Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e33372e302f32342d3234203d3e203435333235.roa
File:                     3132322e3234382e33372e302f32342d3234203d3e203435333235.roa (raw, json)
Hash identifier:          buUigXylKSsx3OxtsG2qscqASYuJ0y3FUyXS4w7K2g0=
Subject key identifier:   13:AF:CA:C2:F3:13:79:D4:B4:C6:AD:82:D9:D7:BA:13:7D:3B:54:CA
Certificate issuer:       /CN=C16E46D556A47D2429EC847E95E7C429D38AC26D
Certificate serial:       4FA57B45F3BAC11F1688FE6F9BB4E0FACD8FCB0D
Authority key identifier: C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e33372e302f32342d3234203d3e203435333235.roa
Signing time:             Tue 05 Dec 2023 08:06:05 +0000
ROA not before:           Tue 05 Dec 2023 08:01:05 +0000
ROA not after:            Tue 03 Dec 2024 08:06:05 +0000
asID:                     45325
IP address blocks:        122.248.37.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl
                          rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 12:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:a5:7b:45:f3:ba:c1:1f:16:88:fe:6f:9b:b4:e0:fa:cd:8f:cb:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C16E46D556A47D2429EC847E95E7C429D38AC26D
        Validity
            Not Before: Dec  5 08:01:05 2023 GMT
            Not After : Dec  3 08:06:05 2024 GMT
        Subject: CN=13AFCAC2F31379D4B4C6AD82D9D7BA137D3B54CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f6:36:dd:bd:9f:a0:47:96:ae:04:86:65:4c:
                    b6:ed:77:61:4e:20:22:2c:66:1e:c1:a6:aa:28:84:
                    6d:30:b3:1a:58:a8:21:d2:96:f6:39:da:1b:b2:f6:
                    c3:26:a9:0f:6a:0f:b8:0d:26:e2:0a:42:6f:28:70:
                    90:03:f7:5f:28:a2:f3:a1:11:c9:5e:0e:5c:32:e3:
                    3e:d3:1b:a5:e8:17:07:9f:1d:e2:f0:da:be:8a:8b:
                    77:82:8b:4a:2f:56:c7:7d:4d:5a:7b:5b:84:6d:f0:
                    9e:33:0a:4d:47:49:9c:e1:60:0d:d7:79:da:39:2a:
                    74:3a:e1:66:f6:a2:c2:12:2a:95:53:c2:bf:2d:75:
                    cc:ea:9b:44:df:1a:4f:7a:07:16:0b:0c:77:cc:fa:
                    ce:84:9b:1c:9e:a1:ec:d1:11:a9:ad:d4:12:2d:77:
                    aa:ce:fb:13:b6:63:16:a5:5a:f7:d4:25:d4:c3:e2:
                    72:26:cf:f7:8f:59:6c:a3:52:db:75:cf:c1:5d:39:
                    c5:02:83:d0:0c:2c:90:da:cf:67:ed:00:8c:a1:c0:
                    8b:ed:82:9e:3a:a6:b4:c2:6f:be:61:1f:18:87:cf:
                    4b:86:82:68:63:bf:13:41:2d:ce:ae:be:c5:9d:49:
                    54:fc:fe:9d:23:83:ff:85:52:03:5d:35:22:e7:1c:
                    90:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:AF:CA:C2:F3:13:79:D4:B4:C6:AD:82:D9:D7:BA:13:7D:3B:54:CA
            X509v3 Authority Key Identifier:
                keyid:C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e33372e302f32342d3234203d3e203435333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.248.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:36:d5:88:6b:49:72:38:98:2b:87:ac:19:19:96:25:4c:40:
         dd:ba:09:97:58:d8:3b:d1:67:cc:3e:90:f4:80:19:a2:de:32:
         8e:46:af:f2:2e:17:48:71:b9:bd:70:ea:51:a5:35:aa:48:25:
         21:dd:e7:dc:6e:39:86:a5:a8:fd:2a:25:14:6a:42:17:ad:70:
         ea:33:ec:74:a2:06:68:32:0d:0b:f8:8d:0e:a4:24:5c:55:0a:
         11:02:73:0c:35:09:d9:9e:e2:c6:e9:d7:88:a9:d6:16:e2:ae:
         f4:76:b4:5b:b1:21:03:67:b3:9f:f9:e8:7d:10:0c:6e:d7:20:
         7d:0d:a5:93:1c:43:53:46:ca:89:25:0a:fb:2c:a1:c4:55:6e:
         90:ee:5b:3f:13:16:8d:97:ba:09:08:70:e0:c2:92:62:f5:43:
         a5:03:2e:e4:f8:9f:d2:b1:3f:88:4c:3a:0f:d2:b5:3e:1a:4b:
         74:e3:2e:21:e1:de:8c:5d:b1:c2:de:4a:2f:38:6d:96:1a:22:
         92:4c:a8:39:1c:6d:4e:4a:88:f2:6a:91:8a:14:e6:c9:ec:8a:
         14:5e:6f:47:d8:17:21:80:c7:d7:8f:a0:24:8c:5a:c2:45:5f:
         59:f0:c4:66:aa:8c:67:b1:e4:aa:52:97:70:f9:06:4e:b3:8b:
         6e:85:73:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:03:30 2024 by rpki-client on console-fra.rpki-client.org