Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3231362e302f32342d3234203d3e203338313432.roa
File:                     3231302e35372e3231362e302f32342d3234203d3e203338313432.roa (raw, json)
Hash identifier:          s/euz86gX5xq5QMjacpBptIN1xZg6m7QcbGLPh/tOig=
Subject key identifier:   C4:40:BD:22:40:BF:41:A0:92:48:63:C6:4C:18:34:F1:FF:ED:6A:5D
Certificate issuer:       /CN=29A4AE587F980E73A344FD1ED55C47566E609511
Certificate serial:       4955E61BA0D9A7223AAEDB1D232A5371F4177FBC
Authority key identifier: 29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3231362e302f32342d3234203d3e203338313432.roa
Signing time:             Mon 20 Nov 2023 12:00:02 +0000
ROA not before:           Mon 20 Nov 2023 11:55:02 +0000
ROA not after:            Mon 18 Nov 2024 12:00:02 +0000
asID:                     38142
IP address blocks:        210.57.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl
                          rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Jun 2024 07:40:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:55:e6:1b:a0:d9:a7:22:3a:ae:db:1d:23:2a:53:71:f4:17:7f:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29A4AE587F980E73A344FD1ED55C47566E609511
        Validity
            Not Before: Nov 20 11:55:02 2023 GMT
            Not After : Nov 18 12:00:02 2024 GMT
        Subject: CN=C440BD2240BF41A0924863C64C1834F1FFED6A5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:00:98:be:bd:da:e2:9e:8f:b9:9c:67:7d:85:
                    18:a8:86:ec:51:56:4a:2b:be:ed:12:ce:83:32:41:
                    fd:35:d6:9c:c7:80:3b:7a:d2:14:79:da:ad:9e:56:
                    d2:20:57:45:35:1a:29:8a:80:26:ce:9b:8b:4e:d1:
                    16:8b:0e:6e:2f:5f:84:58:b2:9d:3b:1b:d2:36:08:
                    be:31:8c:0b:2f:ff:75:19:33:37:10:52:df:b1:b1:
                    18:4a:80:5d:4d:a7:4c:8e:68:4b:76:0b:e9:21:9e:
                    ff:24:ca:3e:61:8a:bd:62:f9:7e:a3:93:25:75:d8:
                    95:26:3a:8f:2c:06:8d:cd:a9:b6:70:7f:80:5f:3f:
                    3b:6c:0b:43:ac:10:0b:85:93:0d:87:35:02:c0:90:
                    a4:2d:53:ad:1c:0c:ab:0d:7d:8f:d0:7a:dd:3f:c3:
                    c1:e4:24:37:cc:2b:02:01:2b:85:4e:61:ec:a8:4a:
                    73:5c:d1:9a:43:b5:96:82:c1:43:18:5b:b9:00:93:
                    2c:66:fc:7a:d1:cc:a3:b3:f3:1b:12:01:82:9b:fa:
                    8a:a3:d8:0f:14:ba:de:96:69:98:91:38:fa:a9:6b:
                    9d:4d:95:4a:d6:1b:8e:a0:3a:bc:48:23:73:d7:7a:
                    2d:94:a5:54:41:25:0b:64:67:24:21:dc:5a:81:9d:
                    0b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:40:BD:22:40:BF:41:A0:92:48:63:C6:4C:18:34:F1:FF:ED:6A:5D
            X509v3 Authority Key Identifier:
                keyid:29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3231362e302f32342d3234203d3e203338313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.57.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:3f:bd:9b:ad:83:6d:14:11:99:0b:02:30:57:da:42:aa:df:
         a0:1a:1e:53:8b:88:ab:a3:77:0c:02:f7:fd:1c:ca:f3:37:fe:
         d6:9f:40:3a:98:ad:af:81:c3:5b:b2:41:ab:7d:01:6d:e1:11:
         65:2d:99:45:61:5b:50:5c:9a:4f:0f:90:c1:dc:b3:c9:ff:24:
         83:a2:31:a1:10:4e:3c:fc:fa:07:54:c7:73:44:1d:f6:f9:48:
         b5:82:3a:c8:ed:ab:07:a4:b8:25:91:68:cd:26:5e:9f:6e:41:
         76:8b:e5:23:af:93:69:55:ce:cb:02:f5:94:6b:70:f1:51:14:
         88:22:b4:64:1e:07:7f:1a:90:d1:10:cf:9e:f3:02:85:9e:28:
         04:ed:9f:f0:ff:30:f4:47:60:56:1d:91:8a:4e:b7:ea:41:f8:
         6e:b2:cb:69:72:90:44:6b:04:cb:ad:a9:28:bc:07:c6:b1:be:
         be:a8:2e:36:61:93:c7:cd:76:2a:37:ea:99:f7:8c:67:6e:70:
         bc:40:07:3d:29:c9:4b:cb:24:d9:1f:1e:53:17:35:48:a6:08:
         42:72:c9:5e:22:a9:55:1e:72:ba:6b:d5:25:6c:f7:a4:af:81:
         eb:d6:40:b5:7c:dd:01:00:32:07:6b:03:8e:52:82:69:39:8c:
         5c:fc:5c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 13:19:02 2024 by rpki-client on console-fra.rpki-client.org