Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/34332e3234332e3138342e302f32342d3234203d3e203633383237.roa
File:                     34332e3234332e3138342e302f32342d3234203d3e203633383237.roa (raw, json)
Hash identifier:          tDMCgqspwHBlLKDtfuBWpercTIZbe0z5rI90KhFQncY=
Subject key identifier:   E0:39:FB:E3:75:51:52:03:31:68:05:83:DA:58:1D:F2:61:E8:EF:05
Certificate issuer:       /CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
Certificate serial:       4276E65CEBB60F1804DC09851D4798D64381FC
Authority key identifier: F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/34332e3234332e3138342e302f32342d3234203d3e203633383237.roa
Signing time:             Wed 20 Dec 2023 07:00:49 +0000
ROA not before:           Wed 20 Dec 2023 06:55:49 +0000
ROA not after:            Wed 18 Dec 2024 07:00:49 +0000
asID:                     63827
IP address blocks:        43.243.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl
                          rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 20:30:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:76:e6:5c:eb:b6:0f:18:04:dc:09:85:1d:47:98:d6:43:81:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
        Validity
            Not Before: Dec 20 06:55:49 2023 GMT
            Not After : Dec 18 07:00:49 2024 GMT
        Subject: CN=E039FBE37551520331680583DA581DF261E8EF05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:25:2a:40:3a:75:cd:c4:65:46:5b:3d:ab:93:
                    89:f0:0f:ee:93:11:f0:40:7b:a3:72:39:c4:ea:c0:
                    70:31:bc:a2:3c:b4:7d:33:58:75:a3:0a:93:27:f4:
                    0c:73:c6:2b:07:47:d1:d6:cc:36:ba:28:be:5f:35:
                    b1:b6:c9:fe:c0:6f:3f:74:c3:28:3a:6b:e3:c7:e4:
                    36:67:b8:04:60:1e:2c:fa:d4:44:f6:0f:80:80:55:
                    e0:13:f0:df:08:7f:e8:b9:1c:54:4a:d8:87:ce:41:
                    58:7f:61:e0:61:bc:67:dd:f8:eb:c7:d6:53:95:a4:
                    b1:92:a5:5c:cb:78:1e:89:7b:ab:17:d7:5e:1d:a3:
                    db:7d:f0:5b:c5:82:75:2b:44:d8:94:6a:fd:9d:6d:
                    c3:10:14:16:39:9f:18:9e:c4:e4:1b:18:a4:74:bd:
                    77:b2:09:a0:26:67:6c:69:ce:6d:a4:b3:9a:6d:33:
                    20:17:4f:7e:86:b8:a0:2e:11:59:07:09:c3:d5:4b:
                    50:72:b6:bb:03:03:b3:30:06:18:bb:6e:4b:14:04:
                    b0:aa:ae:12:42:b1:74:32:c9:ae:ed:9b:58:94:5c:
                    f0:4c:39:2c:d8:83:2e:5b:fe:6b:ca:36:6c:13:bd:
                    af:94:20:46:12:e1:c1:aa:e7:70:92:b7:e9:f2:be:
                    e0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:39:FB:E3:75:51:52:03:31:68:05:83:DA:58:1D:F2:61:E8:EF:05
            X509v3 Authority Key Identifier:
                keyid:F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/34332e3234332e3138342e302f32342d3234203d3e203633383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.243.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:a3:65:a9:60:a3:3e:b5:22:fb:44:40:61:5e:f8:7f:54:32:
         9e:b8:ac:9f:c2:24:3e:13:83:52:28:be:4c:b2:cc:fe:04:8d:
         86:6c:4a:58:61:6a:24:de:ea:f6:5d:02:91:ec:0d:30:52:d3:
         6c:e6:d2:ac:7e:ea:e9:a2:fc:57:ea:42:2c:42:12:26:28:08:
         39:0c:7b:51:9b:99:23:8d:ce:10:85:6e:de:d7:19:4d:0c:b5:
         0d:7c:b5:4c:c6:61:45:ce:4e:f9:88:fd:45:2e:07:06:e2:58:
         1e:28:f0:7a:09:1b:27:cc:3b:f7:96:01:df:6c:97:6c:29:51:
         6d:94:54:17:f0:65:97:f6:2e:29:25:65:db:eb:fa:24:91:ab:
         5f:3b:d3:a9:22:c1:a3:14:e5:2e:67:f2:27:30:1f:1a:c1:ca:
         e0:00:a0:3c:ad:53:f8:a8:21:67:33:8c:67:86:81:c9:92:ed:
         5f:5e:7b:a9:bb:b9:2f:54:96:b2:ef:c0:2d:64:bb:a3:cf:3c:
         1f:16:1e:53:ac:d6:89:3a:28:41:e9:df:90:cd:f4:aa:1f:fa:
         a0:f5:2d:ea:de:3f:15:6e:9d:ef:03:f3:73:30:a7:db:a7:fa:
         42:f3:9f:14:ee:03:f5:c6:29:87:70:5c:5f:88:26:f6:43:03:
         c9:12:4f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 17:00:53 2024 by rpki-client on console-ams.rpki-client.org