Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e34382e302f32302d3230203d3e203435333132.roa
File:                     3230322e38312e34382e302f32302d3230203d3e203435333132.roa (raw, json)
Hash identifier:          GYwWFq8pDlmCiRaeE0Tl4UNMi9bedsvqoL+LcI06Elc=
Subject key identifier:   2E:71:21:76:80:66:61:7A:90:A8:FB:77:B2:66:6C:84:1B:ED:42:C5
Certificate issuer:       /CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
Certificate serial:       318E7D085B0F0A73DFCA037C1E90CC5D38E200D7
Authority key identifier: 15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e34382e302f32302d3230203d3e203435333132.roa
Signing time:             Mon 01 Jul 2024 01:04:12 +0000
ROA not before:           Mon 01 Jul 2024 00:59:12 +0000
ROA not after:            Mon 30 Jun 2025 01:04:12 +0000
asID:                     45312
IP address blocks:        202.81.48.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl
                          rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 13:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:8e:7d:08:5b:0f:0a:73:df:ca:03:7c:1e:90:cc:5d:38:e2:00:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
        Validity
            Not Before: Jul  1 00:59:12 2024 GMT
            Not After : Jun 30 01:04:12 2025 GMT
        Subject: CN=2E7121768066617A90A8FB77B2666C841BED42C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f9:a1:64:92:db:4a:f6:de:fa:a0:fb:5f:79:
                    c6:e6:46:61:36:5d:8a:af:75:4c:e0:e5:59:25:63:
                    0e:ed:36:dc:38:be:30:36:a4:d5:c3:42:51:33:2a:
                    95:07:a3:f2:a7:2b:3f:84:56:7d:93:fb:4a:7a:b0:
                    88:9f:6f:1b:91:49:4b:29:2e:c3:df:02:9e:85:1a:
                    24:fb:3e:cb:0b:d0:87:36:0f:82:41:d1:bc:8c:bd:
                    f3:e8:8c:2c:ff:89:11:af:1b:f1:f3:ff:80:d2:de:
                    b2:63:76:d5:7a:eb:14:f8:cf:16:7f:76:78:49:6a:
                    4b:a4:fd:85:ae:ab:41:ff:74:e0:05:26:da:a0:86:
                    a2:68:60:1f:7a:60:e9:57:00:e3:64:73:12:67:dd:
                    66:09:7f:b8:96:d3:4f:69:22:eb:d5:69:7b:46:c9:
                    8a:54:7d:4c:7d:36:33:90:3b:95:18:20:21:17:57:
                    5d:3b:44:89:23:b5:4a:2b:b4:f9:c7:84:22:d9:fe:
                    5a:bd:77:84:b6:fa:5d:9e:91:ee:69:a3:fa:5f:72:
                    92:17:96:ee:54:cf:a8:67:c0:37:a1:57:b8:75:7e:
                    13:e9:94:5f:4f:bf:09:2e:62:fd:4e:b7:7e:50:4a:
                    d2:79:a0:68:53:10:86:c3:e7:98:e1:ee:55:26:4c:
                    00:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:71:21:76:80:66:61:7A:90:A8:FB:77:B2:66:6C:84:1B:ED:42:C5
            X509v3 Authority Key Identifier:
                keyid:15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e34382e302f32302d3230203d3e203435333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.81.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         63:2c:38:f2:14:fd:ba:7e:e5:d6:11:21:f5:00:eb:82:81:ac:
         1d:53:57:0b:ae:7d:2d:b4:2f:f8:e1:6b:d6:bf:eb:73:e9:12:
         13:90:8c:a6:1b:93:fc:a3:7a:ee:e9:85:54:3c:bf:96:ea:66:
         7b:48:f8:e3:dc:5e:85:d2:24:33:ba:60:53:7f:d3:61:a0:f2:
         c1:2e:05:7f:b7:27:e0:96:d1:41:9a:b5:f1:57:33:ac:b4:2d:
         fd:53:94:12:92:a5:97:cd:b7:a9:0a:e4:87:24:41:39:b9:2c:
         c7:bb:7b:94:16:2d:6a:99:23:71:82:54:46:09:cd:d1:01:be:
         6b:5c:b4:99:e7:27:85:f9:48:32:49:26:5d:4f:db:3a:88:c4:
         26:2f:3c:5b:f6:35:fe:f2:ca:b7:92:f6:aa:3e:cf:ec:4c:3d:
         19:60:87:7c:2e:e7:3c:23:49:88:9a:4f:6c:b2:75:b4:36:2f:
         5f:4c:ff:90:38:34:97:ea:29:9e:3f:72:c5:44:3a:ff:21:dc:
         49:fb:91:4d:a7:dc:62:a1:8b:a3:ad:13:9c:c6:d7:2f:52:8b:
         6c:60:a3:8b:d6:8c:49:b3:4d:35:fa:09:a3:0e:32:0a:e3:9a:
         e4:a3:2d:9f:82:c3:8e:a5:ff:3c:f5:e9:16:bd:59:11:cc:2e:
         9b:a2:d4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:13 2024 by rpki-client on console-ams.rpki-client.org