Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/34332e3234332e3138342e302f32332d3233203d3e203633383237.roa
File:                     34332e3234332e3138342e302f32332d3233203d3e203633383237.roa (raw, json)
Hash identifier:          OY6Lfxu4ThbjxXQbbmnOKiGw4GC9XeMZqq/aGwQ0hUM=
Subject key identifier:   59:52:1F:A5:FB:A7:9F:EF:03:4E:58:0D:80:4F:FD:08:3F:6D:58:6E
Certificate issuer:       /CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
Certificate serial:       7D0F9B8723D377D82A0A2EF48EDB07A54BECF523
Authority key identifier: F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/34332e3234332e3138342e302f32332d3233203d3e203633383237.roa
Signing time:             Sat 28 Oct 2023 04:00:01 +0000
ROA not before:           Sat 28 Oct 2023 03:55:01 +0000
ROA not after:            Sat 26 Oct 2024 04:00:01 +0000
asID:                     63827
IP address blocks:        43.243.184.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl
                          rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 20:30:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:0f:9b:87:23:d3:77:d8:2a:0a:2e:f4:8e:db:07:a5:4b:ec:f5:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
        Validity
            Not Before: Oct 28 03:55:01 2023 GMT
            Not After : Oct 26 04:00:01 2024 GMT
        Subject: CN=59521FA5FBA79FEF034E580D804FFD083F6D586E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:61:6d:c5:3a:57:d5:7e:01:85:50:7e:4d:8b:
                    ac:f1:7d:23:85:58:6d:87:35:78:31:5f:ca:d7:22:
                    24:c2:7e:bb:a4:87:aa:8f:e8:fc:4a:ad:30:d3:22:
                    dc:0a:e5:17:2d:89:16:68:4c:47:ab:db:a1:b7:72:
                    d2:80:fc:51:a7:ac:87:0c:16:e7:a4:ff:6d:f3:bd:
                    12:95:2c:88:b1:b0:ae:51:c3:1f:77:ab:3e:85:db:
                    5e:e6:d4:70:1e:2f:45:5f:78:fe:ef:c2:a6:35:a9:
                    0f:58:d6:b9:9d:15:87:31:e3:89:77:19:ff:0e:d8:
                    45:d2:9b:91:e2:c0:8e:c7:d9:3e:01:0f:2b:03:4e:
                    ee:48:f2:6a:f7:7b:aa:be:d3:09:16:f9:7e:b1:2d:
                    12:c3:3f:51:bf:e2:74:95:ec:36:15:52:60:4f:3a:
                    e6:02:8d:b9:f2:37:2d:af:d2:0c:41:89:d7:13:fa:
                    0f:53:9c:88:26:29:f6:c4:40:2c:a1:a9:2d:b5:9f:
                    87:f2:c7:50:1f:ca:8c:7c:74:d7:2b:fe:0b:4c:b9:
                    3d:42:0c:2d:ca:ee:b2:7f:f1:3c:25:b1:67:cf:5d:
                    19:09:40:c8:c3:93:48:83:38:98:47:27:9e:75:c0:
                    2c:9b:3f:ec:68:d6:8d:04:22:3f:e9:22:1f:f8:87:
                    7c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:52:1F:A5:FB:A7:9F:EF:03:4E:58:0D:80:4F:FD:08:3F:6D:58:6E
            X509v3 Authority Key Identifier:
                keyid:F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/34332e3234332e3138342e302f32332d3233203d3e203633383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.243.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b3:75:e4:b5:12:61:e7:6d:06:ef:02:a6:aa:20:50:1e:e8:74:
         61:58:59:63:4c:18:91:d5:0f:8c:4e:45:d9:7b:c3:45:c7:1b:
         69:93:d0:77:61:f1:4e:f4:25:87:47:ac:d6:16:7a:1e:b0:8b:
         b3:0c:89:7b:98:67:1c:29:5d:74:20:6d:31:a9:c5:89:81:4a:
         02:24:15:58:70:0a:59:65:68:5e:bf:8f:21:e4:58:60:5d:df:
         0d:6c:36:d3:bc:01:0b:c5:3e:1d:10:60:79:6f:e0:ea:58:8f:
         d0:14:15:74:50:7e:c1:86:64:35:df:58:b2:39:9b:a8:ce:ef:
         51:ea:db:b9:f1:5e:bc:74:ca:1a:ad:cd:3a:ca:d1:9a:f6:fc:
         95:b0:b4:71:d0:54:1d:9b:4a:b9:63:54:92:85:44:35:52:c0:
         ea:ee:da:4b:67:82:78:c1:44:8f:82:e6:07:30:74:c2:7b:f8:
         26:85:77:2d:a9:78:ea:a7:d1:e7:79:d4:7c:bd:12:06:35:fa:
         f1:78:81:82:d6:5f:51:e0:9d:c2:7f:80:f5:40:12:c8:b3:a7:
         96:e4:df:87:64:91:a9:eb:42:50:fd:c2:ae:bd:28:16:78:59:
         6f:e4:0b:6e:0e:ae:bf:f7:ca:28:df:f9:36:6d:0a:86:00:4a:
         d9:f8:6b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 17:47:54 2024 by rpki-client on console-fra.rpki-client.org