Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233392e302f32342d3234203d3e203138303539.roa
File:                     3230332e3133342e3233392e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          ANvAKXEamSJZNEt26++G0T6+bhzD92P6/VdOJYj1ldE=
Subject key identifier:   4A:E4:AF:CB:A4:16:8F:EE:33:44:6E:D9:10:7A:72:20:37:73:38:63
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       745475735F402C35A2CEFBC22C73EB9F9E7446C3
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233392e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 25 Oct 2024 05:00:02 +0000
ROA not before:           Fri 25 Oct 2024 04:55:02 +0000
ROA not after:            Fri 24 Oct 2025 05:00:02 +0000
asID:                     18059
IP address blocks:        203.134.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 00:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:54:75:73:5f:40:2c:35:a2:ce:fb:c2:2c:73:eb:9f:9e:74:46:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Oct 25 04:55:02 2024 GMT
            Not After : Oct 24 05:00:02 2025 GMT
        Subject: CN=4AE4AFCBA4168FEE33446ED9107A722037733863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:10:b5:82:ef:5d:56:a8:a4:e2:f8:ba:49:fd:
                    15:4a:aa:b3:aa:a1:b7:90:f9:30:13:53:7f:31:bd:
                    21:82:e2:5d:e6:5e:8c:ac:d6:fc:dc:ec:89:3f:ee:
                    33:8f:64:11:08:dd:ff:1e:27:8e:0d:89:15:48:5e:
                    85:9f:2d:31:fa:a6:7f:c9:e3:f8:a6:79:47:ad:fa:
                    30:7c:a9:2a:f5:da:4f:91:4e:36:97:fc:49:2d:f6:
                    c0:9d:83:ac:3e:3f:d1:ad:73:5e:44:3d:4c:44:c5:
                    95:c9:86:5e:42:23:d2:f9:3e:81:30:a0:70:1c:6f:
                    58:47:14:16:8f:c7:10:24:e6:a0:45:af:34:3b:bd:
                    41:1d:50:14:42:46:b2:a6:e0:3a:be:3f:36:12:fd:
                    1c:79:c4:f6:84:98:b8:e3:3c:94:10:a3:8b:5d:3f:
                    6a:99:fd:f1:17:00:2d:b7:28:2c:72:8a:1a:8b:79:
                    e6:23:60:de:01:97:2d:61:dc:05:4a:0b:9b:ec:0a:
                    2a:2f:da:55:c5:8e:01:12:d3:92:6c:c0:42:63:a6:
                    6a:b7:b6:a0:e3:8b:99:d1:3d:82:5c:19:51:60:6a:
                    19:32:e8:d7:af:04:17:f3:09:79:07:9c:63:36:e5:
                    ea:5a:44:d8:4f:b4:be:8e:e9:e8:0d:e3:78:21:ff:
                    c4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E4:AF:CB:A4:16:8F:EE:33:44:6E:D9:10:7A:72:20:37:73:38:63
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233392e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.134.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:01:9c:fe:5b:6a:2f:94:a2:ec:47:91:64:43:5f:82:ea:f5:
         68:f5:b6:82:fe:6a:0d:da:49:a7:9e:3a:7a:c9:a6:cf:cd:23:
         5b:b5:be:d6:8b:0c:3b:8f:83:eb:3c:0b:97:41:58:15:36:13:
         78:3d:6a:19:28:a0:d0:a8:4e:36:9b:85:68:8d:44:90:c8:45:
         e2:69:61:85:69:e7:8f:96:33:cc:1e:67:13:ee:17:f1:8a:15:
         d0:d1:81:98:33:f1:ed:73:c8:55:01:a8:5a:63:5b:33:ca:ff:
         de:b1:33:b5:c1:9e:42:f3:ba:1d:4c:e8:4e:68:55:36:09:c8:
         f6:90:1a:e0:43:05:b7:0c:00:22:94:0b:b9:d5:53:ca:7b:a5:
         a4:cc:ce:45:a4:ec:51:15:d0:b5:d2:3b:fa:db:de:62:8b:f3:
         4f:03:4b:61:f7:c2:e9:be:2c:e7:42:be:fb:9a:76:d0:8e:1b:
         5f:c3:b5:d7:26:5f:ce:c0:85:7b:d7:66:6b:93:b7:7e:ef:94:
         de:f3:24:94:a2:56:b2:c0:17:2a:76:bc:88:e1:4e:8d:31:54:
         bc:75:7f:24:f0:f4:50:72:ca:72:16:8a:c3:c0:17:42:c6:bd:
         89:d9:f9:c9:1d:3d:d5:b7:a9:4e:8d:0b:c0:ee:d8:52:be:68:
         1b:c7:33:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:52 2024 by rpki-client on console-fra.rpki-client.org