Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/3230332e3136392e35352e302f32342d3234203d3e20313532303831.roa
File:                     3230332e3136392e35352e302f32342d3234203d3e20313532303831.roa (raw, json)
Hash identifier:          oj6vvaMz9tfk1vNF9ouT/83WTn6YXO1VPF03UrADxKA=
Subject key identifier:   87:07:88:15:26:6A:60:3B:EE:67:93:03:92:D0:6F:45:EA:DA:6A:30
Certificate issuer:       /CN=48FC0122D8C842BAC13711F1284D1D38DE36EA1B
Certificate serial:       6563E85E888889B66D5C110B727633B876071EBF
Authority key identifier: 48:FC:01:22:D8:C8:42:BA:C1:37:11:F1:28:4D:1D:38:DE:36:EA:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/3230332e3136392e35352e302f32342d3234203d3e20313532303831.roa
Signing time:             Thu 08 Feb 2024 06:29:28 +0000
ROA not before:           Thu 08 Feb 2024 06:24:28 +0000
ROA not after:            Thu 06 Feb 2025 06:29:28 +0000
asID:                     152081
IP address blocks:        203.169.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.crl
                          rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 01:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:63:e8:5e:88:88:89:b6:6d:5c:11:0b:72:76:33:b8:76:07:1e:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48FC0122D8C842BAC13711F1284D1D38DE36EA1B
        Validity
            Not Before: Feb  8 06:24:28 2024 GMT
            Not After : Feb  6 06:29:28 2025 GMT
        Subject: CN=87078815266A603BEE67930392D06F45EADA6A30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:27:14:a0:e3:d4:f5:cc:41:d5:fd:9b:60:00:
                    6a:06:b5:f0:1f:db:59:d7:d5:1d:dc:3b:3d:ed:17:
                    71:aa:ae:ee:98:c8:f8:78:5a:37:a9:78:ab:7a:9a:
                    86:4f:42:fa:c1:f9:e6:56:ed:12:d4:0b:8f:c9:3c:
                    2b:c9:ec:b6:6b:58:d7:d9:c8:f6:45:e7:33:27:4a:
                    f1:0a:d3:7a:00:88:f5:af:ab:cf:97:a8:64:d3:6c:
                    e2:af:73:6b:cf:7e:c5:e4:43:fd:9c:75:b4:11:bf:
                    1e:aa:d1:ff:38:20:84:65:e5:5a:bf:51:a4:ab:a2:
                    65:92:e8:6d:0c:87:1e:50:0c:03:e1:79:ff:3d:51:
                    e8:cf:c9:9d:91:9b:f9:18:07:a6:30:4c:ea:e0:71:
                    f8:2c:42:72:71:a3:b8:ef:4f:36:f6:80:74:ea:e1:
                    89:4b:42:88:f5:b5:0e:6b:2a:c5:fd:fa:9b:a6:3f:
                    4d:ef:f5:23:87:4f:c8:95:44:eb:4e:bd:7a:0f:1f:
                    4c:0e:d2:2e:c1:9a:c9:c9:2a:c4:63:af:3c:ba:37:
                    e7:e2:36:9b:d6:18:d8:21:00:cc:75:15:37:5f:13:
                    82:a5:42:95:a4:5d:e2:bc:4f:0c:71:8a:1f:b0:90:
                    29:61:21:b4:fe:28:e0:ab:47:37:1b:07:a1:e4:9b:
                    04:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:07:88:15:26:6A:60:3B:EE:67:93:03:92:D0:6F:45:EA:DA:6A:30
            X509v3 Authority Key Identifier:
                keyid:48:FC:01:22:D8:C8:42:BA:C1:37:11:F1:28:4D:1D:38:DE:36:EA:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/3230332e3136392e35352e302f32342d3234203d3e20313532303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.169.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:f1:5c:ec:8a:c3:5f:9b:38:66:aa:26:69:d1:06:13:cd:09:
         59:4a:c0:24:60:6f:0d:dc:69:d4:9a:fc:93:fc:16:e7:c2:d7:
         2f:c5:c1:c3:48:43:8d:17:c0:ec:a1:69:61:41:69:5d:53:8c:
         52:28:7d:96:34:d6:7a:9c:3d:2a:54:e1:51:85:c3:d6:f4:8c:
         45:e2:3b:07:55:bc:28:4f:8b:9e:79:f0:88:14:97:b4:e3:0b:
         24:dc:1b:d1:9b:74:d3:42:bf:20:a9:68:a4:c1:6a:9f:ec:0b:
         7b:d6:3e:14:4b:d3:22:cd:3c:ae:72:84:2e:5d:cd:b9:ea:d3:
         f7:c5:bf:a4:d6:c0:7a:3c:1a:a3:c9:21:ee:41:81:00:f2:f3:
         2b:c8:39:02:a9:64:57:e5:ea:50:d1:8e:75:8e:81:13:1c:b5:
         92:9b:d1:f4:bf:4d:ac:06:44:6e:4f:1f:eb:46:1b:7e:4d:92:
         66:b2:51:f9:6a:42:40:b3:f5:4d:70:80:53:0f:22:3d:e7:bd:
         98:ab:52:d7:b4:a8:c2:7a:27:d8:da:8a:b6:1e:a2:99:5e:bf:
         fb:20:88:c3:0a:5a:5f:d4:89:03:b0:68:c3:e4:b2:93:39:9d:
         f7:61:68:b9:27:d4:69:bf:e4:f4:9a:fd:dd:a7:e8:f2:da:3e:
         53:28:bb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:17 2024 by rpki-client on console-ams.rpki-client.org