Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3230322e35362e3136302e302f32322d3234203d3e203435323837.roa
File:                     3230322e35362e3136302e302f32322d3234203d3e203435323837.roa (raw, json)
Hash identifier:          0zHHmymmAg7KzILmxTwSb0pVLlyNqlqsvk/nikoNMwE=
Subject key identifier:   E9:BD:97:E9:8A:09:28:EB:60:CC:F6:8D:E9:40:7D:C0:41:0E:69:26
Certificate issuer:       /CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7
Certificate serial:       7482371889129527DC4EA13F37CCB38A0D633D2F
Authority key identifier: DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3230322e35362e3136302e302f32322d3234203d3e203435323837.roa
Signing time:             Mon 01 Jul 2024 01:02:26 +0000
ROA not before:           Mon 01 Jul 2024 00:57:26 +0000
ROA not after:            Mon 30 Jun 2025 01:02:26 +0000
asID:                     45287
IP address blocks:        202.56.160.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl
                          rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 05:17:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:82:37:18:89:12:95:27:dc:4e:a1:3f:37:cc:b3:8a:0d:63:3d:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7
        Validity
            Not Before: Jul  1 00:57:26 2024 GMT
            Not After : Jun 30 01:02:26 2025 GMT
        Subject: CN=E9BD97E98A0928EB60CCF68DE9407DC0410E6926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5b:7d:79:50:f1:79:8a:26:5b:b2:0f:ec:ab:
                    cf:c0:56:ba:7c:f8:b9:46:f6:1e:8b:98:f2:e6:e5:
                    6d:1c:23:b1:02:b5:8a:73:8f:77:4b:62:f4:c7:71:
                    41:64:cc:13:47:69:49:7c:37:a1:fa:ba:2b:8a:7c:
                    a9:4c:02:d8:68:94:57:4d:7e:16:80:83:42:94:ae:
                    a6:3a:b9:ea:c9:b2:55:70:d4:fa:3a:24:06:d0:4c:
                    63:50:e8:f2:cd:5d:b3:64:b6:b1:53:97:0c:5a:97:
                    24:11:bb:b3:98:12:9d:05:be:56:41:c3:e4:02:0b:
                    95:cf:0b:ee:ed:be:67:94:a0:a2:63:a3:fa:39:ad:
                    31:2f:45:fc:80:0e:ac:ca:d6:2b:36:44:d3:5e:99:
                    de:4e:88:ee:d4:06:13:47:50:05:74:48:4f:22:96:
                    bc:28:ea:6a:fb:a8:4d:86:6c:78:c8:9c:09:fd:69:
                    20:00:31:88:36:e8:ef:dc:8a:e2:5b:fa:c2:be:72:
                    39:02:ad:16:9b:39:dd:81:fe:a4:39:f8:dc:88:48:
                    e3:be:7d:ec:bf:fd:3b:30:9c:06:5f:a0:5e:62:3b:
                    6f:65:36:06:49:00:fc:97:3c:2c:35:84:cc:18:23:
                    83:3f:4e:e4:ca:f0:0f:df:a1:c1:3a:38:9c:9b:ff:
                    b1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BD:97:E9:8A:09:28:EB:60:CC:F6:8D:E9:40:7D:C0:41:0E:69:26
            X509v3 Authority Key Identifier:
                keyid:DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3230322e35362e3136302e302f32322d3234203d3e203435323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.56.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:bf:7e:b6:53:0b:ae:63:3e:c1:22:ca:21:a0:65:47:31:db:
         c6:03:cb:9d:8d:b8:f4:b1:fc:9e:bd:a6:34:13:e6:00:ba:9d:
         3e:b5:19:fa:f2:43:7a:74:b4:ae:73:75:2a:23:51:bb:b0:b3:
         fa:6b:73:a9:da:5b:1d:77:95:a7:7d:65:18:40:f5:73:c9:8b:
         cb:d4:f1:a5:b3:1d:26:e2:31:ea:38:62:d7:fa:15:e3:9c:3c:
         3d:c6:a7:4b:d3:87:7a:3c:ae:36:c7:8b:1a:83:e6:cf:a7:1a:
         d3:41:0a:48:c1:e0:25:00:e0:20:33:36:c1:46:58:41:56:2c:
         e0:d2:f4:80:5b:b5:8e:3e:9e:98:9b:43:30:82:be:30:b6:3f:
         78:a9:91:30:ae:2d:6b:d4:ec:1a:88:a4:fb:8f:f9:fe:b3:ed:
         1e:80:6f:16:4c:2c:20:f2:04:b4:ea:b6:70:1a:83:96:55:28:
         4b:97:14:92:40:09:fa:9f:a9:24:0d:e2:be:78:61:a2:1e:4d:
         05:8c:da:94:2a:d8:4c:03:48:a3:1b:52:95:de:23:5c:c8:39:
         ea:fe:eb:b3:76:3b:35:5f:a7:e1:c8:8b:9a:30:de:57:b8:a3:
         24:47:97:03:5b:65:25:92:5e:44:91:b2:ec:e2:2d:50:85:0f:
         9d:2e:9f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:44 2024 by rpki-client on console-fra.rpki-client.org