Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3137342e352e302f32342d3234203d3e20313333373938.roa
File:                     3230332e3137342e352e302f32342d3234203d3e20313333373938.roa (raw, json)
Hash identifier:          mmQK03ocxy8797xqpr22KOIMqU5FVbNjMEGAFbS4EZw=
Subject key identifier:   C6:20:13:F3:13:7A:B3:A8:0C:D6:F4:AF:EC:4F:E5:EE:76:24:4B:BE
Certificate issuer:       /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Certificate serial:       5F4B6DF45E7C482B8238DB37D0432BF8E9141AE6
Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3137342e352e302f32342d3234203d3e20313333373938.roa
Signing time:             Tue 06 Feb 2024 08:15:28 +0000
ROA not before:           Tue 06 Feb 2024 08:10:28 +0000
ROA not after:            Tue 04 Feb 2025 08:15:28 +0000
asID:                     133798
IP address blocks:        203.174.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl
                          rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Jun 2024 03:42:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:4b:6d:f4:5e:7c:48:2b:82:38:db:37:d0:43:2b:f8:e9:14:1a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
        Validity
            Not Before: Feb  6 08:10:28 2024 GMT
            Not After : Feb  4 08:15:28 2025 GMT
        Subject: CN=C62013F3137AB3A80CD6F4AFEC4FE5EE76244BBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dd:ab:57:5f:07:9a:51:11:6a:27:ed:4f:33:
                    d1:9e:78:4a:90:03:0a:ce:fb:dc:72:ab:07:78:e4:
                    71:ab:74:b6:a6:23:6c:b0:df:5a:1c:6e:7a:b9:54:
                    3a:7e:fe:f5:5d:d6:6f:4f:8e:b9:f8:7f:9f:92:a8:
                    63:58:16:71:83:1c:2c:84:ce:cb:b1:c8:a6:a7:bc:
                    0e:ac:6d:23:ce:93:16:9c:02:b5:19:51:1b:89:0d:
                    b0:4e:4a:5e:b4:b7:43:e4:d1:81:b9:38:3f:30:6a:
                    8f:b0:43:39:c7:a2:fb:8a:3b:9b:b5:d0:4a:6a:64:
                    1a:0c:ba:ee:e8:4e:ba:71:f3:2a:b4:f9:62:3a:0a:
                    9f:64:3b:7f:98:88:35:b6:e1:13:f4:36:8e:7d:1b:
                    71:29:63:27:89:ab:29:f4:01:a0:97:bf:35:29:2d:
                    60:9d:a5:1d:74:44:7e:95:b1:c3:f8:93:80:f9:f6:
                    9e:8a:29:b5:8f:05:71:95:f0:21:b0:02:ae:27:f1:
                    d2:4b:8b:56:bb:bc:ce:7b:aa:26:76:22:e1:e9:b1:
                    66:8c:1f:95:6e:3c:53:84:ca:30:50:62:0c:52:c9:
                    d1:6b:65:90:91:50:2f:aa:9c:17:f9:11:ff:1d:82:
                    d8:4c:c9:e5:71:51:a5:9a:08:c7:6b:c1:3a:72:2f:
                    4c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:20:13:F3:13:7A:B3:A8:0C:D6:F4:AF:EC:4F:E5:EE:76:24:4B:BE
            X509v3 Authority Key Identifier:
                keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3137342e352e302f32342d3234203d3e20313333373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.174.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:c8:8c:18:37:0b:f2:3a:29:3c:56:a1:58:a8:e9:bc:b5:43:
         9b:80:76:8a:42:11:45:0f:d5:9b:5c:21:8b:17:4a:e0:c2:e3:
         cc:74:a1:4f:50:1f:ab:87:af:aa:30:a4:c6:d9:c9:92:43:21:
         3a:5a:4a:05:9b:d4:ad:20:09:6c:0e:d5:20:89:ed:0c:dc:43:
         f2:3a:1a:f2:12:10:fd:19:a9:2d:a2:22:e9:c8:a7:cf:1a:f4:
         5d:96:9d:3e:28:19:0f:55:bb:5d:b2:07:a5:41:0b:44:df:3c:
         33:9e:e7:65:1f:73:00:ee:98:72:e0:57:cf:c7:f7:6a:b5:99:
         db:7b:d5:97:16:e7:2a:67:88:a5:d1:bc:d9:76:1a:8b:d2:e0:
         26:16:a8:c6:e9:21:e7:93:80:85:c7:32:28:7e:0e:ea:5e:3c:
         85:a2:a2:da:81:2d:00:00:9f:79:d4:2a:19:c3:fe:df:86:f1:
         d1:07:bd:2f:88:c2:e6:52:b5:16:78:a3:c0:ef:73:b0:b8:4f:
         6b:f5:73:1a:90:ef:c6:8e:77:dd:97:9a:34:20:43:3e:35:fd:
         c2:1c:bc:89:64:30:03:e7:8b:9b:75:f4:46:81:59:31:62:9d:
         df:6c:f5:9d:e2:7a:62:ce:3b:fd:70:80:98:ac:d3:09:44:06:
         90:8a:4d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 07:25:12 2024 by rpki-client on console-ams.rpki-client.org