Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e33312e302f32342d3234203d3e203138303539.roa
File:                     3132322e3132382e33312e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          d62M4zOBnd2KMfl8vzkYazWRWkZACZTh+/tYVZOD6N0=
Subject key identifier:   D7:51:BE:16:21:44:EE:7F:DD:1D:85:13:59:00:A3:C0:9A:36:8A:B1
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       0C9E72707DFC830F4C8EBBE0DAEFD462DD139247
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e33312e302f32342d3234203d3e203138303539.roa
Signing time:             Wed 23 Oct 2024 11:00:02 +0000
ROA not before:           Wed 23 Oct 2024 10:55:02 +0000
ROA not after:            Wed 22 Oct 2025 11:00:02 +0000
asID:                     18059
IP address blocks:        122.128.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Mar 2025 12:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:9e:72:70:7d:fc:83:0f:4c:8e:bb:e0:da:ef:d4:62:dd:13:92:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Oct 23 10:55:02 2024 GMT
            Not After : Oct 22 11:00:02 2025 GMT
        Subject: CN=D751BE162144EE7FDD1D85135900A3C09A368AB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:04:ef:91:13:0c:b4:c6:5e:9a:61:3c:c3:e6:
                    a0:9b:6f:60:72:3a:19:a2:db:0f:b8:28:b7:52:cb:
                    94:aa:81:26:d7:9d:50:12:ad:bf:09:4d:67:74:a5:
                    d7:46:ea:ec:06:84:f2:3e:9a:ec:fa:53:96:89:17:
                    8e:b0:3e:23:2a:3e:33:96:6b:84:b4:79:31:b5:d0:
                    79:46:7a:5d:2f:26:ab:d1:e9:df:99:02:41:e5:de:
                    44:6f:64:4a:41:90:ed:55:89:7e:e5:89:93:64:fa:
                    86:cb:28:b1:09:eb:96:50:93:0d:aa:39:c4:32:12:
                    a6:a8:be:97:cb:c8:84:01:0e:05:bf:a2:a5:e6:09:
                    49:6a:f9:ac:c3:c5:0e:aa:d5:14:c4:86:9d:60:01:
                    30:ea:91:56:c2:63:5d:69:93:b1:f4:75:ee:e1:8b:
                    d9:5c:c4:6b:83:1f:aa:3f:46:4e:77:f1:67:e2:35:
                    56:19:84:dc:ff:98:02:9f:2f:96:a9:3c:2b:16:ab:
                    61:27:7b:62:19:ed:c9:fe:d6:4c:b5:9d:46:df:14:
                    8e:48:ca:d9:a8:ea:cf:62:11:db:03:df:dd:92:47:
                    57:75:4d:24:94:62:c3:44:78:1c:3b:ea:5b:9c:ba:
                    e4:41:e5:b4:78:f0:4f:29:b4:e8:4a:c6:8f:a0:29:
                    86:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:51:BE:16:21:44:EE:7F:DD:1D:85:13:59:00:A3:C0:9A:36:8A:B1
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e33312e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.128.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:19:84:e3:3c:4d:68:1b:1a:09:bf:62:9b:f4:09:22:4c:b2:
         93:6c:6d:cf:86:16:49:91:74:a4:50:a0:6e:9e:85:8e:93:d6:
         20:54:86:6b:be:6f:cf:a0:11:37:ba:ed:bf:8b:2b:a6:24:24:
         fa:50:39:15:96:f4:e2:a3:a7:20:ea:39:9e:62:e6:b0:95:4c:
         4c:d0:ab:8a:69:50:0f:ba:7a:36:c3:96:53:c3:4c:13:e7:0a:
         c3:53:be:b1:3e:6c:0d:ec:7d:88:32:2e:8e:09:d2:55:dd:d4:
         66:2e:35:dc:fb:1a:65:50:4e:9b:8f:6d:c4:e3:f9:4c:22:a2:
         db:31:ca:3f:5f:c9:99:69:8b:aa:5d:77:61:83:14:cd:15:d1:
         b1:d6:00:15:db:d4:1f:c1:e9:b7:f6:36:56:9c:77:ef:88:55:
         67:0b:93:b3:2c:36:7b:d8:30:10:f5:1b:c6:78:59:31:91:22:
         69:39:ed:11:1d:49:57:1c:85:a0:28:c7:59:0a:f7:11:42:61:
         9f:8f:b5:c8:54:83:d2:5a:c2:b2:37:a6:13:29:e2:c6:1f:e9:
         87:91:a1:7e:2c:13:b5:94:6e:ca:88:a9:8d:9e:af:bb:87:f7:
         f2:19:83:31:9f:f9:c3:c5:68:ef:d2:f5:2d:8c:b4:14:19:ae:
         9a:7d:ff:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:01:31 2025 by rpki-client