Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/3230332e38342e3135322e302f32312d3234203d3e203234353233.roa
File:                     3230332e38342e3135322e302f32312d3234203d3e203234353233.roa (raw, json)
Hash identifier:          IZIdj4MVauVRDpCQok6dBv3nTQTvOFsWDntkbq+SV20=
Subject key identifier:   F6:62:83:C8:0E:C9:8A:2E:41:4D:43:58:27:A4:2F:73:38:8E:7E:40
Certificate issuer:       /CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38
Certificate serial:       4C478C1C8BE8846C7752672926E4E1D31B236D49
Authority key identifier: 11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/3230332e38342e3135322e302f32312d3234203d3e203234353233.roa
Signing time:             Mon 01 Jul 2024 01:03:58 +0000
ROA not before:           Mon 01 Jul 2024 00:58:58 +0000
ROA not after:            Mon 30 Jun 2025 01:03:58 +0000
asID:                     24523
IP address blocks:        203.84.152.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl
                          rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:47:8c:1c:8b:e8:84:6c:77:52:67:29:26:e4:e1:d3:1b:23:6d:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38
        Validity
            Not Before: Jul  1 00:58:58 2024 GMT
            Not After : Jun 30 01:03:58 2025 GMT
        Subject: CN=F66283C80EC98A2E414D435827A42F73388E7E40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e4:50:c9:4c:7d:eb:91:38:d5:e1:43:1a:3a:
                    44:d1:99:5a:b6:3b:13:9d:ba:15:b6:83:c4:d0:d2:
                    76:b3:1d:81:77:63:2b:2a:4e:80:d0:88:d7:09:79:
                    58:1f:93:a0:1e:e2:49:d6:91:09:91:2f:7d:f6:0d:
                    36:3f:14:32:26:7f:bd:44:8d:37:de:75:cb:5b:0b:
                    b5:f4:64:38:c1:f5:6e:69:ce:ef:de:d5:e1:be:94:
                    3e:3a:49:27:76:37:ae:bc:2d:87:6f:83:51:b4:50:
                    68:9d:39:44:fe:23:05:08:26:bc:19:5e:66:29:ad:
                    06:9e:92:90:9f:4e:51:69:c3:61:92:b8:4b:41:6c:
                    b9:c5:b0:a2:5f:89:c3:ff:e3:b8:e4:8a:31:b5:f5:
                    be:b8:b4:8d:ef:5e:a4:c8:c9:db:17:6d:fb:51:28:
                    06:0f:ea:38:3e:5d:51:be:c9:0e:c1:b3:4a:1f:a5:
                    3e:04:91:35:f7:2e:4d:1e:48:ae:0a:4d:c5:f9:1a:
                    08:cf:42:14:c7:e3:87:08:ff:53:22:84:69:24:ff:
                    d5:df:a2:04:1f:31:ce:b7:96:9a:5c:38:dd:7d:15:
                    a3:a8:2f:f2:68:5d:33:9e:03:f3:30:05:09:cf:6b:
                    c1:e5:4a:89:d1:e3:63:cb:c4:de:38:2c:ed:b2:f6:
                    52:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:62:83:C8:0E:C9:8A:2E:41:4D:43:58:27:A4:2F:73:38:8E:7E:40
            X509v3 Authority Key Identifier:
                keyid:11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/3230332e38342e3135322e302f32312d3234203d3e203234353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.84.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2f:99:0d:4a:22:99:d1:19:39:bd:57:b6:08:fd:fa:0c:85:2f:
         6a:f0:de:46:9b:18:e5:ea:03:71:18:8f:5e:09:96:6f:b2:1b:
         6f:58:b0:37:ed:f2:bb:c1:00:5b:8e:dd:d0:67:ce:d4:01:9d:
         74:2c:cd:25:a0:50:85:08:13:d2:e3:fc:a9:88:70:fc:ac:40:
         99:98:a3:61:ef:22:1c:f3:8e:2a:ec:ec:d3:fb:6b:aa:5f:0a:
         73:21:f1:c5:76:8a:7d:31:df:e1:71:15:18:e6:d8:22:08:e3:
         06:aa:49:80:2f:68:a9:04:2c:a0:35:16:5a:b3:c3:1f:a0:6a:
         5b:27:74:62:ea:f4:49:c7:81:98:49:ac:ea:62:44:2c:6c:d1:
         91:5d:62:4f:d0:93:2f:dc:fb:8e:ab:ba:95:24:e4:06:d9:08:
         e0:ea:a7:f3:5e:23:7a:d1:06:b4:a4:50:a5:2e:a7:5e:9b:5d:
         86:5a:ad:b2:f1:33:69:d2:46:47:9a:9f:9f:57:e2:f1:fa:a1:
         77:39:2d:1e:cc:8d:6f:5d:9d:2e:2b:db:bb:a9:f3:01:03:c8:
         48:c6:51:cd:de:48:ff:9a:2f:16:c6:01:31:f2:37:d7:96:24:
         d8:b0:07:42:df:89:88:c2:a0:8d:c2:26:ab:40:77:a5:80:fa:
         b5:9d:ab:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:24 2024 by rpki-client on console-ams.rpki-client.org