Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/3230332e3137352e3130302e302f32332d3234203d3e20313532303132.roa
File:                     3230332e3137352e3130302e302f32332d3234203d3e20313532303132.roa (raw, json)
Hash identifier:          cHItTC0a1HdevL5GM21VSDKVW0QVwvqhZPYzEqAwtRk=
Subject key identifier:   97:5B:1E:14:3B:31:79:D6:DF:36:79:EC:02:0C:5A:BF:D7:42:33:AD
Certificate issuer:       /CN=312D6572B0C104C0D51834C1B01CB0C593DAE8B4
Certificate serial:       613B697661CEA18A4361F7DC44AF5664A8569DEA
Authority key identifier: 31:2D:65:72:B0:C1:04:C0:D5:18:34:C1:B0:1C:B0:C5:93:DA:E8:B4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/3230332e3137352e3130302e302f32332d3234203d3e20313532303132.roa
Signing time:             Fri 18 Oct 2024 09:00:01 +0000
ROA not before:           Fri 18 Oct 2024 08:55:01 +0000
ROA not after:            Fri 17 Oct 2025 09:00:01 +0000
asID:                     152012
IP address blocks:        203.175.100.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.crl
                          rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 00:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:3b:69:76:61:ce:a1:8a:43:61:f7:dc:44:af:56:64:a8:56:9d:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=312D6572B0C104C0D51834C1B01CB0C593DAE8B4
        Validity
            Not Before: Oct 18 08:55:01 2024 GMT
            Not After : Oct 17 09:00:01 2025 GMT
        Subject: CN=975B1E143B3179D6DF3679EC020C5ABFD74233AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c2:fd:85:3b:e3:24:95:0b:d5:91:f7:29:e7:
                    55:b6:6f:f8:30:43:a2:03:ec:bb:8c:16:9e:0f:cc:
                    9b:48:b6:22:56:00:e5:e0:40:21:1d:8f:ff:86:a8:
                    73:5f:b4:44:10:0c:61:55:4a:85:1e:64:f0:3c:03:
                    44:5a:f7:7a:f4:1a:a7:7d:a5:66:b7:fb:8d:96:68:
                    f0:57:e9:d7:8b:bd:2c:e5:0c:18:ae:55:d1:b5:8e:
                    72:01:88:9e:ee:3f:f9:3f:52:62:2b:f2:01:ee:d2:
                    92:9c:dc:d2:83:85:29:69:f8:9b:f0:8c:e8:d0:c5:
                    b6:4d:12:e3:80:53:61:b1:f8:c6:74:02:c5:72:26:
                    1b:5b:46:94:38:16:cd:ee:c3:20:5e:e8:16:2b:3a:
                    4b:19:d6:d6:69:a0:6e:17:ee:29:92:ea:6c:ab:53:
                    44:dc:cc:68:6f:76:e4:ac:93:28:c8:c2:a3:6b:1c:
                    23:e5:3d:dd:c7:70:48:80:f1:c1:bf:d5:2d:b3:54:
                    48:22:c1:70:55:07:5e:57:14:02:93:f3:b2:69:cb:
                    58:d4:f2:2b:6a:51:e1:82:59:3e:d3:62:5c:56:17:
                    91:aa:5e:e6:ad:5f:af:20:f3:3f:12:2b:79:65:8a:
                    d4:3c:a1:ff:4b:77:2d:f2:68:c9:f6:76:dd:fc:08:
                    53:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:5B:1E:14:3B:31:79:D6:DF:36:79:EC:02:0C:5A:BF:D7:42:33:AD
            X509v3 Authority Key Identifier:
                keyid:31:2D:65:72:B0:C1:04:C0:D5:18:34:C1:B0:1C:B0:C5:93:DA:E8:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/3230332e3137352e3130302e302f32332d3234203d3e20313532303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.175.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:ec:e0:a3:ef:a3:fc:85:4b:08:8a:b6:06:74:16:a8:68:76:
         1d:fc:ce:cd:e3:88:6c:94:04:7a:fe:b5:64:0c:c8:67:e5:db:
         4f:a1:6d:ad:6e:ce:80:d7:f1:82:59:ca:10:b9:02:a2:b2:9e:
         a6:1c:4e:c4:c0:2c:5b:c3:0c:a0:5b:d6:16:a5:d3:d3:9c:a5:
         39:aa:86:e7:c5:86:18:37:f0:28:fa:14:6d:18:46:a5:d1:e5:
         ac:0e:c5:44:3d:55:f7:ec:60:53:39:70:f6:69:09:bb:45:b5:
         f2:08:88:e5:dc:4f:69:2e:a2:e7:06:76:b4:b3:54:0d:04:9b:
         3f:39:12:1d:ff:d7:6b:57:57:69:2e:dd:4c:0a:90:38:1e:2a:
         2c:5a:c0:29:a1:2c:42:e7:0c:28:3d:db:49:ae:1c:a2:2e:d3:
         f3:d1:44:e7:b4:83:0c:7f:e5:56:27:b4:68:04:a1:25:96:e3:
         41:8d:b7:46:fd:c1:d5:cd:94:cc:48:77:90:13:10:ee:36:c4:
         82:1f:66:fc:33:a4:14:e2:67:a6:72:36:91:6b:db:f2:93:ff:
         a3:54:c6:bb:0b:cb:9b:84:ae:f7:3c:24:b1:b8:2b:1c:22:9c:
         ae:de:91:0c:0d:aa:de:09:0a:6d:b0:9f:48:b8:12:74:fa:ff:
         7b:d2:7d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:18 2024 by rpki-client on console-fra.rpki-client.org