Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e34352e302f32342d3234203d3e203338333230.roa
File:                     3137352e3130332e34352e302f32342d3234203d3e203338333230.roa (raw, json)
Hash identifier:          +gIBvOeneffVQOUF4qEJtssIuydPOO0bDovasQyuDIY=
Subject key identifier:   5A:3A:3F:39:17:22:2B:3E:69:F4:64:C9:CC:9A:46:6B:F0:D6:43:7B
Certificate issuer:       /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1
Certificate serial:       022AE7E77370BAFEAC825A3FE2B9E2A69E030A91
Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e34352e302f32342d3234203d3e203338333230.roa
Signing time:             Mon 26 Feb 2024 06:20:09 +0000
ROA not before:           Mon 26 Feb 2024 06:15:09 +0000
ROA not after:            Mon 24 Feb 2025 06:20:09 +0000
asID:                     38320
IP address blocks:        175.103.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl
                          rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:2a:e7:e7:73:70:ba:fe:ac:82:5a:3f:e2:b9:e2:a6:9e:03:0a:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1
        Validity
            Not Before: Feb 26 06:15:09 2024 GMT
            Not After : Feb 24 06:20:09 2025 GMT
        Subject: CN=5A3A3F3917222B3E69F464C9CC9A466BF0D6437B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ed:ff:a7:1a:58:84:83:e5:c8:16:ee:50:7b:
                    5d:c6:12:76:f7:ca:6f:0d:df:d9:01:35:6f:6e:24:
                    2f:24:31:82:4b:ae:27:0b:93:0b:32:bf:2e:3f:4a:
                    48:a3:3e:d7:a0:cf:51:b3:fc:10:e8:e7:ca:4a:e3:
                    cc:b4:cf:3d:6e:62:0f:a4:34:f7:75:26:8d:fc:ec:
                    a5:c5:2b:26:72:0a:e9:41:f2:45:ee:f9:ad:0f:2d:
                    64:16:60:4f:87:0c:12:58:b8:f6:2b:b4:5e:50:aa:
                    ab:60:7b:a6:9e:18:d2:00:e4:4a:8c:a9:95:a4:0a:
                    17:e1:dc:88:96:d4:b2:1b:b0:4d:e0:8e:ce:73:53:
                    c5:c8:f0:cf:ab:ce:3e:1e:ea:f7:0c:c0:bc:10:4e:
                    ca:c0:0f:ab:73:fe:52:f7:25:32:aa:0d:c6:db:4c:
                    d9:19:bd:15:4e:ed:aa:1d:e5:f2:0f:41:7f:1c:3e:
                    9a:20:a2:bb:ee:e1:82:81:4e:65:27:03:e2:6a:be:
                    f2:97:1f:cf:32:fd:53:9f:65:6a:b0:dc:26:62:61:
                    74:53:8c:ff:da:af:08:8c:2a:bf:1d:b8:86:d8:5f:
                    1e:94:26:64:e3:33:2f:cd:e6:0b:6d:c5:ed:63:34:
                    ac:6b:3e:a0:2e:3b:7a:3e:a2:ec:eb:e5:8a:b6:91:
                    23:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:3A:3F:39:17:22:2B:3E:69:F4:64:C9:CC:9A:46:6B:F0:D6:43:7B
            X509v3 Authority Key Identifier:
                keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e34352e302f32342d3234203d3e203338333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.103.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:d2:ad:19:7f:71:1a:ec:dc:c5:3a:e2:3f:7e:7e:a5:fb:3b:
         c9:a0:ad:5f:90:be:df:88:72:45:d7:0a:b5:a3:80:5c:49:8b:
         20:74:d9:53:7e:14:5b:bd:e9:3b:e0:63:e1:10:45:cd:a7:f6:
         0b:db:cc:c5:5c:6c:d0:07:cb:14:2f:52:d4:75:f3:33:f2:b6:
         11:15:e9:45:28:07:9a:a0:bd:4e:4a:db:76:58:8b:dd:2d:eb:
         63:c4:9c:15:7f:be:11:28:97:53:6e:bc:be:46:09:c9:77:a7:
         79:0c:e8:5d:81:47:cf:d2:0e:8b:a2:ea:d8:41:30:5c:ba:7e:
         58:31:da:9e:31:c3:bc:ab:8d:a4:7c:7e:f9:3f:8d:25:8f:2a:
         28:87:2d:c5:34:8f:80:b5:70:f7:01:d0:9e:3c:8c:4a:4c:62:
         0f:a6:4e:49:0a:e1:3b:af:30:20:ac:92:94:da:bc:63:dd:54:
         60:2d:26:f5:06:58:0c:63:c5:75:40:c6:cc:6a:ec:e4:ca:83:
         32:f3:c5:6d:9a:df:b0:48:01:a3:41:38:19:f0:88:be:15:94:
         71:eb:4c:95:f8:44:45:53:57:c5:2a:c4:6d:91:de:15:6c:e5:
         5a:d2:96:47:d2:9d:ac:38:40:57:8b:ec:69:a3:24:ec:32:c7:
         e7:92:0a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:37:58 2024 by rpki-client on console-ams.rpki-client.org