Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3230322e3135322e302e302f31382d3234203d3e2034383030.roa
File:                     3230322e3135322e302e302f31382d3234203d3e2034383030.roa (raw, json)
Hash identifier:          mhUqYw0f8M1iLFhL6suj2jQ/c8hIK0beZMsuAYVnRcE=
Subject key identifier:   7D:3D:AE:24:C6:7E:86:60:A9:76:E3:20:45:C4:3A:03:41:10:13:9D
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       1799F3E622309960E1405313CD183455B3C6F218
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3230322e3135322e302e302f31382d3234203d3e2034383030.roa
Signing time:             Mon 01 Jul 2024 01:03:21 +0000
ROA not before:           Mon 01 Jul 2024 00:58:21 +0000
ROA not after:            Mon 30 Jun 2025 01:03:21 +0000
asID:                     4800
IP address blocks:        202.152.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 11:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:99:f3:e6:22:30:99:60:e1:40:53:13:cd:18:34:55:b3:c6:f2:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jul  1 00:58:21 2024 GMT
            Not After : Jun 30 01:03:21 2025 GMT
        Subject: CN=7D3DAE24C67E8660A976E32045C43A034110139D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e1:08:80:62:de:fb:cd:5a:9c:1d:58:22:de:
                    b5:53:4f:66:49:de:46:84:10:56:91:75:91:9f:a0:
                    d5:6f:c7:73:5a:d4:fa:1e:49:7d:f1:f2:d1:a5:07:
                    27:6b:70:d0:78:26:9d:c5:b0:98:20:80:0b:f1:6d:
                    7f:2f:e9:df:75:7b:bf:84:e0:7f:a6:d7:87:8b:77:
                    2f:0a:3f:06:cb:df:5a:ed:50:43:98:e0:5b:cf:ec:
                    4a:05:7b:1c:25:f7:6f:89:09:ba:b5:8f:3b:08:57:
                    cc:2a:3e:1f:9d:f7:4b:87:c5:cf:0e:c2:a2:49:f9:
                    e5:f5:bd:26:d1:25:de:6b:57:7b:d1:94:0e:4a:cc:
                    a9:45:ad:1d:39:23:06:08:37:a2:fe:72:54:7a:51:
                    9e:2d:86:d5:b3:1a:a6:fc:a1:10:4c:b1:0b:6c:57:
                    d6:7c:b3:55:8d:51:d4:d4:d6:1b:8f:53:1a:78:7d:
                    80:16:23:56:16:c5:6c:d5:d7:cf:42:b2:79:58:a6:
                    86:1e:5b:29:0d:4e:d5:58:5e:09:c2:0a:e2:ab:01:
                    7d:98:72:d4:a0:6c:a2:7c:2e:70:19:68:3f:fd:dd:
                    c8:5d:4c:2f:1b:c9:3f:e3:5c:af:dd:de:21:6a:23:
                    b7:a0:98:69:06:ec:6e:8f:d9:c4:9d:f7:72:2c:5b:
                    f1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:3D:AE:24:C6:7E:86:60:A9:76:E3:20:45:C4:3A:03:41:10:13:9D
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3230322e3135322e302e302f31382d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.152.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         ac:15:c8:e0:f8:43:d2:5f:7f:3c:d4:bf:59:c7:11:b8:b7:9c:
         78:cc:e9:f9:ce:2e:39:86:a2:13:f9:ef:63:e8:15:34:cb:1e:
         a5:83:c9:ff:76:91:79:b9:2c:f4:cc:ff:1e:ec:33:6d:04:df:
         14:74:76:f1:8a:72:72:64:c4:05:38:df:a2:b4:65:c7:9c:4e:
         0c:73:01:8a:0c:ca:63:1a:38:5c:e4:eb:df:37:49:b4:e9:53:
         1d:06:fc:51:62:dd:aa:da:6e:c2:b6:e6:11:3e:91:a8:39:c9:
         eb:49:25:cc:cc:e9:25:24:ca:33:c9:ab:e9:ad:75:6d:b3:ad:
         14:65:3e:5a:77:2e:f2:02:6b:98:11:41:cd:6f:e0:f2:88:c7:
         7d:19:26:89:88:ab:71:78:45:e7:1d:81:de:13:a9:de:63:9d:
         1f:c1:8b:2d:c1:15:f9:82:fe:0f:cd:30:fc:9a:ab:e9:ae:dd:
         a6:68:90:b0:97:fc:eb:10:be:72:a8:b6:c7:e4:e1:df:91:1f:
         2e:a8:ff:51:2c:9f:29:3c:96:36:16:3c:fb:c3:90:8b:c6:e4:
         3c:27:03:72:ef:65:94:50:42:c4:7f:2d:a9:f0:1e:93:cc:2f:
         9a:7c:ed:f8:e9:37:55:4b:71:fd:8a:e9:ef:60:29:b6:74:2f:
         c4:0a:f5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:37 2024 by rpki-client on console-ams.rpki-client.org