Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e382e302f32342d3234203d3e203338373539.roa
File:                     3230322e3138302e382e302f32342d3234203d3e203338373539.roa (raw, json)
Hash identifier:          oi7ul2eHrpJm6nKOP1YTFPaOySaj28haxt3SYYHzFYk=
Subject key identifier:   E9:B9:0C:35:7E:B9:F2:10:0D:C6:1B:8C:B4:05:ED:E2:F8:D5:7D:0F
Certificate issuer:       /CN=42042E672B688C3072FD4743B3E7DD81EC7CA306
Certificate serial:       3F3E1B44D4E8414946A52F85F1432C8A1CFC0AB2
Authority key identifier: 42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e382e302f32342d3234203d3e203338373539.roa
Signing time:             Tue 16 Jul 2024 13:00:00 +0000
ROA not before:           Tue 16 Jul 2024 12:55:00 +0000
ROA not after:            Tue 15 Jul 2025 13:00:00 +0000
asID:                     38759
IP address blocks:        202.180.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.crl
                          rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 14:36:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:3e:1b:44:d4:e8:41:49:46:a5:2f:85:f1:43:2c:8a:1c:fc:0a:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42042E672B688C3072FD4743B3E7DD81EC7CA306
        Validity
            Not Before: Jul 16 12:55:00 2024 GMT
            Not After : Jul 15 13:00:00 2025 GMT
        Subject: CN=E9B90C357EB9F2100DC61B8CB405EDE2F8D57D0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:41:cc:10:82:ac:40:6d:a3:d1:6b:31:7f:ba:
                    8b:79:d3:b8:1b:87:22:62:02:ca:ec:d9:46:d6:9b:
                    d9:f9:21:59:6b:22:e5:65:8e:78:75:bb:69:9d:8f:
                    21:e8:09:3c:35:c9:c0:7e:a5:24:9a:0d:4c:8e:c8:
                    fc:73:23:d2:af:a2:d1:f5:c0:3a:48:bc:fa:57:88:
                    b6:9f:fc:f2:4b:a1:00:4c:ef:17:65:ec:6a:c4:66:
                    d2:ec:ea:a3:5f:30:d3:1c:14:cc:4e:fa:5b:2b:39:
                    fc:5f:34:25:54:6c:ab:01:fd:60:73:4e:5f:60:7f:
                    79:5d:8c:fe:b1:18:50:ce:fc:4d:96:b9:07:49:f1:
                    d0:d6:36:64:42:2c:50:33:3b:91:63:06:c0:3f:d1:
                    91:ea:0c:bb:7f:6c:8b:f7:1e:f9:16:cb:18:07:64:
                    7f:0f:29:41:89:e0:1c:ad:da:cc:54:a5:2a:6d:57:
                    12:b9:0e:ee:8a:7e:ae:66:fb:f6:c9:17:40:be:f0:
                    eb:35:f5:55:e8:84:16:02:ea:6b:05:cc:1b:83:f7:
                    1e:be:14:9a:80:c0:00:6a:0e:3c:3c:ff:69:b9:ae:
                    96:2d:1a:45:e5:54:3e:a3:c0:ba:10:8b:51:00:e1:
                    64:f4:06:e7:49:26:4a:35:a0:9e:99:02:e3:76:cd:
                    fd:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B9:0C:35:7E:B9:F2:10:0D:C6:1B:8C:B4:05:ED:E2:F8:D5:7D:0F
            X509v3 Authority Key Identifier:
                keyid:42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e382e302f32342d3234203d3e203338373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.180.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:ac:1f:82:62:d2:d6:b6:ec:2f:86:40:56:45:f3:d1:a0:28:
         9e:08:da:e3:aa:71:51:71:3a:79:b5:f7:fd:e8:0d:d4:e1:bc:
         e3:d8:a0:19:02:e4:f1:c5:f2:80:2d:04:11:a9:a1:19:85:d6:
         b2:0b:27:21:c8:4f:19:69:25:26:fa:a0:cc:c1:8b:ef:e1:3a:
         bf:40:6d:98:44:b3:14:ac:b9:db:a6:24:cf:0c:2b:0e:9f:d8:
         f6:e3:68:07:1f:c4:61:49:8e:87:a9:8c:df:33:85:44:34:87:
         cd:7c:6e:b3:1e:a5:75:28:3f:9c:83:c2:e9:68:6a:a9:ef:1b:
         ba:77:36:99:c7:c0:8f:ce:6d:8a:53:ca:79:98:f4:97:c8:0d:
         0f:46:97:e7:28:7b:1e:c3:7c:14:41:b0:0a:61:c3:8d:ab:11:
         25:e9:6a:32:e3:e1:8e:4b:af:68:b4:89:fc:c4:10:d6:a6:47:
         b3:ff:3d:74:6a:5c:a9:0b:e8:be:6a:5f:eb:9c:ca:43:15:2a:
         27:f1:50:b0:b5:43:4a:6d:5a:d1:8b:66:33:b2:c2:ab:ca:71:
         33:e8:9a:77:ee:86:37:a5:91:dd:a0:a7:5b:bb:23:37:c8:36:
         0a:e2:5e:54:ca:ec:c6:f4:34:95:03:c2:1b:03:af:d0:79:97:
         09:7b:3a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:00:39 2024 by rpki-client on console-fra.rpki-client.org