Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/34332e3234372e33322e302f32342d3234203d3e203435333132.roa
File:                     34332e3234372e33322e302f32342d3234203d3e203435333132.roa (raw, json)
Hash identifier:          mdC6rH17B3GNuDExndKQ+dbFkWFK+CqwTTm5sVpaMmc=
Subject key identifier:   F5:4F:88:DF:2A:08:F6:29:77:58:FF:B1:C1:41:96:2E:D5:B0:C2:47
Certificate issuer:       /CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
Certificate serial:       698CF94A61D6C04BB435FDE3480E182E3D80D6F2
Authority key identifier: 15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/34332e3234372e33322e302f32342d3234203d3e203435333132.roa
Signing time:             Mon 01 Jul 2024 01:04:13 +0000
ROA not before:           Mon 01 Jul 2024 00:59:13 +0000
ROA not after:            Mon 30 Jun 2025 01:04:13 +0000
asID:                     45312
IP address blocks:        43.247.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl
                          rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 13:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:8c:f9:4a:61:d6:c0:4b:b4:35:fd:e3:48:0e:18:2e:3d:80:d6:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
        Validity
            Not Before: Jul  1 00:59:13 2024 GMT
            Not After : Jun 30 01:04:13 2025 GMT
        Subject: CN=F54F88DF2A08F6297758FFB1C141962ED5B0C247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f6:20:44:9e:b4:5e:99:19:d3:eb:7a:01:57:
                    4a:c3:d7:8c:bd:9d:fb:d7:6e:9e:59:61:9f:82:e5:
                    83:78:68:70:7b:9d:a3:d9:1f:67:34:47:8a:e4:4c:
                    55:dc:0c:ed:cb:76:cc:df:ab:4f:03:a2:73:1b:88:
                    81:51:8a:b2:c3:1f:20:8e:35:bc:89:8d:dc:c2:10:
                    d6:ef:ef:e7:a0:d4:e7:cb:92:54:75:88:bb:cc:16:
                    74:fe:fd:09:7f:bd:9b:17:b3:d6:72:af:9d:dc:5c:
                    a9:a7:a4:37:65:77:a8:aa:6e:a5:62:e9:d5:c4:71:
                    7f:14:0f:a4:fd:6b:fd:22:55:d5:ba:99:9d:77:a2:
                    f4:a1:7e:65:1e:e8:0a:53:82:7d:f2:af:04:86:39:
                    c7:3d:db:d5:9f:d1:de:a7:ea:bc:4a:0c:bb:bf:c1:
                    08:4a:07:61:fc:52:b9:ab:2d:8d:76:92:fc:03:62:
                    10:51:80:ea:c8:da:75:db:48:05:20:fe:df:01:9c:
                    be:0e:41:0e:a7:1e:ec:ee:dc:2a:52:50:a4:d2:97:
                    db:21:8c:3d:51:30:9e:36:db:92:aa:bf:9c:2b:d6:
                    e5:95:9d:20:09:d6:45:1c:32:ea:3b:a2:c7:b1:09:
                    19:38:d9:a2:09:1d:41:61:3d:23:18:b6:84:be:79:
                    c9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:4F:88:DF:2A:08:F6:29:77:58:FF:B1:C1:41:96:2E:D5:B0:C2:47
            X509v3 Authority Key Identifier:
                keyid:15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/34332e3234372e33322e302f32342d3234203d3e203435333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.247.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:cb:62:80:88:f2:71:8e:ce:f2:03:a2:a8:cf:13:a3:fc:69:
         f3:3e:19:29:77:29:6f:e3:9a:c3:ec:c5:52:e0:31:4c:f9:d8:
         fe:f4:42:c5:a1:1c:fb:cc:e2:2f:3a:bb:c3:53:36:f9:1e:db:
         0f:5c:e6:51:a4:d0:69:2e:e3:01:08:8c:94:ec:3f:37:43:4b:
         13:69:60:c8:b7:6c:37:e6:5e:59:f1:d2:9f:31:71:9e:45:30:
         68:55:ca:db:dc:8a:b2:9a:18:1e:57:0a:f7:1f:a1:ff:ff:5e:
         1b:2e:7b:8c:51:87:ed:85:7b:ef:15:21:d7:18:8e:9a:0a:0e:
         cf:57:ea:21:a7:73:ea:ae:7d:93:d1:69:de:b1:85:e4:c8:ea:
         27:87:8d:8e:3f:19:a5:7e:6d:2d:94:1a:54:c6:5e:35:28:44:
         1d:41:eb:dc:af:e6:d4:44:e3:35:4e:2f:32:4f:cd:2d:37:60:
         1f:a0:e4:ea:82:81:42:de:fa:6c:0d:4a:f5:b5:30:fc:15:dd:
         70:0b:76:e2:9b:77:cc:59:e9:33:a3:7f:0d:ef:2d:f5:63:1e:
         17:94:23:b1:bd:a2:42:08:d6:69:8c:79:58:c0:8e:e1:50:f0:
         e0:b3:da:b1:b0:68:a8:75:70:e5:a1:d6:8f:84:8c:7e:9c:0c:
         5c:60:2a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:03 2024 by rpki-client on console-fra.rpki-client.org