Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e33322e302f32342d3234203d3e203435333235.roa
File:                     3132322e3234382e33322e302f32342d3234203d3e203435333235.roa (raw, json)
Hash identifier:          s2kNTGroeu4/Xvvh9r9C2qWIZZRzpLDZvUiUproIiew=
Subject key identifier:   D5:35:5A:77:EA:45:FF:D7:25:33:05:BA:8E:49:B6:A8:F0:1C:29:5F
Certificate issuer:       /CN=C16E46D556A47D2429EC847E95E7C429D38AC26D
Certificate serial:       6D64D0DE7D8C7C5907F6BF131FED06E3BCFDA90E
Authority key identifier: C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e33322e302f32342d3234203d3e203435333235.roa
Signing time:             Tue 05 Dec 2023 07:38:35 +0000
ROA not before:           Tue 05 Dec 2023 07:33:35 +0000
ROA not after:            Tue 03 Dec 2024 07:38:35 +0000
asID:                     45325
IP address blocks:        122.248.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl
                          rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 12:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:64:d0:de:7d:8c:7c:59:07:f6:bf:13:1f:ed:06:e3:bc:fd:a9:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C16E46D556A47D2429EC847E95E7C429D38AC26D
        Validity
            Not Before: Dec  5 07:33:35 2023 GMT
            Not After : Dec  3 07:38:35 2024 GMT
        Subject: CN=D5355A77EA45FFD7253305BA8E49B6A8F01C295F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:52:41:8f:9a:f5:37:0a:ee:2f:03:76:dd:24:
                    58:ba:13:c0:45:f6:98:d4:5b:cb:fe:b0:04:dc:29:
                    53:6e:cf:9e:51:b8:c5:bc:0d:bf:8d:3a:1e:82:6a:
                    7c:63:2f:8d:63:34:b3:b2:6d:9e:99:dd:09:49:f1:
                    07:a8:4c:de:4d:da:09:6f:10:64:23:6c:d9:bb:da:
                    3a:28:97:5d:88:0b:3d:a2:1a:c4:bc:3e:44:15:01:
                    26:f8:53:6e:55:12:a8:10:82:09:2b:5c:dd:a4:1e:
                    1f:45:0c:32:f8:4e:bd:3c:65:56:a5:f5:a1:e8:d2:
                    00:3e:bc:58:1e:c7:27:9f:37:c3:cc:e7:84:f0:f3:
                    ea:c9:8e:5a:73:fd:9c:6b:b3:3e:1e:e6:54:f8:df:
                    73:a2:27:17:bc:1d:31:66:55:19:70:5b:a6:ea:5c:
                    a8:66:15:ec:7e:a9:ad:3e:f4:80:a7:3e:84:40:c5:
                    a6:92:fc:67:7e:92:46:73:35:74:2e:ff:7f:71:34:
                    a0:55:e9:ed:79:5a:ed:45:68:ee:40:d1:ff:02:f0:
                    67:94:5a:c3:88:a5:9a:82:a4:b6:92:06:c8:36:ed:
                    06:8f:20:3c:8c:b9:ae:ad:f7:81:3f:c8:e4:ab:55:
                    51:f3:4a:c9:ed:6b:53:d5:0e:5e:ab:fc:ec:ca:61:
                    13:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:35:5A:77:EA:45:FF:D7:25:33:05:BA:8E:49:B6:A8:F0:1C:29:5F
            X509v3 Authority Key Identifier:
                keyid:C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e33322e302f32342d3234203d3e203435333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.248.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:b0:b6:0b:ea:9a:ca:6b:32:b3:7f:95:82:51:21:3b:5d:aa:
         fd:bd:e1:8e:21:27:75:b5:99:c7:67:1d:55:a5:48:8f:1d:82:
         51:af:81:e6:b7:da:93:11:7b:fa:33:d0:ad:60:d0:25:18:de:
         2a:46:c5:c5:65:b6:08:ec:2e:87:5c:7a:52:1a:98:75:f3:df:
         c8:db:98:29:b3:a1:27:f6:c0:6f:0d:33:81:bb:99:da:f4:dd:
         bb:ca:0a:97:47:fd:c3:93:d9:44:ca:12:ab:27:ec:08:8c:3e:
         d5:06:42:4d:7c:d6:6e:e9:0c:87:3f:7d:c0:99:f4:4c:85:24:
         52:ff:78:57:78:3a:1b:04:50:68:e5:6d:98:d2:53:a5:a6:35:
         86:e4:15:df:22:db:0f:20:08:2c:a7:7b:45:e8:fe:9d:38:37:
         10:98:cd:85:7d:9c:17:82:25:87:a3:0f:84:a7:04:c2:18:14:
         80:76:96:95:2d:ac:db:d9:86:af:c1:bc:61:53:66:48:27:17:
         d3:1a:81:f3:18:95:78:9b:ac:62:2c:18:82:2b:35:40:bb:ee:
         bf:15:54:2b:c4:9c:2a:e0:63:ae:11:17:46:1d:69:3b:b5:f0:
         91:be:40:f3:f0:f3:ab:70:fc:08:b2:67:e3:64:83:e9:55:30:
         a2:f2:f0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:36:38 2024 by rpki-client on console-ams.rpki-client.org