Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3230322e34332e3131332e302f32342d3234203d3e203435333235.roa
File:                     3230322e34332e3131332e302f32342d3234203d3e203435333235.roa (raw, json)
Hash identifier:          iAl8NmWNJlmHejJ5sIMuSWgzBreFnv6E6ju9qJHMnsY=
Subject key identifier:   24:D5:B6:7A:BC:8D:4D:CE:09:8E:2C:62:69:39:7C:DA:84:90:80:5D
Certificate issuer:       /CN=C16E46D556A47D2429EC847E95E7C429D38AC26D
Certificate serial:       79C15DDFD9DC0EC56A4EEF545F1392424460D97A
Authority key identifier: C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3230322e34332e3131332e302f32342d3234203d3e203435333235.roa
Signing time:             Tue 05 Nov 2024 08:00:02 +0000
ROA not before:           Tue 05 Nov 2024 07:55:02 +0000
ROA not after:            Tue 04 Nov 2025 08:00:02 +0000
asID:                     45325
IP address blocks:        202.43.113.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl
                          rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:c1:5d:df:d9:dc:0e:c5:6a:4e:ef:54:5f:13:92:42:44:60:d9:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C16E46D556A47D2429EC847E95E7C429D38AC26D
        Validity
            Not Before: Nov  5 07:55:02 2024 GMT
            Not After : Nov  4 08:00:02 2025 GMT
        Subject: CN=24D5B67ABC8D4DCE098E2C6269397CDA8490805D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ea:db:94:5c:08:e4:d3:88:4d:97:56:46:8f:
                    51:9d:49:2f:95:a7:e7:6e:55:b4:e8:09:8f:d0:86:
                    9c:09:40:cf:d8:0b:82:ee:76:69:d8:ee:7c:6b:cc:
                    02:d2:da:dc:35:b8:92:2f:43:1e:4c:df:ce:17:80:
                    20:94:f2:5b:ed:1e:c1:d7:ae:e9:52:c8:16:cf:db:
                    f9:34:bc:20:41:f0:54:48:b3:1c:e5:16:95:ac:67:
                    dc:ad:4c:9d:3f:76:90:f7:f1:05:c6:f6:f1:49:2d:
                    8d:2b:03:70:ee:d1:da:56:d0:90:67:87:a3:df:dd:
                    71:03:13:2a:a0:aa:b3:89:21:cf:d9:40:2c:59:91:
                    2f:94:24:50:07:b9:81:9e:25:73:eb:34:dc:b5:87:
                    eb:3a:e2:20:d4:2f:1f:85:14:69:69:23:e1:a9:88:
                    2c:13:ed:6c:2f:9f:2d:19:59:7e:da:f7:a2:93:f4:
                    95:b6:3c:19:ab:42:eb:2e:bf:6e:5e:ca:7e:0a:8e:
                    4d:42:05:47:a5:8b:ad:f6:31:8c:ae:b7:f7:30:12:
                    f4:05:7b:da:a6:7d:ae:e5:8e:c6:ef:42:6f:a0:f0:
                    09:d6:4d:d3:97:9b:43:6b:fe:49:67:a7:b9:ef:1e:
                    76:7c:11:83:0d:85:be:86:cc:ae:41:e9:2f:3f:6d:
                    70:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D5:B6:7A:BC:8D:4D:CE:09:8E:2C:62:69:39:7C:DA:84:90:80:5D
            X509v3 Authority Key Identifier:
                keyid:C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3230322e34332e3131332e302f32342d3234203d3e203435333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.43.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:67:63:d2:ec:1c:e8:b1:a7:24:f1:2e:0f:ef:15:21:a5:3a:
         3d:85:53:fe:a0:9c:1d:2c:61:42:40:ae:b5:eb:be:51:4d:75:
         33:9e:a2:6a:e9:e8:8d:6b:18:f2:79:31:3c:9f:5e:03:01:d3:
         cf:9c:68:a0:7f:db:20:de:95:2f:5d:29:6b:5e:33:5c:21:cc:
         2c:12:4f:11:59:d9:26:8f:9f:11:33:b4:10:c0:97:2e:f3:10:
         71:38:05:6f:34:33:6b:73:a8:ce:87:e2:3d:a0:03:c9:56:a6:
         87:b9:80:f0:ad:95:e3:22:48:02:4b:ec:72:7d:0d:8f:28:16:
         37:13:f8:74:6a:cb:93:50:ff:40:24:3c:56:33:77:8d:a8:81:
         52:71:ff:0a:b6:22:94:d8:6b:c2:fc:f2:de:dd:40:5f:6b:61:
         49:88:6d:81:2e:22:8e:33:48:12:36:fb:3f:47:86:14:0d:91:
         e6:b5:e2:7b:a0:7d:51:70:e1:e2:8a:c6:21:28:d5:d1:66:79:
         cb:92:39:27:ec:2f:a2:73:16:9f:91:cd:1b:92:45:98:b8:e8:
         69:5c:d4:aa:cb:4d:c3:84:d6:24:40:88:6a:9d:67:c7:2a:68:
         76:9b:3a:76:ed:8f:0f:00:07:0c:b1:a2:c1:b1:fe:af:64:1d:
         b3:8d:f4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:53 2024 by rpki-client on console-fra.rpki-client.org