Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132352e3231332e3133312e302f32342d3234203d3e203338353133.roa
File:                     3132352e3231332e3133312e302f32342d3234203d3e203338353133.roa (raw, json)
Hash identifier:          5XdxCcIkxhSvNiSPxo/VfZyW5/MEOx6mKkduxYwIbVY=
Subject key identifier:   DA:28:61:10:EA:7E:32:DA:1C:0F:14:4B:76:45:1A:6D:AC:13:1F:D1
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       02F933B5E7DD3069C7B68C869AF2B57B0339F243
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132352e3231332e3133312e302f32342d3234203d3e203338353133.roa
Signing time:             Mon 31 Jul 2023 00:04:33 +0000
ROA not before:           Sun 30 Jul 2023 23:59:33 +0000
ROA not after:            Mon 29 Jul 2024 00:04:33 +0000
asID:                     38513
IP address blocks:        125.213.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 10:44:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f9:33:b5:e7:dd:30:69:c7:b6:8c:86:9a:f2:b5:7b:03:39:f2:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jul 30 23:59:33 2023 GMT
            Not After : Jul 29 00:04:33 2024 GMT
        Subject: CN=DA286110EA7E32DA1C0F144B76451A6DAC131FD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b5:79:60:30:20:a8:e2:a4:db:7c:46:20:31:
                    1f:59:a6:f4:51:41:88:04:f0:e1:65:a2:f8:95:19:
                    7f:c4:3d:ef:ce:3e:04:eb:87:cc:b4:a0:3d:7e:0d:
                    d6:4e:9a:2c:77:75:e6:52:20:73:01:ab:8c:f8:f5:
                    f2:80:0e:dc:b7:da:b2:4d:91:7a:55:b6:15:de:d3:
                    99:70:5c:95:a5:e3:ea:07:85:14:77:13:e8:ce:ea:
                    31:24:5a:64:bc:12:8f:06:55:6f:d1:c0:0a:01:5d:
                    63:65:cc:1d:c5:a2:4b:72:3e:9b:d4:84:7a:cc:9f:
                    18:a2:0e:b8:62:ec:11:79:d1:24:71:b3:43:7e:1b:
                    92:cd:90:98:b2:82:9f:d6:e7:c2:a4:75:0b:82:8d:
                    89:8d:cd:29:7b:fb:ce:d5:95:80:91:fb:b9:56:73:
                    7b:c0:2a:aa:f5:09:48:88:f5:89:28:8c:ad:a7:c2:
                    0f:a6:ac:38:24:19:dc:75:3c:ea:b5:5d:4c:f0:27:
                    05:70:f6:dd:20:a5:ea:e3:8e:dd:f9:90:e5:00:23:
                    75:33:f6:34:32:e7:31:82:80:82:3a:b5:4f:ac:13:
                    6c:dd:54:4f:31:84:d3:22:07:70:c6:4c:ea:4e:fa:
                    5c:44:17:c6:42:2b:fc:50:23:2e:a7:47:0c:7d:1e:
                    31:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:28:61:10:EA:7E:32:DA:1C:0F:14:4B:76:45:1A:6D:AC:13:1F:D1
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132352e3231332e3133312e302f32342d3234203d3e203338353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.213.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:42:9a:2a:c8:ed:66:0a:4a:cb:f2:af:60:37:33:43:de:43:
         75:7a:86:7a:6d:db:48:4c:ea:5b:04:13:50:e1:95:18:0c:2a:
         0b:80:96:e3:b0:96:20:e4:46:d8:32:c1:30:d0:13:9c:9e:d0:
         6e:32:ce:60:4f:b6:6a:5e:f3:2d:c4:ea:e9:b1:fb:75:26:87:
         76:f9:e2:c2:21:e0:43:b9:d1:e5:e3:ff:1d:c8:a1:a6:de:1d:
         23:70:14:28:82:87:42:28:5c:bc:bf:f0:94:06:a5:a2:fc:af:
         65:85:08:dc:56:8a:10:00:ed:4e:e1:51:b9:ab:1c:45:36:a6:
         cc:ad:6c:ff:1e:75:a5:7f:69:4c:a4:cc:70:f9:d2:d7:35:40:
         8e:40:79:0c:33:5d:26:f1:e9:cc:75:8b:45:87:12:58:f1:94:
         29:a7:59:b1:57:63:c3:8f:95:f7:e7:e8:10:6e:e9:4d:05:2e:
         f3:f2:64:dc:2b:71:1e:7c:54:96:1e:96:bf:a5:bc:a6:0f:1a:
         5d:85:04:e3:10:ba:04:bd:8a:ed:13:35:60:34:7d:cb:52:1d:
         34:bd:b3:b2:b5:e9:3a:d8:70:95:e9:ed:41:4a:22:26:6b:d0:
         95:e4:14:4a:54:53:5c:58:fd:2d:3f:a3:4e:d8:58:38:35:33:
         b3:66:67:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 03:06:50 2024 by rpki-client on console-fra.rpki-client.org