Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e33322e302f32342d3234203d3e203435333235.roa
File:                     3132322e3234382e33322e302f32342d3234203d3e203435333235.roa (raw, json)
Hash identifier:          UQXVoZKGz5JhkoTTlnHcb+EQxg2+/5hollJFLUnx0yQ=
Subject key identifier:   50:0E:67:1A:ED:06:BA:69:29:7B:F8:4E:E2:53:D8:87:44:8D:DD:D8
Certificate issuer:       /CN=C16E46D556A47D2429EC847E95E7C429D38AC26D
Certificate serial:       18835A90AC829FB2CB5D79FDA2D455B8C10B2EFA
Authority key identifier: C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e33322e302f32342d3234203d3e203435333235.roa
Signing time:             Tue 05 Nov 2024 08:00:02 +0000
ROA not before:           Tue 05 Nov 2024 07:55:02 +0000
ROA not after:            Tue 04 Nov 2025 08:00:02 +0000
asID:                     45325
IP address blocks:        122.248.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl
                          rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:83:5a:90:ac:82:9f:b2:cb:5d:79:fd:a2:d4:55:b8:c1:0b:2e:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C16E46D556A47D2429EC847E95E7C429D38AC26D
        Validity
            Not Before: Nov  5 07:55:02 2024 GMT
            Not After : Nov  4 08:00:02 2025 GMT
        Subject: CN=500E671AED06BA69297BF84EE253D887448DDDD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b0:86:c9:d2:8e:e0:91:5c:07:5b:8c:b7:41:
                    5e:bd:2a:21:de:9a:87:42:ba:3e:3f:a2:9b:53:67:
                    0a:2a:c4:60:fb:84:63:97:6d:49:65:2f:fb:8d:89:
                    77:db:fa:8e:4e:34:dd:c8:7a:d4:9c:8d:84:f3:3a:
                    61:c8:56:be:80:43:50:df:0a:98:64:ab:0d:f6:81:
                    89:63:53:07:d9:55:c3:25:34:a5:42:0a:5e:a9:1a:
                    5b:8b:76:f9:75:81:ff:6b:8c:b7:65:8f:68:8d:a1:
                    05:27:9d:f8:53:6d:23:40:ab:e0:5f:03:9b:9d:2e:
                    88:86:3f:42:6f:bc:e2:37:4d:05:9a:43:d1:57:95:
                    14:ad:82:51:5b:78:2a:49:41:26:3b:38:ef:a9:a4:
                    b5:bf:c1:44:26:59:c6:a7:b2:da:89:aa:60:f7:eb:
                    24:db:78:65:a3:c1:a7:0e:71:71:0e:f4:86:86:09:
                    8a:89:80:4e:bc:e9:aa:b8:34:f1:59:55:1d:de:da:
                    7a:18:dd:71:53:fe:3f:90:12:13:44:ee:9f:de:68:
                    21:71:c6:3c:5e:ed:dd:49:3d:c8:bf:f5:d9:53:18:
                    b7:be:f2:ed:27:49:20:54:40:c8:6c:ea:c8:6e:bb:
                    e7:8c:9a:e6:52:06:39:88:ce:03:30:3f:48:48:8b:
                    8b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:0E:67:1A:ED:06:BA:69:29:7B:F8:4E:E2:53:D8:87:44:8D:DD:D8
            X509v3 Authority Key Identifier:
                keyid:C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e33322e302f32342d3234203d3e203435333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.248.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:1e:e0:eb:5a:6c:4d:32:01:cc:58:98:41:72:2d:3b:04:6b:
         61:69:41:6d:69:e8:50:33:89:57:19:d7:d3:80:5f:e4:46:e9:
         b7:89:47:e6:9b:a1:a9:28:c3:72:be:5a:e2:d0:e7:34:d0:77:
         9f:79:79:f9:70:a3:b3:5b:cd:de:d9:31:fa:cf:d5:0f:89:8a:
         7a:ac:76:d9:a4:8e:4a:1d:df:3c:61:1e:f9:27:d0:78:cd:93:
         69:df:a2:73:e2:0d:79:9e:e8:da:26:9b:cd:3a:32:27:15:38:
         9a:3d:2c:2d:89:f7:69:e4:6f:83:3f:f7:de:23:f4:96:e0:ff:
         08:f0:ed:06:e7:03:71:3f:cf:a7:90:2d:2a:98:2d:b3:e9:0d:
         da:68:70:70:d4:69:2b:01:da:4b:af:f0:04:e9:4b:2a:88:46:
         3f:7c:5d:d2:bb:2f:e9:99:e6:67:fa:5f:20:2e:9c:c3:ce:9d:
         0c:3f:a6:3c:57:ee:12:5b:6b:60:fd:17:55:fb:83:47:a9:fd:
         92:34:36:99:5e:a4:a5:20:2e:e0:05:ad:0e:5c:64:65:f5:d4:
         26:4a:69:da:24:0f:02:b5:3b:0d:d3:9d:57:18:72:cc:30:68:
         7c:87:a7:5c:d0:03:ec:dd:53:d1:d0:cc:8a:33:3a:e7:d5:3d:
         10:0f:f3:4c
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUGINakKyCn7LLXXn9otRVuMELLvowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzE2RTQ2RDU1NkE0N0QyNDI5RUM4NDdFOTVFN0M0MjlE
MzhBQzI2RDAeFw0yNDExMDUwNzU1MDJaFw0yNTExMDQwODAwMDJaMDMxMTAvBgNV
BAMTKDUwMEU2NzFBRUQwNkJBNjkyOTdCRjg0RUUyNTNEODg3NDQ4RERERDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClsIbJ0o7gkVwHW4y3QV69KiHe
modCuj4/optTZwoqxGD7hGOXbUllL/uNiXfb+o5ONN3IetScjYTzOmHIVr6AQ1Df
Cphkqw32gYljUwfZVcMlNKVCCl6pGluLdvl1gf9rjLdlj2iNoQUnnfhTbSNAq+Bf
A5udLoiGP0JvvOI3TQWaQ9FXlRStglFbeCpJQSY7OO+ppLW/wUQmWcanstqJqmD3
6yTbeGWjwacOcXEO9IaGCYqJgE686aq4NPFZVR3e2noY3XFT/j+QEhNE7p/eaCFx
xjxe7d1JPci/9dlTGLe+8u0nSSBUQMhs6shuu+eMmuZSBjmIzgMwP0hIi4sHAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUUA5nGu0Gumkpe/hO4lPYh0SN3dgwHwYDVR0j
BBgwFoAUwW5G1VakfSQp7IR+lefEKdOKwm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
ZjJlN2ZkNi1lYjVlLTQ4MGEtOGU5Ny1jNTVmNjhlMDU4OWEvMC9DMTZFNDZENTU2
QTQ3RDI0MjlFQzg0N0U5NUU3QzQyOUQzOEFDMjZELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzE2RTQ2RDU1NkE0N0QyNDI5RUM4NDdFOTVFN0M0MjlEMzhB
QzI2RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RmMmU3ZmQ2LWViNWUtNDgwYS04
ZTk3LWM1NWY2OGUwNTg5YS8wLzMxMzIzMjJlMzIzNDM4MmUzMzMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNTMzMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHr4IDANBgkqhkiG
9w0BAQsFAAOCAQEAoh7g61psTTIBzFiYQXItOwRrYWlBbWnoUDOJVxnX04Bf5Ebp
t4lH5puhqSjDcr5a4tDnNNB3n3l5+XCjs1vN3tkx+s/VD4mKeqx22aSOSh3fPGEe
+SfQeM2Tad+ic+INeZ7o2iabzToyJxU4mj0sLYn3aeRvgz/33iP0luD/CPDtBucD
cT/Pp5AtKpgts+kN2mhwcNRpKwHaS6/wBOlLKohGP3xd0rsv6ZnmZ/pfIC6cw86d
DD+mPFfuEltrYP0XVfuDR6n9kjQ2mV6kpSAu4AWtDlxkZfXUJkpp2iQPArU7DdOd
VxhyzDBofIenXNAD7N1T0dDMijM659U9EA/zTA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:49 2024 by rpki-client on console-ams.rpki-client.org