Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e32392e302f32342d3234203d3e203138303539.roa
File:                     3132322e3132382e32392e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          jTeIOm3mv7rLc5SZsGBAimnINy1JbbYJM6nek8ucuAc=
Subject key identifier:   AE:32:60:E2:81:4B:1F:81:BE:FB:53:20:6B:FC:AA:50:D6:30:6E:F6
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       14031565299AC83E0176FEDF0D0E33EC843D5EF2
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e32392e302f32342d3234203d3e203138303539.roa
Signing time:             Thu 24 Oct 2024 04:00:01 +0000
ROA not before:           Thu 24 Oct 2024 03:55:01 +0000
ROA not after:            Thu 23 Oct 2025 04:00:01 +0000
asID:                     18059
IP address blocks:        122.128.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:03:15:65:29:9a:c8:3e:01:76:fe:df:0d:0e:33:ec:84:3d:5e:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Oct 24 03:55:01 2024 GMT
            Not After : Oct 23 04:00:01 2025 GMT
        Subject: CN=AE3260E2814B1F81BEFB53206BFCAA50D6306EF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:70:a8:7f:1f:a4:02:da:8d:8d:65:00:69:37:
                    ee:38:da:e5:c6:73:2c:52:f1:5f:58:71:97:17:6d:
                    0c:35:7a:6f:cd:85:13:b0:73:e3:78:a8:65:9c:d8:
                    bc:18:1b:54:1f:4c:61:67:4f:93:06:13:07:3c:77:
                    bd:b6:91:4f:9a:46:4d:0f:19:e4:33:07:2d:5a:e5:
                    cc:0e:23:27:7e:7f:65:74:c8:4f:80:54:d7:f3:c9:
                    eb:4e:6c:93:ac:da:03:fb:31:37:12:97:f8:4c:0f:
                    ed:6c:8e:53:cc:82:f6:5f:51:55:b9:25:53:b7:d0:
                    3f:f6:b9:48:79:a6:0c:53:9b:02:9b:f9:a5:8c:a6:
                    59:92:d3:07:7e:cc:f7:b1:c4:fb:ec:72:2e:1d:2e:
                    b2:ce:5d:28:5f:c1:1a:dc:a6:24:e6:36:6e:48:99:
                    6e:8b:be:de:0d:3c:d6:63:d5:62:c6:fe:bf:b1:ba:
                    b3:27:c6:3f:22:3f:7a:cf:9c:4d:7d:20:4d:d9:11:
                    7e:2d:83:bc:63:a5:49:34:90:8b:e6:79:72:f1:3f:
                    c8:18:28:54:ea:b4:23:7b:08:0f:d7:ca:bf:ff:f4:
                    45:2f:ff:2d:4b:3b:c2:9a:f9:f1:b2:b2:a0:4e:d8:
                    85:a4:26:b9:05:93:93:d9:81:ee:ba:f3:12:ed:0f:
                    91:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:32:60:E2:81:4B:1F:81:BE:FB:53:20:6B:FC:AA:50:D6:30:6E:F6
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e32392e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.128.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:0d:5d:db:3c:f9:e1:1e:06:79:ba:2e:cf:4c:b4:a0:e6:94:
         5f:5a:a1:96:90:23:44:e5:01:cf:2b:41:6b:b9:69:55:20:2c:
         e5:fb:fb:57:be:a5:58:6e:18:ea:a6:76:f5:53:4f:58:2f:8b:
         9a:93:54:66:72:bb:bd:a1:6f:45:37:62:02:5a:bf:af:a8:93:
         b7:a0:29:cd:be:c3:1a:e1:d7:e0:bf:58:60:d1:76:b3:ec:3f:
         39:82:8f:11:8e:2e:6d:1e:a2:ca:1c:34:d4:4b:35:ee:6b:4b:
         ed:36:0d:26:61:90:db:f4:47:fa:2e:d3:b4:da:78:41:76:b9:
         58:bc:74:9f:a0:2a:aa:d0:b0:60:1f:df:63:21:23:42:cd:37:
         00:70:ab:d8:4a:dc:ce:77:b1:7f:2b:16:a5:14:00:fa:e7:ef:
         eb:75:97:5f:b4:38:aa:fc:6b:9e:be:57:fd:ba:52:25:0c:19:
         5a:ad:cb:4a:87:eb:e1:1f:cb:5a:07:19:5d:4b:8c:71:15:58:
         88:d8:87:a0:74:a7:c8:b7:d7:75:f4:0b:eb:e4:2b:df:09:0d:
         f9:8a:39:e1:3f:d6:07:dd:8d:e7:8d:5f:a5:54:bc:88:34:bd:
         dd:58:c2:df:53:b7:f3:24:46:1b:02:57:0a:2a:88:b2:69:f5:
         fc:b1:b8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:15 2024 by rpki-client on console-ams.rpki-client.org