Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e32342e302f32342d3234203d3e203138303539.roa
File:                     3132322e3132382e32342e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          t1y5NaUz4YJfyk3H9zVIrhqflfHq1uyGs9TE8Xw2FVw=
Subject key identifier:   70:0C:91:FB:06:FF:BE:48:84:93:E3:0A:BE:17:D7:04:44:64:E3:86
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       146A9CFE7DFB57167D09D7C4AAE722D85B38F32C
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e32342e302f32342d3234203d3e203138303539.roa
Signing time:             Wed 23 Oct 2024 11:00:01 +0000
ROA not before:           Wed 23 Oct 2024 10:55:01 +0000
ROA not after:            Wed 22 Oct 2025 11:00:01 +0000
asID:                     18059
IP address blocks:        122.128.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 00:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:6a:9c:fe:7d:fb:57:16:7d:09:d7:c4:aa:e7:22:d8:5b:38:f3:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Oct 23 10:55:01 2024 GMT
            Not After : Oct 22 11:00:01 2025 GMT
        Subject: CN=700C91FB06FFBE488493E30ABE17D7044464E386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9a:5f:f9:8e:f3:19:4d:3c:a4:6e:34:f5:9a:
                    64:c1:a6:aa:c7:f5:19:1b:bd:4b:d6:0a:1c:69:9f:
                    b5:f1:23:eb:c4:a1:95:cc:84:3e:2f:03:ca:28:e6:
                    fa:46:c7:9f:90:dd:f5:03:a4:81:79:d9:95:27:48:
                    c6:84:b4:35:f9:8e:4c:4c:fd:3f:24:7c:75:93:92:
                    b6:be:29:48:62:f2:8c:f3:80:fb:a4:1f:f4:b9:36:
                    c6:e7:5d:b2:7b:15:b3:7b:23:0c:59:03:06:b2:bc:
                    2c:e1:1b:5b:79:1a:9b:0b:a1:ab:fa:f0:9d:af:80:
                    2f:36:14:a3:3f:e8:72:e8:9d:2a:c3:a1:d9:c8:04:
                    1b:03:b7:26:b3:36:e9:47:03:d6:25:e8:d3:ed:1a:
                    40:49:d2:56:ce:58:19:1f:d2:53:a2:d3:81:7d:8b:
                    b8:3c:07:14:cc:10:8d:05:73:97:33:ef:d0:91:7c:
                    83:5b:01:03:c2:57:d1:38:69:8c:f5:11:3a:6a:59:
                    07:10:76:b3:60:9d:f6:93:62:55:11:41:74:b9:9b:
                    9b:45:39:15:42:da:67:76:bc:04:f6:44:d8:ca:e2:
                    53:f8:30:72:37:4a:77:1e:55:e3:7d:d6:c9:cc:e7:
                    7e:96:7d:91:87:fa:4f:bc:46:d1:f6:8b:de:c4:81:
                    22:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:0C:91:FB:06:FF:BE:48:84:93:E3:0A:BE:17:D7:04:44:64:E3:86
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e32342e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.128.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:af:cf:27:37:84:c8:94:02:bc:32:a2:95:25:00:e5:dd:a5:
         e9:69:87:d0:18:5b:22:86:14:90:28:be:9b:53:2b:cf:e6:1a:
         f8:33:cc:55:a9:56:fd:b4:83:5d:5c:c5:79:a8:54:b3:fd:e0:
         74:35:b6:3a:2b:1a:63:d7:99:48:5e:66:62:f2:43:6b:1b:fa:
         38:55:24:4c:a6:0c:72:84:b4:91:f2:93:b6:01:bd:10:5b:66:
         c3:d9:9b:98:e4:a7:d6:8d:08:6d:6e:a7:ba:4c:03:64:5c:d4:
         bb:38:76:84:b6:68:80:db:f5:f8:cc:f0:94:e4:12:b4:23:f0:
         3c:57:11:38:15:e3:84:b0:15:b4:e8:ae:52:c2:69:68:b3:9c:
         5c:a9:53:35:ea:e3:95:10:ab:fa:06:9e:d5:0e:0e:4c:e8:90:
         80:e7:3d:b3:9a:a3:fe:b1:d0:ad:a4:67:4f:63:69:b0:5a:6f:
         47:e0:7e:b1:db:1a:42:f6:2b:1d:77:1c:49:a2:09:26:7f:fc:
         15:15:6e:4f:5c:9d:70:6d:54:93:76:a7:74:ab:c4:0e:20:ce:
         b0:c2:bd:f8:65:61:00:57:33:17:9c:03:11:29:ba:90:f9:fc:
         d2:cf:e1:d4:37:d8:ef:2f:75:e6:5d:90:5d:e2:fa:96:d6:08:
         e4:f4:5c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:52 2024 by rpki-client on console-fra.rpki-client.org