Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e34332e302f32342d3234203d3e203435333235.roa
File:                     3132322e3234382e34332e302f32342d3234203d3e203435333235.roa (raw, json)
Hash identifier:          z7XL2D0wXQTjcZf3j2e+IrsJInNEddx4qPTq74sMeHo=
Subject key identifier:   42:1B:B8:6D:17:78:02:19:9B:05:98:A7:A7:63:9D:03:A0:31:49:17
Certificate issuer:       /CN=C16E46D556A47D2429EC847E95E7C429D38AC26D
Certificate serial:       365898736608BF5104D5E251D11FDF924E59A77A
Authority key identifier: C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e34332e302f32342d3234203d3e203435333235.roa
Signing time:             Tue 05 Nov 2024 09:00:03 +0000
ROA not before:           Tue 05 Nov 2024 08:55:03 +0000
ROA not after:            Tue 04 Nov 2025 09:00:03 +0000
asID:                     45325
IP address blocks:        122.248.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl
                          rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:58:98:73:66:08:bf:51:04:d5:e2:51:d1:1f:df:92:4e:59:a7:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C16E46D556A47D2429EC847E95E7C429D38AC26D
        Validity
            Not Before: Nov  5 08:55:03 2024 GMT
            Not After : Nov  4 09:00:03 2025 GMT
        Subject: CN=421BB86D177802199B0598A7A7639D03A0314917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b4:af:33:31:d7:28:84:c7:00:06:4a:b6:4a:
                    b6:c9:23:03:e8:7c:b9:03:7e:99:1d:c3:c7:41:73:
                    c8:67:3d:54:2b:da:59:ff:a4:2f:47:fb:bd:69:ac:
                    8c:d9:42:cb:1b:2c:62:66:d9:28:2e:29:9a:cf:3a:
                    ec:7d:c7:b9:1d:42:e5:5c:a9:a3:68:ff:16:cd:9c:
                    73:92:9a:2d:1a:c4:c1:5d:1a:d4:9d:4f:d4:f2:58:
                    ae:24:ea:d6:09:4b:ae:6b:36:ca:37:d2:a7:d7:c8:
                    b3:bc:f6:51:10:54:05:b5:32:6e:4f:d5:64:ec:59:
                    40:6c:eb:a4:40:cb:e9:51:c7:2b:dd:22:a0:95:5c:
                    b3:83:9b:d9:3d:e1:10:4a:0a:b2:47:7d:ad:0b:0e:
                    e6:bb:29:9c:fe:2a:06:0a:de:bc:e2:b2:82:a3:dd:
                    5b:58:f6:f0:d2:c1:c8:23:eb:59:e6:f6:ba:2e:0d:
                    93:48:e7:f9:04:b3:42:1c:36:e1:dd:cb:96:a4:41:
                    97:08:8b:0e:5c:42:fb:32:f7:04:9c:f5:c7:86:47:
                    55:03:12:1c:ec:a0:ed:1f:a8:b8:e9:f0:bc:b8:8d:
                    78:5b:21:af:ff:99:bd:8f:1f:78:41:b4:83:7f:98:
                    f5:44:ee:87:35:0b:5e:7c:5b:39:f2:c4:1b:4e:55:
                    48:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:1B:B8:6D:17:78:02:19:9B:05:98:A7:A7:63:9D:03:A0:31:49:17
            X509v3 Authority Key Identifier:
                keyid:C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e34332e302f32342d3234203d3e203435333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.248.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:67:66:02:e5:bf:f3:7c:77:c5:64:9a:17:a6:ec:87:a0:1e:
         15:94:b8:b1:a1:1d:bf:47:c4:fd:ef:2b:8e:89:28:20:3a:04:
         ff:2b:2e:bd:7f:fa:9f:27:a5:a2:83:09:3a:66:a6:2b:0c:28:
         ba:b5:3e:d4:9b:8e:73:3b:9c:d6:30:46:d6:ae:d8:eb:aa:98:
         23:0a:54:0d:c5:f5:fb:77:2a:36:8f:61:12:01:f0:24:5a:00:
         8d:84:5f:b8:53:c0:2c:d9:fc:e4:19:99:74:2d:0a:ca:b0:d7:
         54:0e:e3:41:95:6c:31:a4:fc:9f:e1:8f:46:e5:3c:f1:05:6f:
         5b:f3:d0:95:08:29:c1:6f:0b:39:a5:27:1b:2b:7a:2f:5b:6f:
         43:c3:e1:0f:0c:a7:4a:bf:bc:23:1a:96:3d:2a:4d:97:bd:ae:
         26:a6:07:0a:e4:c4:36:b0:02:00:0b:ae:9c:c4:9a:88:61:76:
         cc:61:1d:78:08:56:73:01:82:77:72:75:60:06:93:8b:98:0c:
         c7:40:48:dc:e3:37:f2:98:04:77:62:14:9a:7e:c6:d8:20:1b:
         bb:64:18:7d:dd:28:a6:57:1e:dd:4c:9f:52:c1:10:b8:25:9d:
         bd:74:51:e4:e9:08:77:12:e7:a5:54:ef:0d:5d:65:47:b9:d3:
         8a:ec:95:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:49 2024 by rpki-client on console-ams.rpki-client.org