Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e302e302f32342d3234203d3e2037353837.roa
File:                     3230322e3138302e302e302f32342d3234203d3e2037353837.roa (raw, json)
Hash identifier:          Bcr2gJkRvvkdTqMf2vLF/rNqMWBoYpR0xUN/hf52EWg=
Subject key identifier:   54:66:11:BA:F3:24:DB:3E:1F:EE:1E:54:FF:CC:B2:80:F1:83:D3:BE
Certificate issuer:       /CN=42042E672B688C3072FD4743B3E7DD81EC7CA306
Certificate serial:       7CFBF1FBDA4B4173A5DEDF3BA269747DD416EFD5
Authority key identifier: 42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e302e302f32342d3234203d3e2037353837.roa
Signing time:             Tue 16 Jul 2024 14:00:00 +0000
ROA not before:           Tue 16 Jul 2024 13:55:00 +0000
ROA not after:            Tue 15 Jul 2025 14:00:00 +0000
asID:                     7587
IP address blocks:        202.180.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.crl
                          rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 11:29:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:fb:f1:fb:da:4b:41:73:a5:de:df:3b:a2:69:74:7d:d4:16:ef:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42042E672B688C3072FD4743B3E7DD81EC7CA306
        Validity
            Not Before: Jul 16 13:55:00 2024 GMT
            Not After : Jul 15 14:00:00 2025 GMT
        Subject: CN=546611BAF324DB3E1FEE1E54FFCCB280F183D3BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9e:a0:c3:06:69:03:e8:c4:67:7e:3a:d8:9d:
                    76:b9:83:7f:14:24:bf:44:55:04:66:b7:c8:13:8e:
                    79:3e:ad:a0:84:14:60:8d:32:7d:37:e9:2a:4c:24:
                    12:6c:4b:82:39:65:f4:43:48:51:f7:0f:b2:3b:8d:
                    ff:28:0c:9a:57:d5:9b:b7:71:e7:01:d4:15:0d:00:
                    f4:43:fe:ee:b4:d6:20:56:1b:4b:1e:18:de:bf:05:
                    d1:18:5b:04:9c:68:79:85:21:5f:5c:82:3b:5f:e5:
                    31:1d:da:61:72:5e:1c:75:3e:e4:bb:eb:58:d4:3f:
                    ee:8a:dc:d6:1a:0e:9b:56:98:19:f3:0b:21:12:b6:
                    90:8e:30:3c:28:b9:cf:23:ad:82:e5:86:9c:ed:e5:
                    d2:21:83:b1:a2:a6:3e:db:61:60:d2:76:6a:f3:ce:
                    b0:72:2f:2f:24:10:d4:80:11:de:72:74:4f:ff:ef:
                    f0:95:96:a4:4c:06:68:20:05:bf:84:58:94:6e:c5:
                    20:97:5c:65:55:69:ef:4f:2a:51:1a:0e:25:92:14:
                    12:f2:84:87:5d:5c:f2:53:90:1b:d1:80:6d:da:dd:
                    84:ce:cb:18:00:b5:0b:0c:a2:13:0f:84:65:1e:9c:
                    91:53:e0:66:9e:e2:99:4a:95:25:1e:40:ec:12:4c:
                    f7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:66:11:BA:F3:24:DB:3E:1F:EE:1E:54:FF:CC:B2:80:F1:83:D3:BE
            X509v3 Authority Key Identifier:
                keyid:42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e302e302f32342d3234203d3e2037353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.180.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:b3:f2:50:43:ee:66:43:23:68:b0:6c:a8:70:67:1d:6e:f9:
         f6:d1:81:cb:9b:20:cf:b6:b7:2b:8a:5f:13:b0:40:9a:20:ce:
         07:e8:c3:45:3d:b0:43:91:c1:45:fc:ca:d4:dc:d1:0c:33:a0:
         f6:fa:17:47:6f:08:20:81:50:89:03:ec:d0:d9:de:27:2c:ac:
         5d:2a:03:4d:ee:93:7a:76:9a:2f:78:7e:00:59:e1:28:e7:b6:
         ac:42:68:27:df:00:b0:d4:db:14:82:de:9b:77:26:bf:46:89:
         4b:15:cc:35:3b:0b:ef:20:39:d4:9b:24:4c:10:d8:6a:a5:6d:
         d1:be:11:8b:51:a4:bb:0f:ff:fe:eb:6f:95:bb:0a:4c:b4:e1:
         f3:86:f7:92:fa:1a:ca:98:ea:c5:ea:14:3e:e2:db:a8:f6:a8:
         46:b8:b6:b2:a7:2e:30:38:08:55:be:8a:dd:d0:45:7e:64:d9:
         a3:31:40:47:aa:28:8b:d3:7b:b6:a7:a5:1d:13:fb:25:ac:a1:
         e5:6f:f8:29:33:ab:39:f8:08:04:53:1b:df:91:6a:26:00:09:
         62:7d:b9:d6:02:40:a3:d4:07:02:75:17:17:b3:23:9b:a4:83:
         82:d1:c3:b1:eb:0d:ea:88:11:3b:60:44:37:ab:3c:a5:a6:5c:
         d8:80:bf:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:02:06 2024 by rpki-client on console-ams.rpki-client.org