Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/3132332e3137362e3132342e302f32322d3234203d3e20313336313036.roa
File:                     3132332e3137362e3132342e302f32322d3234203d3e20313336313036.roa (raw, json)
Hash identifier:          02HO1PKYayNDxyphfyAxpH3p6ci+e/TAvLmogZGzt4E=
Subject key identifier:   99:76:3A:E2:FE:7F:E9:DA:34:D8:65:4F:67:09:43:FE:E2:F8:B0:64
Certificate issuer:       /CN=55FE929F3DF18E4B5BC4309769AA6C72AFF634CC
Certificate serial:       1E1A087CDB72BA81F30F076846284592319FCE6B
Authority key identifier: 55:FE:92:9F:3D:F1:8E:4B:5B:C4:30:97:69:AA:6C:72:AF:F6:34:CC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/3132332e3137362e3132342e302f32322d3234203d3e20313336313036.roa
Signing time:             Wed 15 May 2024 09:00:56 +0000
ROA not before:           Wed 15 May 2024 08:55:56 +0000
ROA not after:            Wed 14 May 2025 09:00:56 +0000
asID:                     136106
IP address blocks:        123.176.124.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.crl
                          rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:1a:08:7c:db:72:ba:81:f3:0f:07:68:46:28:45:92:31:9f:ce:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55FE929F3DF18E4B5BC4309769AA6C72AFF634CC
        Validity
            Not Before: May 15 08:55:56 2024 GMT
            Not After : May 14 09:00:56 2025 GMT
        Subject: CN=99763AE2FE7FE9DA34D8654F670943FEE2F8B064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ee:65:7a:e2:35:4b:bd:cd:c6:16:6d:76:a4:
                    68:66:38:31:2f:8e:1b:8d:b1:4e:9b:b7:d8:68:f0:
                    f5:1e:1d:e1:a8:07:c9:58:04:a0:73:86:6c:5a:3a:
                    10:59:c6:5a:72:65:3a:e5:95:bc:a5:aa:a7:59:d8:
                    6a:a7:3e:9a:a0:c0:08:ec:25:8c:97:eb:b7:b6:6a:
                    40:71:dc:01:6f:7f:19:aa:14:89:fe:b3:46:3b:c7:
                    51:47:b5:11:8d:b8:c4:6c:03:e3:87:44:de:1c:86:
                    98:e8:13:1b:d3:ed:e1:ab:7a:18:22:a3:f7:ce:92:
                    f7:12:c7:01:55:f1:a7:23:1c:fa:78:e0:cc:23:7e:
                    24:69:06:71:06:58:8f:11:22:28:44:79:13:f2:2a:
                    08:4c:09:16:51:9b:e5:76:8f:d9:41:65:4a:16:8d:
                    1a:58:43:9c:dc:cb:05:a7:e8:51:5f:cc:9b:c7:34:
                    09:36:12:77:05:93:dd:44:7f:79:0c:be:ed:75:2b:
                    0f:47:e3:44:8f:c0:17:61:63:c6:b9:c7:16:32:b1:
                    6c:42:5b:99:ae:c3:09:48:d3:a5:ce:0d:bc:aa:1a:
                    0a:a5:e8:ab:19:d6:c0:cf:b6:d9:f5:63:63:5d:b4:
                    4f:97:10:05:bb:da:37:1c:5c:f0:ae:fd:fc:af:d2:
                    8b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:76:3A:E2:FE:7F:E9:DA:34:D8:65:4F:67:09:43:FE:E2:F8:B0:64
            X509v3 Authority Key Identifier:
                keyid:55:FE:92:9F:3D:F1:8E:4B:5B:C4:30:97:69:AA:6C:72:AF:F6:34:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/3132332e3137362e3132342e302f32322d3234203d3e20313336313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.176.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:d6:e3:70:27:5e:e7:d8:0f:67:3c:90:98:33:d1:65:43:62:
         46:93:ed:07:5b:b7:b5:bb:c2:06:79:67:05:15:fb:9a:00:aa:
         4d:21:0d:e0:92:75:da:4b:34:8b:cc:99:8f:36:3d:49:e3:e3:
         26:27:f0:5e:66:41:c2:2c:f9:ed:e1:89:2c:85:6e:29:7d:1b:
         59:f1:c5:54:a7:42:8d:e6:d0:0a:56:c0:5c:1d:ef:4e:3d:bd:
         de:15:26:f9:82:2a:a9:d0:9c:e3:c0:0f:f1:67:91:8c:18:7b:
         83:92:ac:8c:d9:87:e8:39:23:b4:09:f3:98:de:81:37:67:b4:
         a7:ac:44:02:25:a7:83:d0:a8:90:d7:ec:c8:e0:8f:b7:91:5a:
         b8:d2:e9:3c:01:e2:7f:f6:5a:10:88:ec:d0:c3:f9:26:57:d2:
         7d:e3:77:5e:b6:97:7d:a3:dd:e4:82:6e:0c:05:12:36:64:65:
         9a:38:4a:b6:e1:f7:66:32:45:b9:29:ce:a5:ba:e8:0b:23:d0:
         95:90:23:c5:1d:68:39:2c:01:3c:3c:60:e6:b6:58:ef:24:89:
         6b:a9:cd:2b:45:70:0f:d6:cf:7e:29:88:53:cc:57:53:ab:06:
         52:13:c6:5e:73:41:5c:bb:2d:16:be:e7:4f:08:3b:cd:f8:a1:
         4d:bc:b5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:11 2024 by rpki-client on console-fra.rpki-client.org