Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/34332e3234352e3138302e302f32322d3234203d3e203538333937.roa
File:                     34332e3234352e3138302e302f32322d3234203d3e203538333937.roa (raw, json)
Hash identifier:          f+W5KSnYaSOmv7obX83rwEJhTHZvGPxy0VlZOsEAh+k=
Subject key identifier:   5D:95:9D:BC:36:44:C1:15:72:15:2B:7D:A8:96:44:5E:D7:12:18:7D
Certificate issuer:       /CN=8A95FAF723EC129E336E75ACE1CD4F3094FB6481
Certificate serial:       6F9217D4CC570F7CBFE94F00FEEFFE88614C2C96
Authority key identifier: 8A:95:FA:F7:23:EC:12:9E:33:6E:75:AC:E1:CD:4F:30:94:FB:64:81
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/34332e3234352e3138302e302f32322d3234203d3e203538333937.roa
Signing time:             Sat 09 Nov 2024 11:00:01 +0000
ROA not before:           Sat 09 Nov 2024 10:55:01 +0000
ROA not after:            Sat 08 Nov 2025 11:00:01 +0000
asID:                     58397
IP address blocks:        43.245.180.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl
                          rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:92:17:d4:cc:57:0f:7c:bf:e9:4f:00:fe:ef:fe:88:61:4c:2c:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A95FAF723EC129E336E75ACE1CD4F3094FB6481
        Validity
            Not Before: Nov  9 10:55:01 2024 GMT
            Not After : Nov  8 11:00:01 2025 GMT
        Subject: CN=5D959DBC3644C11572152B7DA896445ED712187D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:86:b1:1b:e3:ca:ad:b6:91:20:9f:77:e2:46:
                    b5:0d:49:7b:d4:7e:49:5a:f5:d9:c3:02:47:7a:a9:
                    c3:63:ed:2a:cc:99:1d:30:cb:79:4d:31:0c:59:ca:
                    30:6a:c9:37:01:78:1b:c2:72:c2:07:22:0b:c3:79:
                    6f:4f:5b:20:e8:6b:a2:25:97:a4:f1:65:bb:05:1f:
                    a9:85:7e:a7:b9:11:73:75:16:a7:d3:3a:41:86:93:
                    29:92:d8:26:87:7b:fc:f0:d4:73:e6:8c:7f:91:c9:
                    4c:f8:fd:b7:68:2e:5d:b9:94:84:3d:a6:5a:39:3d:
                    33:50:52:e6:95:a3:e3:7d:b1:14:db:57:24:df:0a:
                    e4:0c:82:10:67:69:21:7f:4b:a6:df:2c:33:a0:a4:
                    a7:57:c0:fa:34:fa:d7:8f:87:9e:a2:7a:10:62:67:
                    a6:68:c7:89:eb:7d:78:ad:d7:9c:ad:a1:44:6e:ba:
                    6e:42:bf:91:8d:73:3a:32:04:83:8a:22:d8:76:31:
                    35:67:4e:63:64:84:c3:bf:0d:ee:7c:57:9b:0e:30:
                    d0:11:cb:46:d0:e9:72:ab:60:6d:0a:39:b0:c5:bd:
                    21:96:98:f0:f4:60:e2:1d:7d:02:2e:6c:ea:76:16:
                    02:43:76:3b:14:b1:ac:a1:3f:b6:e3:f5:ef:f6:8d:
                    80:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:95:9D:BC:36:44:C1:15:72:15:2B:7D:A8:96:44:5E:D7:12:18:7D
            X509v3 Authority Key Identifier:
                keyid:8A:95:FA:F7:23:EC:12:9E:33:6E:75:AC:E1:CD:4F:30:94:FB:64:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/34332e3234352e3138302e302f32322d3234203d3e203538333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.245.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:fa:0a:ba:2c:e9:04:63:b6:49:93:11:eb:51:47:eb:ba:b4:
         51:35:e1:e1:49:79:c7:c4:6c:27:21:2e:80:2b:07:6d:be:03:
         85:d4:07:ee:f0:9c:be:ed:d4:78:2d:72:c6:f4:b1:dd:75:8e:
         e5:a5:c9:67:58:32:60:01:74:fd:24:62:b6:44:78:2e:74:94:
         c2:67:19:73:f5:a3:8c:70:57:6f:59:77:ec:15:37:f5:99:9d:
         30:dd:28:e2:27:b1:2d:4a:bd:9a:f6:1e:bb:d4:95:ad:ba:a1:
         85:ab:1f:7e:22:94:b3:4a:9f:93:e7:7e:f5:92:dd:78:69:c3:
         44:e4:6c:e1:b6:90:48:c3:ec:ea:6a:29:8d:be:96:74:43:0e:
         b7:ee:16:36:07:0b:66:0d:a2:28:3d:40:c6:68:c2:04:c3:1a:
         34:05:1e:2b:42:e4:cd:56:78:c4:aa:93:df:f3:34:18:d5:4c:
         d9:05:da:36:2a:4e:30:e4:db:29:cb:a1:a4:e6:45:f0:5d:4c:
         b0:9a:7f:cf:ba:f4:39:2d:11:b7:af:43:02:bd:bc:83:0f:d6:
         a1:85:24:9b:6b:fb:a9:87:49:7d:e3:10:63:0f:dc:b0:35:9b:
         76:6b:dd:78:6e:20:44:24:b0:7a:3b:5c:34:e9:f2:d2:3a:ac:
         62:dd:a0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:15 2024 by rpki-client on console-ams.rpki-client.org