Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/AS56242.roa
File:                     AS56242.roa (raw, json)
Hash identifier:          Cp+oC3UzlNuIpBOitsjAmArAsajIyniI40Cn7KQpxEY=
Subject key identifier:   BD:53:C8:19:A3:76:49:35:36:1D:4A:FC:C4:21:C6:1E:AC:23:51:62
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       73E06E223C0C7A38205CA8A1E8284D5B6D5DA429
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/AS56242.roa
Signing time:             Tue 13 Feb 2024 07:00:00 +0000
ROA not before:           Tue 13 Feb 2024 06:55:00 +0000
ROA not after:            Tue 11 Feb 2025 07:00:00 +0000
asID:                     56242
IP address blocks:        101.255.170.0/23 maxlen: 23
                          101.255.170.0/24 maxlen: 24
                          101.255.171.0/24 maxlen: 24
                          115.124.70.0/23 maxlen: 23
                          115.124.70.0/24 maxlen: 24
                          115.124.71.0/24 maxlen: 24
                          202.182.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl
                          rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:e0:6e:22:3c:0c:7a:38:20:5c:a8:a1:e8:28:4d:5b:6d:5d:a4:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: Feb 13 06:55:00 2024 GMT
            Not After : Feb 11 07:00:00 2025 GMT
        Subject: CN=BD53C819A3764935361D4AFCC421C61EAC235162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:24:48:e3:8c:a1:f0:c2:1f:f6:39:e7:d3:75:
                    de:18:ac:e2:70:d4:49:c7:a4:3e:76:2d:7f:d4:d9:
                    1f:3c:5b:ba:d1:b2:c8:0d:57:55:29:6b:23:1b:ea:
                    09:01:16:ac:d5:24:b9:cc:e4:d7:97:38:7b:5b:22:
                    83:f3:fa:29:4e:e9:2e:dc:61:fa:3c:36:eb:7e:be:
                    01:d0:12:f5:55:77:38:58:88:2c:b1:25:b3:d3:ad:
                    a9:89:2c:45:a7:d4:a1:03:c1:73:18:31:5d:4c:05:
                    3d:8a:b2:21:45:8d:64:ba:7b:fc:ae:5a:25:c2:3d:
                    27:0c:91:f3:b9:05:ca:15:b4:2e:08:ba:5a:59:fc:
                    c2:ac:19:61:e8:59:77:2c:34:bb:b5:63:71:dd:f2:
                    83:f2:17:6b:86:ae:18:bc:8a:41:a5:6a:40:e8:44:
                    f9:16:f9:9c:1b:4a:31:73:c5:5f:fd:b1:52:0f:f7:
                    37:d5:a6:9e:aa:39:00:62:af:a4:dd:7f:d3:a4:2d:
                    47:bb:b9:5d:60:8e:fe:df:d1:0d:d1:b9:98:4d:a2:
                    f9:ec:2e:d1:22:5a:82:ef:14:e5:af:1f:8b:c0:01:
                    70:08:8b:e2:5d:e6:3b:6e:64:5b:79:4e:4c:54:ad:
                    8b:d3:b7:11:c3:c5:1c:5a:a6:46:0d:d2:6e:c1:86:
                    b6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:53:C8:19:A3:76:49:35:36:1D:4A:FC:C4:21:C6:1E:AC:23:51:62
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/AS56242.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.255.170.0/23
                  115.124.70.0/23
                  202.182.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:22:e6:df:c8:3c:09:b3:e1:26:f5:a0:b4:99:c6:4e:95:86:
         4d:b2:ea:8a:44:f3:5d:ce:9d:eb:92:1e:8d:92:d8:f2:cf:65:
         71:8c:76:60:c1:b0:0b:36:a8:fd:31:96:52:fe:7e:a6:4a:df:
         f0:3d:7c:d5:28:33:bb:f8:df:47:c0:85:be:b1:f2:42:db:09:
         8e:48:84:6c:60:b9:19:68:f7:8b:5f:35:85:95:13:77:1a:f3:
         20:02:44:c9:20:fa:3a:a9:6b:53:f1:de:82:a9:10:d6:78:b5:
         4b:7a:35:02:10:10:37:71:a9:88:23:5f:5b:62:fb:d0:1b:98:
         0c:f1:a2:76:bb:c2:6c:26:ac:17:76:96:73:45:8c:55:0b:4c:
         c0:0e:d4:44:10:5a:c9:df:1a:80:0f:60:0b:2c:e6:75:de:06:
         6a:ee:72:b5:ac:8e:a8:c5:4c:c8:f0:9d:ad:6d:b6:2f:50:71:
         72:27:32:16:f1:10:89:8e:40:47:af:b2:d4:66:f5:01:0e:c9:
         73:a6:42:53:0f:91:27:57:b3:49:b2:9e:82:f6:7d:57:b9:be:
         e9:ef:81:b2:fe:5e:51:4c:56:5c:71:f5:89:7b:31:c5:44:6d:
         44:2e:0f:77:7c:33:c0:0b:ea:fb:cb:df:e5:93:be:d2:d8:05:
         2c:1d:51:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:05:57 2024 by rpki-client on console-fra.rpki-client.org