Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e34302e302f32342d3234203d3e203435333235.roa
File:                     3132322e3234382e34302e302f32342d3234203d3e203435333235.roa (raw, json)
Hash identifier:          RR7ACbPl/JlaFFYkC+v/rS/Uji2Joiu0jBs1396uYUQ=
Subject key identifier:   3F:33:B4:02:13:A7:56:EB:A1:A2:41:20:3F:06:CB:90:B7:A4:AD:80
Certificate issuer:       /CN=C16E46D556A47D2429EC847E95E7C429D38AC26D
Certificate serial:       354460931BBCF0FBE13A28D133B86E5EE632A2D6
Authority key identifier: C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e34302e302f32342d3234203d3e203435333235.roa
Signing time:             Tue 05 Nov 2024 09:00:04 +0000
ROA not before:           Tue 05 Nov 2024 08:55:04 +0000
ROA not after:            Tue 04 Nov 2025 09:00:04 +0000
asID:                     45325
IP address blocks:        122.248.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl
                          rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:44:60:93:1b:bc:f0:fb:e1:3a:28:d1:33:b8:6e:5e:e6:32:a2:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C16E46D556A47D2429EC847E95E7C429D38AC26D
        Validity
            Not Before: Nov  5 08:55:04 2024 GMT
            Not After : Nov  4 09:00:04 2025 GMT
        Subject: CN=3F33B40213A756EBA1A241203F06CB90B7A4AD80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9e:bb:c0:bc:7f:64:9e:11:df:23:87:35:0b:
                    0e:c9:75:71:28:a8:b0:f3:b2:82:10:2a:d1:94:78:
                    cf:56:88:96:6a:67:3f:6a:3f:7a:96:91:44:cc:d0:
                    4c:4e:d5:dc:8f:4e:55:6d:af:0a:28:9d:7a:e9:a3:
                    b6:29:26:a4:90:8e:9b:d5:c6:bd:76:6a:9d:ba:8b:
                    08:59:09:3e:e6:88:40:36:58:24:4c:d3:e3:60:dc:
                    3b:48:d7:a2:34:44:23:9c:3c:f2:0a:d6:a4:af:16:
                    ee:6e:69:50:b3:77:84:39:2a:b0:4c:36:a9:4a:03:
                    fa:cc:fc:ca:ee:e8:43:14:4b:e0:ad:d8:94:c0:e4:
                    91:6d:29:60:f4:21:53:45:11:9b:87:1c:51:47:61:
                    87:f3:cf:c2:6b:d3:eb:06:40:6c:91:6b:e8:8d:ac:
                    69:75:5d:31:2c:8b:59:a0:2a:09:fa:df:6c:30:55:
                    58:21:e1:d9:29:6c:93:c1:fc:8e:83:2d:3f:ed:08:
                    2b:5a:ef:1b:2a:d2:a6:cf:84:c8:3f:25:9b:ab:fd:
                    59:aa:3f:26:d3:e7:fe:c4:b4:e2:98:51:15:d8:4c:
                    9b:10:f9:ab:a1:2e:ae:b3:11:9f:39:2a:f5:17:d7:
                    44:99:62:23:76:3f:c9:b2:9c:36:78:8c:a0:fc:d5:
                    47:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:33:B4:02:13:A7:56:EB:A1:A2:41:20:3F:06:CB:90:B7:A4:AD:80
            X509v3 Authority Key Identifier:
                keyid:C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e34302e302f32342d3234203d3e203435333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.248.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:39:07:0b:bc:71:a3:8d:52:3a:bb:27:b6:04:9d:ae:9e:0b:
         02:51:e4:a2:ea:27:d7:bf:42:95:75:3e:b1:30:76:41:d2:b5:
         22:cd:a4:8d:98:4b:b6:bd:0e:fc:71:4e:c7:7a:1b:fc:12:b6:
         8c:9b:2e:aa:79:0a:93:91:9c:1b:40:4a:e9:15:7e:59:82:93:
         84:46:8b:2f:79:43:cc:48:34:dc:93:6c:09:56:f4:81:25:b5:
         d5:6a:a2:0d:58:75:1c:68:83:be:7d:e8:c4:a9:96:ca:2b:d7:
         a3:34:a2:b0:62:0a:41:30:28:77:80:8f:6e:4b:b6:28:9c:34:
         bc:ae:b8:c4:b1:a1:91:db:f6:1a:16:1c:36:d4:58:a6:7e:d0:
         72:f0:b7:73:42:52:56:36:c8:b0:6a:51:7c:44:19:f6:48:b4:
         f7:ac:8a:0c:31:ce:7a:5f:7c:d9:ce:4d:85:d5:f2:90:d5:53:
         40:55:11:71:b5:d1:3f:b0:90:dc:fa:b9:b5:6d:1d:68:85:51:
         2b:c2:06:5d:66:1d:96:a7:f0:bb:cc:c3:a8:a7:1d:68:65:68:
         39:88:d7:04:9c:12:64:63:ba:99:b3:cd:25:e2:2a:d7:18:9d:
         b6:25:d5:60:b9:47:ef:fd:2f:ec:81:1e:53:90:d9:4d:a2:c0:
         0e:34:3b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:49 2024 by rpki-client on console-ams.rpki-client.org