Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e34362e302f32342d3234203d3e203435333235.roa
File:                     3132322e3234382e34362e302f32342d3234203d3e203435333235.roa (raw, json)
Hash identifier:          LhWBjHZ5g8TkD649ckkdJGoRkYPtCygtXYS8tK6q+1c=
Subject key identifier:   8C:82:6A:90:FF:CD:E1:FE:2B:67:0B:EF:40:5B:1C:76:62:90:6B:B3
Certificate issuer:       /CN=C16E46D556A47D2429EC847E95E7C429D38AC26D
Certificate serial:       1F2DBDA378639E67752E58A87481642AA6BB90A4
Authority key identifier: C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e34362e302f32342d3234203d3e203435333235.roa
Signing time:             Tue 05 Dec 2023 08:07:47 +0000
ROA not before:           Tue 05 Dec 2023 08:02:47 +0000
ROA not after:            Tue 03 Dec 2024 08:07:47 +0000
asID:                     45325
IP address blocks:        122.248.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl
                          rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 12:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:2d:bd:a3:78:63:9e:67:75:2e:58:a8:74:81:64:2a:a6:bb:90:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C16E46D556A47D2429EC847E95E7C429D38AC26D
        Validity
            Not Before: Dec  5 08:02:47 2023 GMT
            Not After : Dec  3 08:07:47 2024 GMT
        Subject: CN=8C826A90FFCDE1FE2B670BEF405B1C7662906BB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f3:40:9a:1a:55:13:da:69:51:36:ac:bf:cc:
                    d3:36:97:cf:24:e4:09:a0:dc:58:14:6e:ee:92:af:
                    5a:ba:05:69:d5:f6:f4:55:b1:3e:ce:70:ff:51:16:
                    9a:9d:40:d0:2e:b3:e1:fa:54:39:e7:d3:5e:71:20:
                    d6:b7:f4:67:a5:97:60:2e:fa:7d:3e:67:12:90:f7:
                    ab:7d:bd:fa:90:83:2f:14:f1:76:18:07:36:4f:02:
                    86:e1:82:9c:d1:62:b7:16:4a:f7:53:63:18:71:3f:
                    91:45:65:f9:fd:8a:c3:cc:6b:96:33:49:0a:8f:01:
                    2c:97:02:0d:ef:e1:5f:47:3b:07:48:97:c6:14:1d:
                    35:13:b2:ce:9f:29:c5:ec:1f:82:1c:a3:d8:09:19:
                    bd:f5:ac:7a:fd:50:b4:f5:17:96:49:c3:a2:1d:15:
                    87:7a:7f:54:47:78:1e:5e:fd:8f:e0:1a:97:88:c2:
                    34:75:42:e2:92:f3:75:8f:c5:07:20:96:17:16:00:
                    8e:8b:cc:10:a6:e2:08:ea:41:fa:ad:62:64:27:4b:
                    b1:29:29:2b:07:83:fc:e7:d9:89:a0:b0:38:6c:d8:
                    a9:7d:11:9d:64:c6:14:8d:2b:cf:00:8b:7c:2d:f0:
                    65:d5:ab:37:3c:d0:b0:4d:fd:08:20:79:73:17:38:
                    f8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:82:6A:90:FF:CD:E1:FE:2B:67:0B:EF:40:5B:1C:76:62:90:6B:B3
            X509v3 Authority Key Identifier:
                keyid:C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e34362e302f32342d3234203d3e203435333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.248.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:d5:1d:41:3b:83:83:70:8b:3f:0f:71:99:32:8b:f9:c7:73:
         06:77:89:cd:04:e1:26:a6:f8:2f:2a:fb:f0:15:0b:f8:37:12:
         75:22:3a:37:34:73:c5:db:dd:36:c3:e0:d3:9d:67:61:1d:51:
         33:e6:eb:2c:a1:93:79:fc:35:cb:36:59:cb:07:3e:aa:1e:b9:
         5a:47:3d:72:18:14:d8:0f:55:2d:35:4f:f5:5a:cd:fb:d4:e9:
         df:d9:52:22:9a:48:7b:e0:4c:b2:bb:bb:7a:ae:65:b3:8b:6e:
         ae:7e:f8:ec:d2:b0:2b:5e:1b:ff:86:5a:70:22:51:c7:fe:31:
         42:67:ca:e1:7d:9c:86:af:72:16:9e:5c:64:be:3c:49:06:98:
         b6:ed:e9:c9:68:5b:04:96:94:ad:75:66:ac:72:bc:c0:c9:1d:
         6b:b4:27:2e:13:2a:a3:84:fe:e7:5f:18:5b:82:61:9f:44:51:
         96:20:f1:00:84:d8:44:76:62:77:ec:ef:bf:6b:6f:b6:af:f1:
         18:0d:f7:bb:b1:8e:a8:c3:db:2a:67:00:21:c6:1c:ad:8a:b5:
         d3:83:ec:30:75:c5:5e:9c:70:ec:2c:df:0d:2e:a9:e0:c3:eb:
         0c:72:07:f2:db:5c:51:7b:f8:b3:48:41:f5:dd:f4:6e:63:c7:
         e4:57:df:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:03:30 2024 by rpki-client on console-fra.rpki-client.org