Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3230332e33302e3235342e302f32342d3234203d3e203435333235.roa
File:                     3230332e33302e3235342e302f32342d3234203d3e203435333235.roa (raw, json)
Hash identifier:          hKI8sDiWovjivi7M1XCT9hwLq8Mh2S8NcEitAqBA/vw=
Subject key identifier:   C1:5C:05:0A:89:8C:91:83:02:18:C3:92:79:30:0B:12:8C:15:C6:4E
Certificate issuer:       /CN=C16E46D556A47D2429EC847E95E7C429D38AC26D
Certificate serial:       54AFF196308DCCC0F9618E861AE1E97027F9D4EE
Authority key identifier: C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3230332e33302e3235342e302f32342d3234203d3e203435333235.roa
Signing time:             Tue 05 Dec 2023 07:38:21 +0000
ROA not before:           Tue 05 Dec 2023 07:33:21 +0000
ROA not after:            Tue 03 Dec 2024 07:38:21 +0000
asID:                     45325
IP address blocks:        203.30.254.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl
                          rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 12:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:af:f1:96:30:8d:cc:c0:f9:61:8e:86:1a:e1:e9:70:27:f9:d4:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C16E46D556A47D2429EC847E95E7C429D38AC26D
        Validity
            Not Before: Dec  5 07:33:21 2023 GMT
            Not After : Dec  3 07:38:21 2024 GMT
        Subject: CN=C15C050A898C91830218C39279300B128C15C64E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f3:a5:56:3a:98:11:00:21:c2:44:af:1c:9e:
                    65:c6:a3:3e:93:3e:3f:ac:2e:48:0e:ef:bb:71:ea:
                    a8:e9:9a:aa:e8:ff:42:9b:80:ea:53:91:1e:36:a3:
                    47:38:88:bf:81:dd:1c:11:50:6c:d0:1c:90:55:cf:
                    be:f3:5b:79:bb:15:2d:06:7d:3e:df:db:e2:92:28:
                    2f:17:75:bb:b1:0b:d8:49:b3:83:c0:33:4c:0b:8f:
                    b7:47:a1:69:9e:f9:d0:b0:42:25:26:05:e2:bc:1c:
                    2b:15:24:63:4f:fb:b1:62:2c:f0:f5:00:7c:f1:50:
                    1b:4d:dd:76:a4:85:7c:d7:17:15:55:5b:ee:7a:4c:
                    2f:44:49:3f:db:c0:2e:e0:13:3d:9b:da:e8:c5:4c:
                    3d:a7:2a:c7:4c:a4:ce:19:5c:cb:7f:d6:99:1a:af:
                    bb:50:fa:b5:7f:1a:f9:94:55:be:11:6d:d5:2e:dc:
                    46:00:d6:36:37:8e:ff:68:e2:5d:3a:95:4a:7f:f1:
                    04:12:97:29:cf:36:d6:60:04:33:62:1a:62:47:be:
                    ab:68:09:31:fc:09:75:5f:ab:28:04:45:b1:e1:21:
                    3f:dd:3e:3c:db:b4:f4:19:fb:73:a6:7b:9d:56:de:
                    d5:ff:3c:e2:f5:5c:64:b4:8d:26:0d:f2:d8:a5:d3:
                    97:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:5C:05:0A:89:8C:91:83:02:18:C3:92:79:30:0B:12:8C:15:C6:4E
            X509v3 Authority Key Identifier:
                keyid:C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3230332e33302e3235342e302f32342d3234203d3e203435333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.30.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:be:1b:d8:c0:48:60:39:50:01:35:66:8f:7b:c6:f2:2c:4f:
         f0:db:ef:e5:64:34:b6:72:3d:70:8f:84:d8:bf:8d:5a:81:5e:
         3b:29:74:f7:c8:ba:3d:2e:f7:dc:ac:1b:8d:63:97:47:b6:38:
         4d:b9:cd:1d:2f:2e:a8:02:d9:44:29:a4:41:c2:48:86:2a:63:
         43:15:b9:f3:15:91:31:26:19:c8:1f:c6:e3:77:ab:b9:cb:fe:
         1f:71:b0:30:85:c3:19:9d:90:47:ec:a1:92:31:13:22:81:84:
         54:23:5b:b9:e2:a7:1f:f6:aa:c7:62:78:8a:9c:90:67:71:11:
         25:0a:86:34:bf:82:4d:03:70:a1:0e:29:47:8b:77:89:aa:ab:
         ea:94:92:e6:9d:46:c4:4c:09:3e:68:73:e2:37:53:69:ab:c7:
         ce:06:3b:71:02:bd:61:a1:78:89:9c:7f:b7:5a:b9:65:56:bd:
         f4:a6:75:b3:ba:a6:12:81:5d:eb:a2:82:b7:a1:6f:61:7a:c0:
         13:e0:e4:cc:59:5d:52:69:64:2e:aa:e3:a0:61:4d:d8:ea:3c:
         4a:b6:75:22:a2:4f:68:3d:4a:44:86:f5:a6:b8:b8:f2:b0:39:
         b0:22:59:9d:48:4d:5a:82:cb:b0:18:43:9c:27:61:b8:b5:20:
         01:ba:87:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:03:30 2024 by rpki-client on console-fra.rpki-client.org