Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3132382e3235312e302f32342d3234203d3e20313333373938.roa
File:                     3230332e3132382e3235312e302f32342d3234203d3e20313333373938.roa (raw, json)
Hash identifier:          ptmfU7grOlX26fr32YtkbKR95YzRCTnK8Wejx3g9qm0=
Subject key identifier:   EF:80:92:1E:76:59:8E:55:C7:66:68:6D:C2:F9:B4:C7:25:29:53:25
Certificate issuer:       /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Certificate serial:       1B9D8FC4A7D073EC55679712C5F656BDF54B222A
Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3132382e3235312e302f32342d3234203d3e20313333373938.roa
Signing time:             Wed 07 Feb 2024 03:55:11 +0000
ROA not before:           Wed 07 Feb 2024 03:50:11 +0000
ROA not after:            Wed 05 Feb 2025 03:55:11 +0000
asID:                     133798
IP address blocks:        203.128.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl
                          rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:9d:8f:c4:a7:d0:73:ec:55:67:97:12:c5:f6:56:bd:f5:4b:22:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
        Validity
            Not Before: Feb  7 03:50:11 2024 GMT
            Not After : Feb  5 03:55:11 2025 GMT
        Subject: CN=EF80921E76598E55C766686DC2F9B4C725295325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:60:19:1e:f5:79:dc:9c:ad:39:d1:c5:26:4f:
                    ec:ae:8d:b6:51:2a:ff:74:58:91:2c:03:cf:69:9a:
                    04:47:52:13:6d:3e:7a:c9:6a:48:71:fc:b8:d7:72:
                    91:8b:58:17:be:50:9d:51:f7:f8:27:18:78:bb:f9:
                    f3:12:c1:ad:57:33:79:84:88:97:ef:8b:94:81:52:
                    f6:7f:da:f4:85:5d:39:a4:92:ce:7e:46:4a:06:2a:
                    ea:a8:f1:c7:19:e7:b9:f0:ee:a8:ee:a1:f6:6d:1b:
                    16:9a:d7:bd:7b:7b:0d:7d:84:cf:a8:c3:b4:71:1c:
                    77:26:cc:e2:63:c5:7b:09:d8:cf:53:45:e6:4d:d5:
                    ba:6a:7c:5c:7f:7f:65:0f:6a:8e:60:90:ed:4b:a5:
                    a9:d0:4a:9a:58:67:c7:7f:0e:3c:f6:eb:17:cc:42:
                    64:54:41:f0:62:f8:fc:36:bb:aa:91:8e:90:f3:7c:
                    cc:fe:08:a3:4a:42:39:d3:7e:df:71:7d:72:6d:48:
                    70:e1:70:b2:7a:7e:b9:6e:c2:b3:c7:da:7c:bb:91:
                    45:3a:83:6f:1c:a5:af:1f:96:47:75:11:9d:81:92:
                    4c:f3:0c:ea:67:f5:71:80:cc:20:dd:6e:12:b7:b5:
                    7b:a1:d0:4c:19:dd:64:7a:79:62:68:70:e5:c1:e2:
                    07:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:80:92:1E:76:59:8E:55:C7:66:68:6D:C2:F9:B4:C7:25:29:53:25
            X509v3 Authority Key Identifier:
                keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3132382e3235312e302f32342d3234203d3e20313333373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.128.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:42:3a:e2:f4:83:33:a5:71:be:fe:8f:80:e8:6d:5b:23:19:
         97:86:f2:b1:84:b1:64:02:32:07:eb:52:67:22:3a:e3:bd:2e:
         7e:a7:02:09:17:6e:c2:aa:87:35:e1:c9:2c:fd:9a:c6:d3:54:
         40:41:0c:5e:31:5c:55:61:45:a5:f1:87:33:ea:87:48:13:f3:
         6b:76:ac:00:3a:b0:59:e3:3c:fb:40:a0:aa:57:a6:7d:3f:06:
         fe:3f:72:93:67:a7:0f:3c:d7:2e:9d:c3:d4:01:42:59:e3:1b:
         73:99:0f:ee:eb:40:a0:e9:1e:6f:1f:42:60:66:7f:81:de:6a:
         a0:0a:59:bf:88:dc:d0:7e:36:36:4a:cf:52:53:43:83:e5:fc:
         28:d9:8c:4b:d7:3d:83:2c:34:5c:ce:55:62:37:84:6c:01:23:
         09:c1:24:80:04:ec:ec:b0:c3:8c:13:1d:b0:a7:ce:ac:d1:af:
         1a:43:a7:57:4f:79:39:f5:dd:13:62:ea:9a:08:b3:ac:de:7c:
         72:5a:e1:a7:83:6a:c1:d5:48:e3:3d:a9:d7:1f:70:dc:c2:c7:
         28:71:3b:9e:31:cc:2f:9c:61:f1:83:da:23:f0:f3:c6:84:60:
         7f:94:c3:76:bc:6a:2c:5d:d6:8a:fc:26:e1:86:36:9a:b4:37:
         c9:e0:e0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:06 2024 by rpki-client on console-fra.rpki-client.org