Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e33332e302f32342d3234203d3e203435333235.roa
File:                     3132322e3234382e33332e302f32342d3234203d3e203435333235.roa (raw, json)
Hash identifier:          1bWKpPyCmq0Ewpg+6GFok/ArRgk2NtJdp28v3wc0LwU=
Subject key identifier:   A7:8C:4A:59:CD:52:F3:E8:D5:42:8E:9D:22:DF:CD:49:A1:C3:C5:8E
Certificate issuer:       /CN=C16E46D556A47D2429EC847E95E7C429D38AC26D
Certificate serial:       4285A13744F179788F3A7D2D92228D4D00158867
Authority key identifier: C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e33332e302f32342d3234203d3e203435333235.roa
Signing time:             Tue 05 Nov 2024 09:00:04 +0000
ROA not before:           Tue 05 Nov 2024 08:55:04 +0000
ROA not after:            Tue 04 Nov 2025 09:00:04 +0000
asID:                     45325
IP address blocks:        122.248.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl
                          rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:85:a1:37:44:f1:79:78:8f:3a:7d:2d:92:22:8d:4d:00:15:88:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C16E46D556A47D2429EC847E95E7C429D38AC26D
        Validity
            Not Before: Nov  5 08:55:04 2024 GMT
            Not After : Nov  4 09:00:04 2025 GMT
        Subject: CN=A78C4A59CD52F3E8D5428E9D22DFCD49A1C3C58E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1e:1a:e4:3f:c2:ef:96:bd:70:cf:5a:27:b2:
                    ca:90:f1:9b:a4:b9:d4:ee:f4:32:5c:1a:24:e3:3a:
                    0b:9e:10:2b:f7:93:4c:a7:7a:e7:ce:b7:2e:ef:3f:
                    51:a4:13:da:5b:78:a8:91:cb:8a:1d:ac:7d:d9:bb:
                    59:27:d3:61:56:8e:ff:4e:e4:68:8d:ad:83:bd:92:
                    de:05:23:7a:63:d7:93:26:09:e2:d3:ca:a2:5e:4f:
                    16:f4:20:54:48:82:a7:f4:7c:ca:d4:2f:a4:86:7b:
                    73:34:e0:7b:e3:42:05:2b:68:d0:72:ec:8d:90:f9:
                    34:49:63:69:00:16:9e:2c:98:1e:3b:dc:c1:08:3e:
                    e2:52:c6:cd:a5:d0:ee:6c:bd:1f:1e:d2:14:cd:fd:
                    92:98:ea:64:8a:db:91:7d:b4:4d:a6:52:fc:2b:98:
                    11:1f:04:ea:44:13:a7:05:68:7e:79:9c:9d:9a:c1:
                    ba:58:9c:3e:f5:bf:77:9d:90:78:cd:9c:a5:8c:6f:
                    4d:f1:ed:06:02:39:09:b5:3e:4a:d2:cc:a9:d3:48:
                    10:24:45:91:2a:44:b7:d4:73:bf:14:62:9f:d2:02:
                    60:17:80:b3:b5:98:84:fe:0d:bc:22:76:36:7a:89:
                    9c:32:f8:f8:13:df:98:a3:29:0f:df:95:a4:99:21:
                    54:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:8C:4A:59:CD:52:F3:E8:D5:42:8E:9D:22:DF:CD:49:A1:C3:C5:8E
            X509v3 Authority Key Identifier:
                keyid:C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e33332e302f32342d3234203d3e203435333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.248.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:ce:26:82:76:fc:a2:68:a6:51:56:f6:69:63:9c:8b:6b:7a:
         9c:f8:d3:79:f4:73:f8:de:71:5c:a3:7f:a7:4c:cf:6c:ac:12:
         e7:be:33:4e:4b:c4:18:5b:d2:0d:bb:1f:d8:72:b5:54:2d:f6:
         b7:f1:20:a2:3d:9a:fc:b5:12:bc:96:7f:a6:4f:44:53:a5:24:
         5a:ff:f6:7b:83:f3:3f:51:e9:f6:d5:5f:48:5d:f5:2a:5f:0d:
         04:74:dc:03:ca:2b:64:21:3b:7d:0b:af:d4:8f:ff:a1:15:1a:
         97:49:d4:df:e6:53:91:1d:a7:3c:8e:38:7e:a3:2a:69:ad:e3:
         97:46:f2:a7:d8:4c:4b:50:33:8b:87:c6:01:3d:a4:6d:e2:b3:
         53:28:a8:50:93:55:39:8f:69:6b:bf:e4:f1:d7:61:45:ce:45:
         85:81:29:55:d1:c6:58:ce:68:8e:e2:07:69:4d:7b:d9:8c:bf:
         f7:24:4d:4e:1c:b3:a5:77:8b:d1:c4:d7:37:0e:81:5f:9f:ef:
         97:36:32:a0:c3:fc:73:01:dc:5f:d2:45:bf:b5:d7:3b:e2:e8:
         93:72:c0:40:64:20:40:44:93:60:e1:13:2c:a0:e0:71:eb:42:
         76:66:16:9c:0e:30:db:ae:d8:d8:6f:6d:c4:af:a4:e0:0b:0d:
         08:73:43:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:53 2024 by rpki-client on console-fra.rpki-client.org