Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e33332e302f32342d3234203d3e203435333235.roa
File:                     3132322e3234382e33332e302f32342d3234203d3e203435333235.roa (raw, json)
Hash identifier:          5V0bseVjfnhlYPKEtPqqafCgecPEgQv4KBxResrZxWU=
Subject key identifier:   45:A1:C8:1C:A0:E6:06:8E:16:DA:66:25:B3:84:BE:37:B2:FD:40:FB
Certificate issuer:       /CN=C16E46D556A47D2429EC847E95E7C429D38AC26D
Certificate serial:       7EA7C7B0669CAA31F51AFA37892E1991CF18F278
Authority key identifier: C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e33332e302f32342d3234203d3e203435333235.roa
Signing time:             Tue 05 Dec 2023 08:04:59 +0000
ROA not before:           Tue 05 Dec 2023 07:59:59 +0000
ROA not after:            Tue 03 Dec 2024 08:04:59 +0000
asID:                     45325
IP address blocks:        122.248.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl
                          rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 12:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:a7:c7:b0:66:9c:aa:31:f5:1a:fa:37:89:2e:19:91:cf:18:f2:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C16E46D556A47D2429EC847E95E7C429D38AC26D
        Validity
            Not Before: Dec  5 07:59:59 2023 GMT
            Not After : Dec  3 08:04:59 2024 GMT
        Subject: CN=45A1C81CA0E6068E16DA6625B384BE37B2FD40FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:32:35:88:ad:66:5f:18:c8:f4:01:be:b7:a1:
                    43:b0:fb:95:5c:fa:fc:55:1b:3d:3b:a2:71:1f:ae:
                    0a:ed:58:ee:e9:7d:22:40:b7:be:e8:d5:3e:c2:19:
                    c3:91:eb:3b:22:49:e8:2a:2a:d5:d2:93:dc:ab:ac:
                    5b:0c:0e:40:b3:f2:6e:f4:d3:6a:a9:48:62:4f:7c:
                    ab:16:ca:ec:f2:72:44:63:a5:d2:1e:1a:45:4a:92:
                    ed:e8:2b:ad:f3:0b:aa:b4:ca:60:c4:8c:33:c5:6d:
                    c7:3b:c8:bf:b4:6f:20:21:ec:3c:b5:ae:d4:1c:cd:
                    4c:5c:82:64:96:91:58:ee:3f:4f:6b:80:26:af:03:
                    65:7d:29:b9:b4:7c:12:52:4d:73:e4:26:16:88:83:
                    da:45:e9:51:98:76:92:c1:6c:62:ef:44:99:64:75:
                    13:91:bd:f1:40:07:99:5a:ec:bb:ce:9d:42:06:5a:
                    b3:d4:d5:79:16:4e:88:d4:80:a9:be:7b:1a:59:ad:
                    64:d4:9f:83:64:44:b7:da:49:a8:74:a9:dc:1c:70:
                    00:2e:94:62:42:ad:70:61:ed:57:85:4a:0f:eb:be:
                    ae:74:40:df:0b:40:e2:33:47:fe:11:b4:b5:ff:d3:
                    64:06:44:4b:d3:bd:cc:b1:b1:1c:b1:3d:24:0d:92:
                    17:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A1:C8:1C:A0:E6:06:8E:16:DA:66:25:B3:84:BE:37:B2:FD:40:FB
            X509v3 Authority Key Identifier:
                keyid:C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e33332e302f32342d3234203d3e203435333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.248.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:9b:c5:8a:ae:93:1a:88:27:aa:f9:57:7d:c3:5d:1d:f5:f8:
         2f:de:a2:79:9f:94:74:d5:4b:40:13:ce:ae:f7:de:8b:aa:98:
         d5:7e:b8:3b:ef:07:a4:e6:7e:da:8a:38:81:1d:20:86:a8:b3:
         b8:9d:7a:aa:66:bf:24:b0:da:9a:c1:6c:33:56:12:06:9a:fa:
         39:15:c7:28:8d:62:3f:a4:16:38:42:e4:b7:6c:ef:c2:aa:87:
         04:0b:e1:38:80:75:22:4f:84:ef:61:55:d1:9c:2f:e4:21:55:
         3d:2e:a3:0f:0e:7c:49:fa:b3:67:d0:38:6e:eb:f6:74:f2:fd:
         11:1f:11:0e:cc:a3:f9:05:3c:46:1a:38:24:c0:3e:b4:53:bc:
         4c:b2:b7:4d:43:25:3f:28:f7:e9:24:c5:50:b7:9a:17:85:bf:
         50:ac:67:83:05:94:14:5c:7a:73:39:ef:6a:82:35:80:41:49:
         45:b0:cf:45:48:ea:1c:61:59:c0:a0:3b:34:4c:db:94:31:f4:
         22:c8:ed:83:95:47:ff:17:08:77:d0:6f:bd:3c:97:18:d0:67:
         a4:e9:09:d1:bd:ff:4b:11:36:9c:4a:a6:85:6c:86:96:be:1a:
         77:db:fb:4e:ea:95:0e:f1:be:31:63:2e:5b:54:e5:ab:f2:dd:
         8a:a1:16:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:03:30 2024 by rpki-client on console-fra.rpki-client.org