Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e34332e302f32342d3234203d3e203435333235.roa
File:                     3132322e3234382e34332e302f32342d3234203d3e203435333235.roa (raw, json)
Hash identifier:          OvJkdgHhd75nh+OULUfPywHIsUnoXucEmNhiIQqX7pE=
Subject key identifier:   77:4B:6D:69:EA:25:F0:3F:77:F7:8C:1C:CE:7B:D9:F3:67:AB:2D:80
Certificate issuer:       /CN=C16E46D556A47D2429EC847E95E7C429D38AC26D
Certificate serial:       0EE6C2601CA0AC3BA3BEC584A60526BC10CF8929
Authority key identifier: C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e34332e302f32342d3234203d3e203435333235.roa
Signing time:             Tue 05 Dec 2023 08:07:04 +0000
ROA not before:           Tue 05 Dec 2023 08:02:04 +0000
ROA not after:            Tue 03 Dec 2024 08:07:04 +0000
asID:                     45325
IP address blocks:        122.248.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl
                          rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 12:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:e6:c2:60:1c:a0:ac:3b:a3:be:c5:84:a6:05:26:bc:10:cf:89:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C16E46D556A47D2429EC847E95E7C429D38AC26D
        Validity
            Not Before: Dec  5 08:02:04 2023 GMT
            Not After : Dec  3 08:07:04 2024 GMT
        Subject: CN=774B6D69EA25F03F77F78C1CCE7BD9F367AB2D80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cc:a6:83:f6:d2:08:45:4a:17:10:60:6f:55:
                    ce:fc:fc:28:d8:58:0d:ab:dd:3b:e3:6c:c2:ee:5d:
                    3b:44:0a:05:b2:bc:d7:cc:0a:60:21:c3:91:45:bf:
                    1e:81:5e:22:30:6b:a2:37:ae:36:d5:4f:3b:1b:36:
                    be:2f:06:6d:d6:cb:d6:95:a4:f9:7c:55:38:ca:7f:
                    6d:65:b2:6c:b4:e1:df:e5:aa:e9:02:15:b0:e1:7f:
                    ee:f8:42:97:f8:40:4c:a7:0e:c9:8d:6e:f6:25:e5:
                    0c:94:73:ec:80:89:fb:23:69:89:b8:71:97:4d:b8:
                    76:c9:68:f5:cb:f1:e0:13:45:46:d8:52:11:ae:4b:
                    24:ad:df:48:4f:fd:bf:43:e6:b5:8a:50:f9:e6:1e:
                    25:ba:eb:b1:9c:e2:b0:03:ba:cc:53:de:0c:59:bb:
                    cf:4a:a5:60:07:ee:3e:0c:e7:9e:05:c4:c9:58:35:
                    57:ff:1e:7d:40:a3:b4:b9:cf:d7:da:0f:c9:54:ef:
                    2b:2c:93:f1:3e:f3:cd:9d:14:ab:26:56:38:0b:37:
                    61:04:9d:9a:f1:90:81:66:95:85:e1:57:85:96:fd:
                    cd:f8:20:af:6d:b6:b3:31:ed:df:b3:5c:d8:79:48:
                    b5:d6:47:9a:6b:37:56:4b:8c:42:4f:21:01:c4:fd:
                    7b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:4B:6D:69:EA:25:F0:3F:77:F7:8C:1C:CE:7B:D9:F3:67:AB:2D:80
            X509v3 Authority Key Identifier:
                keyid:C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e34332e302f32342d3234203d3e203435333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.248.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:b4:cd:ce:6f:0c:d2:e9:42:70:21:0c:65:ba:c5:11:22:7d:
         8b:8d:5e:44:17:87:f1:ea:59:46:b3:ee:9f:de:54:cd:40:c2:
         4a:87:17:c5:04:71:4d:a4:d6:4a:11:00:b7:66:ec:64:18:1a:
         c5:2d:e7:a4:8e:a1:e2:7b:e5:81:4a:3f:86:5b:0c:4d:a1:39:
         6d:3f:28:7a:db:6c:61:c7:d9:0b:07:54:25:65:f1:10:99:d2:
         fc:2f:7c:f9:5c:12:d3:bc:df:8a:7b:d4:d0:93:3b:ed:b2:8e:
         0a:a7:15:17:8c:7e:09:92:e2:59:25:a7:69:1a:cb:40:d3:82:
         79:b7:d5:b0:c6:2e:89:92:27:03:39:29:bb:b8:be:2d:52:96:
         77:ab:d9:99:5f:43:60:d1:f7:a8:d4:13:01:89:67:d3:be:fc:
         de:b4:96:4a:86:a0:45:61:78:cd:54:7d:6f:0b:c0:36:cd:c7:
         6a:08:53:de:20:89:14:2b:99:a5:a8:fc:47:85:ad:23:dc:d0:
         d9:9c:b7:89:18:5b:1b:7f:a1:c8:06:7d:a3:db:8a:89:60:47:
         4e:5e:ce:8b:04:d5:42:85:5b:dd:28:2e:83:3c:f5:ed:fa:80:
         74:2f:d5:b4:b8:76:a0:53:55:61:5f:be:8b:ed:a5:93:35:3d:
         bb:54:50:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:03:30 2024 by rpki-client on console-fra.rpki-client.org