Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e34392e302f32342d3234203d3e203435333132.roa
File:                     3230322e38312e34392e302f32342d3234203d3e203435333132.roa (raw, json)
Hash identifier:          wTMkz7JeAqhI8opsBHK7J9JnkXTw2HD85s630yiFXqA=
Subject key identifier:   42:7B:DA:6A:43:23:B1:DF:90:4C:4C:CB:5B:0A:F0:66:D3:6E:AF:B3
Certificate issuer:       /CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
Certificate serial:       30A3E9202972638B467E405355C219D681395458
Authority key identifier: 15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e34392e302f32342d3234203d3e203435333132.roa
Signing time:             Mon 01 Jul 2024 01:04:11 +0000
ROA not before:           Mon 01 Jul 2024 00:59:11 +0000
ROA not after:            Mon 30 Jun 2025 01:04:11 +0000
asID:                     45312
IP address blocks:        202.81.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl
                          rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 13:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a3:e9:20:29:72:63:8b:46:7e:40:53:55:c2:19:d6:81:39:54:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
        Validity
            Not Before: Jul  1 00:59:11 2024 GMT
            Not After : Jun 30 01:04:11 2025 GMT
        Subject: CN=427BDA6A4323B1DF904C4CCB5B0AF066D36EAFB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b3:13:f9:e7:df:67:2a:81:47:26:49:40:fd:
                    b9:cc:f2:d3:9b:84:38:fa:76:82:63:dc:a1:61:3e:
                    d7:ea:60:e9:fe:db:d4:fc:66:74:20:d3:68:b3:a9:
                    30:34:e0:6b:88:b3:2c:c9:ac:ad:2a:ea:cc:fb:29:
                    6e:7d:1d:1a:68:7b:20:d8:42:35:9e:64:cf:8c:9e:
                    1e:c6:d6:c4:e3:8f:bb:a2:31:98:45:6f:6a:90:39:
                    2b:cb:59:00:8e:88:33:40:d7:d7:f8:2a:1e:f0:7c:
                    32:ac:5d:19:25:2f:94:ee:b2:d9:69:d2:d5:71:16:
                    08:2b:25:8a:94:51:4b:af:3c:57:48:55:b3:67:0c:
                    ab:97:6e:f1:86:c3:16:e8:78:80:42:d4:2a:9e:b1:
                    9d:18:c5:07:4a:f3:e1:79:1f:f2:23:ce:ad:00:eb:
                    a2:ae:6c:27:f4:1e:67:f1:d5:28:39:d0:11:54:08:
                    99:d2:8d:1c:18:6f:6f:f2:8f:fa:3d:a3:c4:4a:d2:
                    82:d2:76:cf:3f:8a:28:4c:9a:5b:6f:13:66:58:31:
                    88:75:91:c2:ca:cc:0e:00:26:31:95:a6:76:9e:ec:
                    2b:48:1f:8b:39:4c:df:56:50:30:2e:51:61:04:6c:
                    ac:4c:e8:29:3f:9f:aa:c0:6e:1b:ab:10:9d:87:f4:
                    ab:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:7B:DA:6A:43:23:B1:DF:90:4C:4C:CB:5B:0A:F0:66:D3:6E:AF:B3
            X509v3 Authority Key Identifier:
                keyid:15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e34392e302f32342d3234203d3e203435333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.81.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:7e:65:74:e3:1c:fb:4c:a7:44:3a:e7:29:1c:47:74:63:04:
         9a:e5:bb:92:6c:b7:23:69:2a:8b:bb:e6:01:58:49:6c:c0:81:
         e5:72:50:7e:34:87:1c:2d:73:01:64:63:f5:fa:5e:00:c9:d2:
         fe:14:17:52:d9:55:41:6b:59:30:9d:bc:70:a7:d8:56:71:8d:
         72:e2:07:3e:57:f2:9e:a6:bb:8b:d5:c9:df:bd:c0:67:61:73:
         bd:20:f1:7f:eb:f5:74:4a:cc:e7:26:10:c7:36:b9:0d:a4:73:
         11:6f:a5:c8:41:01:99:11:64:ea:ab:a8:c2:f4:74:01:e1:18:
         50:c6:a0:f4:56:6a:f7:fb:05:fc:a2:e5:44:e5:86:70:0a:a7:
         86:62:51:cd:48:dd:9d:77:df:18:53:74:80:a6:35:43:69:f0:
         ec:ee:8a:e0:73:95:4c:ef:41:70:5f:a5:ea:ef:c1:c9:86:b2:
         a7:8e:80:58:24:d2:47:cb:d2:2e:7b:c8:e3:da:a1:b9:0e:90:
         9a:f4:14:f6:f4:73:de:5b:65:de:90:1d:a0:b7:0a:16:72:09:
         82:eb:f5:46:f6:c3:a3:89:cb:60:7d:c7:ea:76:41:43:b7:43:
         2b:7f:83:52:79:c9:62:98:ae:86:ac:c8:f1:82:35:80:ea:50:
         0d:3d:0b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:13 2024 by rpki-client on console-ams.rpki-client.org