Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230322e3134352e382e302f32312d3234203d3e203535363835.roa
File:                     3230322e3134352e382e302f32312d3234203d3e203535363835.roa (raw, json)
Hash identifier:          wIP2BKu07tWGNIX7AcLczGYizsqjkslJD62OJXPd7Qw=
Subject key identifier:   4D:FB:65:A1:70:BB:3B:A3:84:52:A7:2E:57:51:84:B7:B9:F3:1A:22
Certificate issuer:       /CN=B6F0131510E62F73E5F29246F9C8F691811A704D
Certificate serial:       6F9140F03418ED539EB1477C4FE93605DF1A398A
Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230322e3134352e382e302f32312d3234203d3e203535363835.roa
Signing time:             Mon 01 Jul 2024 01:05:49 +0000
ROA not before:           Mon 01 Jul 2024 01:00:49 +0000
ROA not after:            Mon 30 Jun 2025 01:05:49 +0000
asID:                     55685
IP address blocks:        202.145.8.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl
                          rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 00:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:91:40:f0:34:18:ed:53:9e:b1:47:7c:4f:e9:36:05:df:1a:39:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D
        Validity
            Not Before: Jul  1 01:00:49 2024 GMT
            Not After : Jun 30 01:05:49 2025 GMT
        Subject: CN=4DFB65A170BB3BA38452A72E575184B7B9F31A22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0b:d6:c9:2d:a3:f3:7c:3e:39:06:85:1b:c8:
                    fb:5f:30:29:21:3b:e2:01:e0:d8:a8:eb:ba:1c:fe:
                    90:8f:ad:a6:aa:f2:a2:61:bd:83:2c:c6:9f:4c:b0:
                    76:e2:5c:a6:47:0d:f2:46:a0:c9:a8:c6:a4:e8:09:
                    3b:4c:21:df:2d:32:4e:7b:f1:72:12:00:1d:fa:0a:
                    c6:5d:ad:83:2e:38:94:65:2b:6b:2e:b1:cf:c0:4d:
                    1e:5b:a6:c4:da:86:8e:c6:27:c7:6b:7c:6b:9b:85:
                    0b:c4:52:24:fc:72:a2:4f:c5:76:b2:5b:64:81:a0:
                    6d:ae:bb:e4:76:b5:8d:83:a8:aa:9b:83:63:92:ab:
                    ef:88:dc:37:8d:82:4e:ed:5a:6c:38:38:85:15:7a:
                    ca:2e:a3:c2:fa:35:50:c1:23:89:b0:a6:4b:41:ec:
                    c9:e4:30:1e:35:4d:70:ba:7a:44:77:52:e6:ae:6f:
                    50:2c:4a:80:d6:f7:7c:6a:91:7e:2d:0a:36:f1:a0:
                    45:bb:11:b3:7c:77:f3:e8:81:86:e2:80:b2:2a:5f:
                    0a:a2:2f:4a:c6:8c:e3:3c:3d:44:0a:69:55:1a:98:
                    ab:f3:6a:9a:c8:e1:02:c1:f2:48:e9:cb:d1:f1:1e:
                    5c:4f:a1:b6:67:dc:91:ec:e2:46:ce:22:74:73:02:
                    4b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:FB:65:A1:70:BB:3B:A3:84:52:A7:2E:57:51:84:B7:B9:F3:1A:22
            X509v3 Authority Key Identifier:
                keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230322e3134352e382e302f32312d3234203d3e203535363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.145.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7e:9d:97:5f:72:3e:c7:4c:c7:78:3c:27:5e:b9:0f:9c:08:70:
         13:fd:d1:19:3d:21:da:c4:0a:64:9e:3f:34:77:8e:f9:59:28:
         24:77:13:7a:44:01:13:00:dc:c6:bc:b4:34:a0:e5:bd:96:95:
         15:ed:03:b4:c5:93:37:e2:82:2b:64:f1:e3:75:1c:85:28:b5:
         91:73:4d:28:65:36:7e:b9:6a:98:07:80:aa:1c:5c:8e:11:41:
         c5:9b:7f:d9:d2:5c:5b:f2:d8:79:3b:69:50:4a:9a:20:7f:67:
         be:37:66:0e:d9:66:f8:e7:22:b6:e5:0e:82:99:6c:42:54:fa:
         e4:08:fc:69:70:66:26:5c:17:4f:76:1d:33:4e:8d:2c:ed:84:
         87:8e:6d:4d:e2:81:28:48:d2:2d:3e:5c:d6:7c:68:ce:4b:7c:
         2a:ab:e6:63:03:01:9a:48:c9:fc:01:31:2e:3e:c9:84:cb:36:
         81:a2:95:ab:18:f0:7a:1f:e8:e1:64:37:41:ac:47:8a:96:64:
         98:7a:95:13:f9:2c:8d:07:e9:d7:eb:42:52:0c:b6:3b:6b:5c:
         95:6b:f8:e1:92:d9:d3:29:73:10:d2:44:1b:11:ee:a9:44:02:
         68:f8:3e:e5:c3:07:7a:0d:5e:83:62:37:9f:38:5d:d1:0d:58:
         04:e5:43:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:18 2024 by rpki-client on console-fra.rpki-client.org