Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3230332e33302e3235342e302f32342d3234203d3e203435333235.roa
File:                     3230332e33302e3235342e302f32342d3234203d3e203435333235.roa (raw, json)
Hash identifier:          qwVpoc/q8olJzTwzAZ1Ng5Im8A/3FvC7AKArG6XMGjY=
Subject key identifier:   18:0D:A3:4A:0A:19:D9:00:31:07:67:A0:76:02:3D:52:E2:DB:F9:29
Certificate issuer:       /CN=C16E46D556A47D2429EC847E95E7C429D38AC26D
Certificate serial:       12C44DC1BFDEFB67EF18FF9E1F8CE8C4535BCAD1
Authority key identifier: C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3230332e33302e3235342e302f32342d3234203d3e203435333235.roa
Signing time:             Tue 05 Nov 2024 08:00:02 +0000
ROA not before:           Tue 05 Nov 2024 07:55:02 +0000
ROA not after:            Tue 04 Nov 2025 08:00:02 +0000
asID:                     45325
IP address blocks:        203.30.254.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl
                          rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:c4:4d:c1:bf:de:fb:67:ef:18:ff:9e:1f:8c:e8:c4:53:5b:ca:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C16E46D556A47D2429EC847E95E7C429D38AC26D
        Validity
            Not Before: Nov  5 07:55:02 2024 GMT
            Not After : Nov  4 08:00:02 2025 GMT
        Subject: CN=180DA34A0A19D900310767A076023D52E2DBF929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9e:a9:dc:07:5e:27:85:74:1f:17:0f:3b:df:
                    2d:4a:8f:3e:e6:52:c3:4d:ef:48:c8:0c:c4:be:20:
                    57:f8:66:13:0b:4f:91:89:e1:1d:82:60:16:5b:5b:
                    cf:3b:4f:5c:dd:e1:ab:e2:6c:32:b4:5b:10:6a:37:
                    c3:93:dd:dd:ea:90:a0:29:60:42:6a:17:ae:99:63:
                    5e:9f:20:db:7c:dd:e1:e7:c4:d2:74:6c:ca:b0:aa:
                    d8:13:74:5f:df:62:d6:0c:ce:da:3f:bc:7f:a6:1a:
                    5f:cc:ce:7a:c9:a4:8b:35:ca:28:a9:7b:e7:29:89:
                    12:58:10:c4:a0:c9:7c:6b:e8:0a:2f:24:50:26:b8:
                    73:c5:fc:93:58:b2:13:a8:54:34:d1:87:97:66:b5:
                    ea:b8:f6:58:da:4d:03:90:90:f9:23:3d:0b:bb:c1:
                    f1:90:b5:61:dd:a3:38:ec:8b:4a:c5:e1:4f:3f:54:
                    5d:18:53:6c:f5:b0:16:52:e9:7f:56:4c:ca:6b:93:
                    4c:a0:19:c3:c9:6b:62:a5:ca:78:6f:a6:ad:d2:36:
                    c4:98:0b:c5:b6:5f:63:af:3f:84:7d:91:20:f6:e2:
                    21:e3:b0:f8:48:1a:a6:18:fc:b5:68:04:2d:4d:e6:
                    c9:e4:e0:ea:b0:61:ac:49:31:7c:83:07:0b:73:0e:
                    50:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:0D:A3:4A:0A:19:D9:00:31:07:67:A0:76:02:3D:52:E2:DB:F9:29
            X509v3 Authority Key Identifier:
                keyid:C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3230332e33302e3235342e302f32342d3234203d3e203435333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.30.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:f8:47:f5:0a:1b:42:b7:57:75:09:fb:ff:b5:76:88:0a:65:
         62:88:94:46:d9:0b:ce:73:0c:c2:d2:6b:62:35:4b:ec:15:5f:
         06:40:41:b6:f5:e5:41:ac:ea:1e:45:a4:6a:ad:2e:14:81:5f:
         ee:1c:67:dc:cc:34:6f:7c:67:e2:24:9d:53:47:14:1d:68:83:
         0d:db:a1:46:b3:d8:6f:bf:4a:bf:73:cf:e0:d2:35:90:3c:eb:
         12:96:21:5a:45:f0:f8:0b:e5:96:48:85:98:ba:5d:f3:7e:b5:
         f0:96:4d:67:1e:bf:a2:af:db:63:14:79:41:41:0c:5d:0a:14:
         61:a3:92:a6:44:ce:e8:60:29:37:40:a8:23:74:d5:68:b4:5e:
         1a:23:a6:6f:73:47:0b:e8:83:6d:82:11:73:d1:cb:10:63:5a:
         b1:9c:8c:c6:b2:01:85:86:d6:53:55:dd:0a:b1:0d:96:91:ed:
         14:dc:75:72:51:08:9c:26:b2:2d:58:eb:2d:f5:07:da:7d:67:
         7a:27:da:a1:93:35:98:f3:05:75:fc:6c:5b:ec:1a:57:24:47:
         63:8b:01:3b:bb:29:fc:27:60:84:33:00:98:7f:d7:69:c6:63:
         0a:ad:62:ba:c5:98:ee:ed:fb:23:a3:be:d6:f1:16:a1:13:2f:
         aa:9e:93:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:49 2024 by rpki-client on console-ams.rpki-client.org