Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e33342e302f32342d3234203d3e203435333235.roa
File:                     3132322e3234382e33342e302f32342d3234203d3e203435333235.roa (raw, json)
Hash identifier:          CPjDScgzIFEOTfDx3JD4T7d6HemjhgJXn8wORJeXuBI=
Subject key identifier:   26:B5:23:70:4B:9E:7B:18:13:68:D8:EA:6E:A2:C5:D5:20:B0:CB:BF
Certificate issuer:       /CN=C16E46D556A47D2429EC847E95E7C429D38AC26D
Certificate serial:       12CAA5B272406F0FE5B6BA6BEB55E711EA1798B0
Authority key identifier: C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e33342e302f32342d3234203d3e203435333235.roa
Signing time:             Tue 05 Dec 2023 08:05:37 +0000
ROA not before:           Tue 05 Dec 2023 08:00:37 +0000
ROA not after:            Tue 03 Dec 2024 08:05:37 +0000
asID:                     45325
IP address blocks:        122.248.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl
                          rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ca:a5:b2:72:40:6f:0f:e5:b6:ba:6b:eb:55:e7:11:ea:17:98:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C16E46D556A47D2429EC847E95E7C429D38AC26D
        Validity
            Not Before: Dec  5 08:00:37 2023 GMT
            Not After : Dec  3 08:05:37 2024 GMT
        Subject: CN=26B523704B9E7B181368D8EA6EA2C5D520B0CBBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:43:b2:4a:0f:de:8b:54:5f:24:ab:b4:60:df:
                    3e:c3:6a:1d:bf:3a:4e:74:7a:4a:c7:8a:e7:49:2c:
                    26:9a:7a:65:a4:d9:86:9e:3b:53:67:59:70:b4:58:
                    c5:a1:11:0c:b7:69:bb:50:53:bc:97:9b:f3:e3:df:
                    b9:2e:4b:e6:01:ba:f0:d5:2f:67:ee:39:98:35:f2:
                    41:1c:38:e2:4d:8a:45:92:11:d3:c9:68:57:c9:dd:
                    05:c7:f0:63:27:40:c0:e2:30:8c:fe:62:9e:bf:84:
                    49:d5:2b:0e:a7:f6:6f:b2:98:f3:f5:6c:81:6d:fe:
                    ec:69:67:3a:5d:30:06:bd:fb:99:36:47:3a:6b:e8:
                    1f:51:88:7b:0e:7d:88:8a:9b:c4:0b:f9:4f:1e:ee:
                    36:b2:12:75:99:31:d7:34:e1:a5:e3:37:87:69:76:
                    c0:6c:8c:3f:16:65:96:92:85:81:81:65:d8:a7:31:
                    ce:45:d0:96:1f:01:81:29:dc:6a:b5:fa:56:19:1b:
                    66:5f:88:c6:63:bd:7a:67:99:0f:2c:55:02:f9:07:
                    f1:33:7d:45:a5:fa:92:a1:9e:cc:73:f7:a5:e1:05:
                    d6:48:b3:9d:86:f4:b7:f9:4d:bb:37:d3:af:77:84:
                    03:a3:2a:d3:8c:1c:95:69:34:07:b5:78:4c:fe:22:
                    ab:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B5:23:70:4B:9E:7B:18:13:68:D8:EA:6E:A2:C5:D5:20:B0:CB:BF
            X509v3 Authority Key Identifier:
                keyid:C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e33342e302f32342d3234203d3e203435333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.248.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:02:34:ad:24:0d:03:74:82:0d:5c:d6:41:d6:df:b5:95:09:
         bf:71:d6:96:85:42:84:15:a1:05:63:1b:7d:b9:fc:12:80:8c:
         0c:d4:f5:b4:ea:53:fb:4c:c3:0a:75:7f:99:3a:f8:53:fe:d6:
         48:27:49:77:fb:e6:1f:56:8e:ef:a5:3e:09:f4:5c:84:1c:1c:
         54:d2:af:9a:eb:de:32:7e:3f:16:2d:56:3f:e6:34:4d:81:e6:
         4d:70:0e:70:71:94:d9:7c:93:1d:3e:4b:79:a9:ed:84:7e:4d:
         63:b3:be:3f:81:21:3b:d5:2f:b3:2d:61:b6:64:d1:95:83:48:
         64:4f:c4:92:9d:79:82:7a:c7:a0:42:06:5a:8f:e9:e4:dd:4e:
         24:18:cc:d5:eb:8a:34:74:56:54:3f:24:f5:34:f9:76:1c:f5:
         6f:6a:1e:a3:da:be:5b:78:4a:ef:df:52:1a:6a:fc:59:b8:97:
         02:53:14:29:db:85:a4:47:bb:15:0b:4f:9c:8a:4d:a7:5c:44:
         93:f9:56:2c:6d:1d:f3:4a:7a:c8:41:53:f9:ed:ac:af:81:1d:
         08:d6:56:1f:76:a2:92:28:68:e1:03:cc:de:e5:ca:a1:2a:eb:
         d6:22:60:d7:c7:6d:75:39:6e:73:3c:fd:cf:84:33:22:56:56:
         aa:27:02:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 17:52:32 2024 by rpki-client on console-fra.rpki-client.org