Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/3230332e3137342e382e302f32312d3234203d3e203234353233.roa
File:                     3230332e3137342e382e302f32312d3234203d3e203234353233.roa (raw, json)
Hash identifier:          siujlwkzUou5K4WYe044CdlVmPWfgaJ1MmQrHhAChAg=
Subject key identifier:   2E:E5:CD:87:08:05:F1:5A:AD:E0:D5:64:16:8A:45:E7:16:8D:62:EB
Certificate issuer:       /CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38
Certificate serial:       11416F205E703E87504E581EF033D4A0F386173B
Authority key identifier: 11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/3230332e3137342e382e302f32312d3234203d3e203234353233.roa
Signing time:             Mon 01 Jul 2024 01:03:58 +0000
ROA not before:           Mon 01 Jul 2024 00:58:58 +0000
ROA not after:            Mon 30 Jun 2025 01:03:58 +0000
asID:                     24523
IP address blocks:        203.174.8.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl
                          rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:41:6f:20:5e:70:3e:87:50:4e:58:1e:f0:33:d4:a0:f3:86:17:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38
        Validity
            Not Before: Jul  1 00:58:58 2024 GMT
            Not After : Jun 30 01:03:58 2025 GMT
        Subject: CN=2EE5CD870805F15AADE0D564168A45E7168D62EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9a:e2:22:3e:57:31:fb:5e:fe:de:8f:a5:cf:
                    74:2f:23:6b:7e:e8:0a:47:9c:5c:c1:2e:ac:1a:ea:
                    f8:a4:cd:3d:40:c1:bb:05:c8:59:9f:86:3d:10:8f:
                    66:a4:73:bf:99:1b:1c:73:2d:91:f3:78:92:9b:f4:
                    5c:94:9c:c0:05:ed:e9:80:a9:6f:f9:d9:b2:ac:60:
                    82:f8:82:e9:10:49:84:01:c8:1d:83:a7:77:f5:cf:
                    fc:5e:6e:d2:ca:ce:55:a1:d7:e8:9a:01:16:51:9e:
                    63:bf:f0:55:b1:70:7f:97:84:30:3d:c6:71:26:ae:
                    1e:f7:87:ff:14:c8:59:4a:a8:52:ab:ee:e7:f3:d0:
                    c6:98:31:ac:c0:a5:89:34:7b:f5:e0:31:9b:0a:82:
                    a0:95:14:9d:68:16:70:2e:94:49:02:ab:10:19:40:
                    ad:94:19:f6:25:82:2f:ea:41:da:57:23:06:16:d2:
                    0b:d2:e0:85:8d:08:86:c4:5d:f6:ea:6f:92:df:d1:
                    3a:cb:42:e6:80:c3:52:1f:1f:94:5b:4f:1f:b2:17:
                    e0:74:90:52:e3:03:60:01:23:54:8f:73:98:bf:d5:
                    8d:7c:16:d8:6a:b9:cb:8e:ef:6c:5a:1b:9b:eb:e2:
                    b2:92:f2:a6:60:0f:3d:ef:ea:9f:5a:a2:b6:e1:e3:
                    47:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E5:CD:87:08:05:F1:5A:AD:E0:D5:64:16:8A:45:E7:16:8D:62:EB
            X509v3 Authority Key Identifier:
                keyid:11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/3230332e3137342e382e302f32312d3234203d3e203234353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.174.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         88:e9:24:ef:d1:0f:17:3d:96:ea:0e:7c:2d:2e:0e:b9:d6:3f:
         82:67:2e:3e:de:0c:43:65:5f:45:00:75:18:a3:4f:30:45:70:
         aa:bc:fd:7f:8c:72:c8:de:87:30:a6:cf:e3:94:ee:14:e3:87:
         6b:a6:26:fd:74:b9:43:db:52:e3:24:e9:bc:68:43:13:5d:44:
         5c:cf:43:04:b4:61:dd:f8:34:46:a8:2f:fd:f4:c6:09:29:58:
         54:0b:eb:65:14:b3:ff:72:08:d9:cc:83:bc:15:c4:8a:02:70:
         f0:c0:64:35:ba:c4:45:92:88:fb:db:6e:e2:c1:af:98:75:dd:
         2f:1b:fc:09:08:a0:71:10:3d:72:d0:63:09:47:c0:71:5e:56:
         ca:81:1c:45:fa:3e:9a:26:bd:f9:c6:e9:e7:9a:5a:22:4f:41:
         26:d6:ce:bc:36:3c:1b:6d:b5:d3:8e:81:f9:f6:6d:90:61:77:
         3d:af:ac:5c:a8:43:c2:65:f8:91:32:98:a1:df:a4:70:fd:ce:
         95:c8:76:a3:d3:f6:c8:28:2e:3f:23:f3:36:73:f6:b7:8b:97:
         c4:85:d3:76:47:3c:78:83:38:b4:6f:df:eb:fc:27:28:1a:ad:
         65:1f:fd:d7:04:c6:52:81:de:29:0e:0a:88:c2:a9:8c:ac:8d:
         82:9d:1f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:48 2024 by rpki-client on console-fra.rpki-client.org