b:f7:c1:5d:3d:14:
                    d3:23:a5:7c:b5:fb:b8:6f:a9:c2:3e:e7:ea:bb:5e:
                    97:c3:e0:7b:75:d5:89:a5:58:1b:90:c7:b7:7f:85:
                    96:d1:1b:55:d0:69:a6:db:96:2f:f0:cd:2a:ea:f9:
                    70:da:b2:1c:91:b1:cd:56:47:25:cd:20:90:19:81:
                    ad:25:66:f0:77:01:39:ee:ab:7b:34:b2:54:a9:99:
                    af:1b:bb:21:e1:86:46:ac:a8:af:4c:29:b6:9c:88:
                    77:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:1E:F6:6B:95:41:8B:E3:1C:C5:EE:81:DB:C5:1D:0D:AB:55:1B:87
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132352e3231332e3133312e302f32342d3234203d3e203338353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.213.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:52:8e:c7:41:21:89:9b:ad:61:40:68:82:0e:9e:f7:1e:f8:
         01:c1:10:3c:1d:03:0d:b0:07:52:fd:ac:e6:6d:1c:7e:89:4a:
         3f:d7:f2:0c:60:02:1f:57:15:b9:b9:ac:ec:65:67:b0:32:26:
         e9:e6:01:4b:a7:a5:f0:4f:b6:13:b9:03:7f:2a:20:fb:fd:53:
         47:95:f9:db:a1:d0:ae:61:71:71:3b:25:3d:96:82:38:e1:27:
         30:82:e3:54:7f:2c:4c:b6:22:a1:7d:68:44:f2:77:57:fe:2d:
         cb:8f:48:ac:82:b6:e8:57:58:7f:3f:8e:89:c7:cb:09:c2:e0:
         28:7c:e6:e3:a5:25:7c:27:72:51:bf:db:98:42:ce:a1:ca:a3:
         ce:e7:42:69:3c:90:e2:6c:3d:28:d0:73:fa:2a:be:3a:6e:df:
         9b:50:93:19:99:5b:ee:95:23:5c:68:03:ca:0a:0c:07:c7:52:
         8a:33:93:10:a5:45:08:46:85:9a:4b:a7:ae:c8:ec:24:2b:00:
         14:5b:31:6f:b9:cd:ae:a5:42:24:12:74:4c:f4:c6:24:c1:01:
         6a:fa:d0:24:7f:91:0d:80:2e:42:a2:5e:dd:12:ba:2f:83:aa:
         16:66:d0:01:a2:17:41:0c:36:08:2b:74:79:21:6a:ff:f5:e3:
         76:22:0f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:11 2024 by rpki-client on console-fra.rpki-client.org