Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/3230332e3139302e3131362e302f32342d3234203d3e203338313536.roa
File:                     3230332e3139302e3131362e302f32342d3234203d3e203338313536.roa (raw, json)
Hash identifier:          0aigw+26bqxQDv+pzDBiO3uDLc9wYu/Da/bitCXqBqA=
Subject key identifier:   04:CC:1A:5A:38:BB:EA:3D:0E:AD:78:1C:EC:88:31:B1:FD:08:53:DA
Certificate issuer:       /CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4
Certificate serial:       49EAC7DA0D62EA257A15B7177E8019707EFE9D09
Authority key identifier: 5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/3230332e3139302e3131362e302f32342d3234203d3e203338313536.roa
Signing time:             Mon 01 Jul 2024 01:05:09 +0000
ROA not before:           Mon 01 Jul 2024 01:00:09 +0000
ROA not after:            Mon 30 Jun 2025 01:05:09 +0000
asID:                     38156
IP address blocks:        203.190.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl
                          rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 14:36:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ea:c7:da:0d:62:ea:25:7a:15:b7:17:7e:80:19:70:7e:fe:9d:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4
        Validity
            Not Before: Jul  1 01:00:09 2024 GMT
            Not After : Jun 30 01:05:09 2025 GMT
        Subject: CN=04CC1A5A38BBEA3D0EAD781CEC8831B1FD0853DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:93:ed:ea:1e:61:d9:b2:91:61:b2:98:93:1a:
                    dc:03:02:e8:a0:af:2b:e5:ca:fc:11:69:d6:58:2f:
                    7a:7e:e7:01:26:c6:bd:ad:07:4a:e6:78:2a:7d:6c:
                    f4:d3:92:ed:0a:04:b8:bd:83:1e:75:32:7f:55:45:
                    6d:16:78:27:ce:50:4b:b1:6c:6d:b8:9b:2e:f6:e3:
                    2f:d5:69:ee:a7:e5:77:26:ef:81:e7:12:84:86:6a:
                    d4:e1:26:aa:ee:8e:86:3e:1e:6b:20:41:81:a2:c5:
                    8d:59:14:ee:ca:0d:40:f4:ca:e0:0d:f3:08:b6:82:
                    67:19:ef:92:6d:79:ec:65:e8:a2:7e:1b:f2:b3:fb:
                    94:48:84:eb:6c:57:0e:83:88:b1:63:e6:b2:cd:87:
                    71:cc:1f:60:c9:36:a0:36:35:c6:8d:92:01:50:1c:
                    da:59:c1:34:19:ac:f2:86:44:6c:77:63:36:f0:7b:
                    0b:c6:1a:bf:66:07:8b:1c:7f:12:c2:c4:d8:ae:b2:
                    4d:a4:51:35:50:26:45:b6:81:4d:ae:46:5b:3d:fc:
                    a3:4d:ab:5c:ad:41:73:ca:f3:c3:9e:3b:73:e6:eb:
                    b6:d3:77:f5:72:8a:ab:28:a1:cc:b6:23:66:62:79:
                    6d:cb:dd:59:15:5d:43:90:a0:39:7f:49:9c:9d:a4:
                    2b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:CC:1A:5A:38:BB:EA:3D:0E:AD:78:1C:EC:88:31:B1:FD:08:53:DA
            X509v3 Authority Key Identifier:
                keyid:5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/3230332e3139302e3131362e302f32342d3234203d3e203338313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.190.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:74:73:f1:25:a1:90:93:62:75:19:76:8c:bf:b0:bd:3a:85:
         df:d1:5f:e1:2f:fb:3d:a6:62:6b:92:74:d9:8b:ef:0e:68:26:
         53:1a:64:57:8b:7a:cc:3a:d2:f8:f0:70:6a:46:e5:41:be:16:
         10:4d:9a:a3:0b:2f:b6:a3:ab:94:7a:cb:78:d0:7c:3e:d7:a8:
         ec:27:6e:ac:79:44:1a:a0:35:bf:bb:12:0f:e9:79:7d:4a:00:
         5c:cc:6d:78:cb:7e:cf:0e:16:27:83:fe:1c:4f:9a:c4:1e:bb:
         60:61:c1:55:41:86:64:20:30:6e:78:6f:7f:a9:80:40:61:a9:
         f1:5c:ea:82:b2:b3:fd:80:c3:3e:2a:44:6e:ce:dd:a7:8a:33:
         2e:8c:a4:7c:a8:97:72:46:1b:e1:a9:c1:7a:fa:1b:92:8e:4d:
         46:ad:e9:2b:b1:27:57:45:08:21:93:fe:ca:4f:ad:66:ba:cc:
         db:86:db:e6:9f:4f:50:c6:cd:14:dc:f8:2f:59:79:24:ea:5b:
         c7:e5:6c:f7:41:ae:6f:c6:7b:80:f7:8f:c5:50:6f:3f:d0:90:
         3f:e6:56:9c:03:c9:6d:c1:50:9c:cc:50:5c:43:ea:bc:d3:4a:
         e9:03:7e:61:49:96:c5:8c:38:8a:f6:e3:c4:a8:04:30:9c:2f:
         69:4d:e5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:13:31 2024 by rpki-client on console-fra.rpki-client.org