Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e372e302f32342d3234203d3e203338373539.roa
File:                     3230322e3138302e372e302f32342d3234203d3e203338373539.roa (raw, json)
Hash identifier:          ftuxrsTdpAVDqROeCV15jYAaeb98ThoPwiyw3Mo3LRg=
Subject key identifier:   B0:31:E0:10:F6:86:98:B6:3B:A0:B9:5B:BB:08:AB:7F:40:34:49:03
Certificate issuer:       /CN=42042E672B688C3072FD4743B3E7DD81EC7CA306
Certificate serial:       1482C81771B55E4ADC79C83E7BC92E531DB4D276
Authority key identifier: 42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e372e302f32342d3234203d3e203338373539.roa
Signing time:             Tue 15 Aug 2023 13:00:00 +0000
ROA not before:           Tue 15 Aug 2023 12:55:00 +0000
ROA not after:            Tue 13 Aug 2024 13:00:00 +0000
asID:                     38759
IP address blocks:        202.180.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.crl
                          rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:82:c8:17:71:b5:5e:4a:dc:79:c8:3e:7b:c9:2e:53:1d:b4:d2:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42042E672B688C3072FD4743B3E7DD81EC7CA306
        Validity
            Not Before: Aug 15 12:55:00 2023 GMT
            Not After : Aug 13 13:00:00 2024 GMT
        Subject: CN=B031E010F68698B63BA0B95BBB08AB7F40344903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4b:e3:07:8f:3d:d3:da:09:89:13:06:d8:ed:
                    27:4b:f0:64:e0:df:6e:b7:a2:d5:61:b6:29:48:f4:
                    8d:49:ec:f5:01:16:fd:7f:9b:a5:96:68:68:ce:89:
                    82:42:9f:4d:eb:e3:06:d4:83:5e:21:26:5d:e7:21:
                    b5:e3:a8:3c:0b:cf:0d:8f:84:1f:95:a3:54:b1:e5:
                    21:9c:c4:2b:70:e7:d7:30:d7:85:cb:73:a6:1e:cf:
                    6d:08:c3:40:fe:ef:15:1a:41:35:6f:f2:5a:76:70:
                    65:f0:4d:56:f3:3f:c5:41:8a:3e:85:5b:e5:82:cf:
                    b4:a2:84:ab:ba:1e:64:aa:4b:14:28:7b:ec:14:50:
                    fa:29:24:a5:d9:f1:54:25:d7:26:b6:17:bd:23:44:
                    2f:13:b5:1a:b1:14:92:e1:84:50:c0:b4:ea:95:b1:
                    66:87:17:1e:af:45:20:32:ef:9b:db:b5:b1:41:0b:
                    0e:6c:dc:bb:a1:b6:3e:15:64:2d:b1:be:18:14:85:
                    20:5d:5b:3f:9a:43:04:84:e5:d1:80:44:64:32:8b:
                    b4:de:8a:78:7b:29:38:18:6f:23:ec:1c:ab:e0:06:
                    4f:41:a0:9b:6c:fe:e9:ac:77:5f:fe:2d:72:12:c7:
                    e2:58:36:f1:1a:52:6f:38:90:cd:93:d5:06:90:83:
                    64:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:31:E0:10:F6:86:98:B6:3B:A0:B9:5B:BB:08:AB:7F:40:34:49:03
            X509v3 Authority Key Identifier:
                keyid:42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e372e302f32342d3234203d3e203338373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.180.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:10:02:23:bf:54:89:c7:87:86:10:dd:69:78:36:12:b7:22:
         25:2d:4b:62:a2:5b:a9:0a:3a:b0:b6:8a:f4:8e:cd:0b:5b:3c:
         87:c5:cc:c2:ff:0e:07:1f:04:b7:7c:76:21:e9:68:34:83:0b:
         b0:fa:85:e2:3e:34:f0:7f:a6:48:bf:71:e6:1b:96:45:7f:79:
         99:7f:03:f8:44:b3:28:ab:38:9d:b5:e9:18:12:ab:d8:b0:16:
         f6:a3:d3:63:dc:13:20:ae:23:7b:d3:43:d6:3b:cb:06:73:cb:
         78:dd:95:17:1d:c6:de:6f:e5:7d:8f:6f:c5:2b:73:94:a2:85:
         32:0e:cd:1f:ff:52:7c:f4:d4:26:ee:66:34:31:86:7f:56:b3:
         51:4c:d0:a1:d6:19:a6:63:7a:e1:a9:2b:d3:38:0c:13:c0:a7:
         d3:a4:1d:3f:37:d8:9d:14:2c:ef:57:e9:f9:48:01:7c:dc:fa:
         9a:22:7a:ed:bf:e2:a9:b5:d8:f5:15:3c:6c:df:33:8b:17:3b:
         bd:52:57:df:a9:62:34:37:07:7c:18:48:f0:ad:9d:8a:6b:04:
         60:d1:4e:ac:5e:db:ed:1b:f9:0c:b4:7a:61:e2:cb:9e:64:a6:
         0f:26:9a:a7:d1:70:b1:15:ed:bc:73:7e:9a:fd:c8:85:4e:21:
         b9:5a:75:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:52:57 2024 by rpki-client on console-ams.rpki-client.org