Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e302e302f32342d3234203d3e2037353837.roa
File:                     3230322e3138302e302e302f32342d3234203d3e2037353837.roa (raw, json)
Hash identifier:          xnVrqwDDek+QEXLhrf4+tU/01UjwMMYl90TGFi+l6Aw=
Subject key identifier:   EE:46:1B:BB:96:6F:DF:2A:21:68:12:71:3F:6F:2E:2B:1D:19:4F:5B
Certificate issuer:       /CN=42042E672B688C3072FD4743B3E7DD81EC7CA306
Certificate serial:       11A742EB84065F3369DD8DE9DEA77FBF93D32562
Authority key identifier: 42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e302e302f32342d3234203d3e2037353837.roa
Signing time:             Tue 15 Aug 2023 13:00:01 +0000
ROA not before:           Tue 15 Aug 2023 12:55:01 +0000
ROA not after:            Tue 13 Aug 2024 13:00:01 +0000
asID:                     7587
IP address blocks:        202.180.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.crl
                          rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a7:42:eb:84:06:5f:33:69:dd:8d:e9:de:a7:7f:bf:93:d3:25:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42042E672B688C3072FD4743B3E7DD81EC7CA306
        Validity
            Not Before: Aug 15 12:55:01 2023 GMT
            Not After : Aug 13 13:00:01 2024 GMT
        Subject: CN=EE461BBB966FDF2A216812713F6F2E2B1D194F5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:84:24:3c:02:5f:83:b2:dc:6d:0f:f4:80:f5:
                    09:a4:ab:55:9c:ad:41:89:a8:80:fa:4e:2c:b7:91:
                    c2:cb:53:a9:1b:30:8f:a8:7b:65:93:dc:4b:9a:ea:
                    ef:b0:15:8e:30:49:34:be:1e:2d:6a:9f:92:47:c8:
                    30:81:b1:a9:7e:89:9d:50:5e:99:93:2b:cc:3a:da:
                    6a:d4:c5:99:0d:83:5c:ef:7d:94:63:58:2e:18:44:
                    02:92:96:1d:2e:64:75:a2:6a:cf:86:54:0c:dd:79:
                    cf:b3:ce:1b:e7:2b:9d:9d:15:0a:88:c2:80:f6:ec:
                    61:41:2c:a5:29:91:c4:89:c4:19:db:3e:ac:9b:a6:
                    0c:59:80:39:e9:d6:f1:fc:3a:ab:41:e4:31:dd:22:
                    f9:9a:09:55:9e:32:dc:06:8c:36:fd:5f:35:a9:3c:
                    e3:d2:da:42:ed:24:af:56:37:bc:a1:b7:54:ac:ac:
                    b4:45:1a:9d:c4:09:d6:68:71:9e:2d:e0:f3:b9:42:
                    18:7b:d2:6f:67:71:d0:c6:90:4c:ae:94:10:ea:63:
                    0c:00:2b:ac:1d:77:f1:0d:b6:ca:a1:e2:2d:f4:4e:
                    17:42:5d:75:ac:04:c9:98:52:2d:c3:74:e5:85:46:
                    2b:16:17:f2:48:6d:a8:24:67:bd:f3:df:71:6d:c6:
                    c5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:46:1B:BB:96:6F:DF:2A:21:68:12:71:3F:6F:2E:2B:1D:19:4F:5B
            X509v3 Authority Key Identifier:
                keyid:42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e302e302f32342d3234203d3e2037353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.180.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:09:f2:a1:d4:1d:48:94:fd:f7:55:30:8f:4f:10:2c:db:a0:
         0b:a4:4d:7b:71:0b:20:c0:3c:28:b4:7b:e7:2f:81:5f:40:84:
         08:ed:83:ed:cf:f2:cd:75:46:0f:6b:d2:48:60:d9:94:03:6e:
         2a:72:c3:e3:d6:97:ee:2b:97:22:85:b8:9f:c0:1a:b7:eb:c1:
         56:be:31:b0:dd:16:95:ec:64:d5:9b:5f:ff:0d:e6:4b:4c:51:
         9b:a7:6c:7e:8b:21:28:43:20:a7:0d:23:17:5d:ef:f9:fb:bf:
         22:cc:e1:c8:ef:66:db:33:20:c5:78:bd:c6:31:90:de:19:76:
         61:a7:55:87:b6:8b:35:58:36:2f:db:95:27:a1:d9:21:de:28:
         81:45:41:8e:f4:22:a5:82:96:3a:65:16:34:1e:84:5c:7c:ff:
         7a:b2:0d:19:56:f6:ff:4d:c7:00:1a:68:ef:c6:57:82:66:70:
         7e:96:b0:81:a8:9a:4e:2b:ea:75:80:87:e2:c6:70:25:5b:e5:
         8d:fb:05:3d:62:57:3d:cf:2c:fd:d2:83:b3:79:f1:98:30:04:
         d5:c6:80:81:26:56:f4:bc:36:18:f4:e9:0e:11:44:2e:5e:c9:
         12:0a:dd:6c:ed:0d:21:0c:69:68:d2:70:53:d7:44:fe:9f:61:
         1c:f3:34:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:52:57 2024 by rpki-client on console-ams.rpki-client.org