Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/3230332e3134352e36302e302f32332d3234203d3e203435323935.roa
File:                     3230332e3134352e36302e302f32332d3234203d3e203435323935.roa (raw, json)
Hash identifier:          NgE3mFgixmRqDUvhEsRJeIwGbiaNuwZG/XeEADh0BcY=
Subject key identifier:   3D:C2:16:0D:99:03:B9:D2:4C:03:C6:7D:7E:A1:FC:2F:52:BB:10:33
Certificate issuer:       /CN=43352CF2FE94548EEF080C0D6A6DA5C07EE627AB
Certificate serial:       56043CACE3BB2744C8985C8FD874FD394365B2C0
Authority key identifier: 43:35:2C:F2:FE:94:54:8E:EF:08:0C:0D:6A:6D:A5:C0:7E:E6:27:AB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/3230332e3134352e36302e302f32332d3234203d3e203435323935.roa
Signing time:             Tue 12 Dec 2023 06:52:45 +0000
ROA not before:           Tue 12 Dec 2023 06:47:45 +0000
ROA not after:            Tue 10 Dec 2024 06:52:45 +0000
asID:                     45295
IP address blocks:        203.145.60.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl
                          rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Oct 2024 06:20:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:04:3c:ac:e3:bb:27:44:c8:98:5c:8f:d8:74:fd:39:43:65:b2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43352CF2FE94548EEF080C0D6A6DA5C07EE627AB
        Validity
            Not Before: Dec 12 06:47:45 2023 GMT
            Not After : Dec 10 06:52:45 2024 GMT
        Subject: CN=3DC2160D9903B9D24C03C67D7EA1FC2F52BB1033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f7:4d:ac:c9:a2:1b:92:fa:62:6a:36:0b:bc:
                    28:47:17:42:ca:8d:fb:a8:32:37:40:df:2f:78:85:
                    33:d8:a7:ad:81:70:bf:bd:3a:8b:a4:78:63:bd:c5:
                    26:c2:f4:75:85:59:3f:39:ab:39:5d:ee:e0:6d:55:
                    b0:b8:34:ce:7c:a3:2e:3b:49:56:f7:83:d8:37:62:
                    d0:16:5a:ca:41:8d:33:69:15:31:b2:14:57:f8:dc:
                    8a:3d:ab:bb:a3:f4:c3:66:34:60:4a:f8:fa:c6:b0:
                    e9:96:0c:56:9f:cb:6e:7b:a7:e9:13:bd:fc:db:37:
                    e7:f6:aa:96:df:93:f6:f4:a8:bc:82:c7:6d:6f:b0:
                    48:74:af:85:b4:55:ca:66:e4:5e:97:dd:a2:e8:ff:
                    9c:ce:2a:24:45:6d:75:10:f7:1f:18:f4:42:5b:b2:
                    4c:e9:b6:dc:1d:a7:25:90:9d:1f:c5:7a:b8:f1:bf:
                    de:27:60:df:13:9c:c9:4f:a3:e4:2c:9c:64:c8:61:
                    be:e0:4d:da:e0:ea:1e:8d:4a:4b:e1:70:b6:e8:16:
                    64:c9:a2:4d:a1:78:22:a3:99:56:82:b2:d3:fa:f6:
                    11:8e:67:a7:8c:f2:53:2b:bb:45:bf:26:bb:68:6c:
                    ac:8c:67:d5:44:ab:43:03:5e:a1:d0:c1:57:de:ac:
                    06:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C2:16:0D:99:03:B9:D2:4C:03:C6:7D:7E:A1:FC:2F:52:BB:10:33
            X509v3 Authority Key Identifier:
                keyid:43:35:2C:F2:FE:94:54:8E:EF:08:0C:0D:6A:6D:A5:C0:7E:E6:27:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/43352CF2FE94548EEF080C0D6A6DA5C07EE627AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/3230332e3134352e36302e302f32332d3234203d3e203435323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.145.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:0e:b0:f5:53:fc:c3:5a:34:98:5b:c7:f6:71:ae:87:bd:fa:
         24:07:05:e6:ac:03:a7:e2:26:c1:4f:b8:20:65:a2:2d:39:a1:
         b3:ea:a4:ea:af:aa:85:44:84:e3:3e:a2:e4:3d:03:ee:6d:0c:
         9c:fa:4b:d6:ba:f3:8e:f4:63:7e:4b:05:86:27:6f:9b:c9:1a:
         8f:df:af:ab:e4:46:2b:74:6e:57:80:2a:2a:44:4c:c9:8f:cf:
         37:3c:f1:75:82:2d:87:09:8f:b7:b9:ef:25:f1:f4:2c:9d:69:
         fe:c0:8f:3a:2f:63:10:4f:f0:06:e2:9b:cc:9c:0e:f2:d4:f1:
         f7:09:e0:34:87:67:74:d3:8d:3d:a4:f6:26:34:94:19:ff:1a:
         ee:d6:9c:6a:b0:4b:15:79:38:5a:2c:04:ae:af:9b:70:b8:7b:
         74:ab:2b:30:b1:bd:29:63:c7:87:d0:58:e7:ab:b2:91:ba:64:
         e7:d9:53:a5:25:26:7d:74:78:0c:20:f9:bd:4b:8a:00:86:65:
         9d:8f:e0:49:8c:7c:88:aa:69:c8:68:f8:75:35:50:37:16:60:
         25:67:80:de:64:d1:a0:39:be:40:b0:da:4f:a9:58:c1:f1:b8:
         25:38:fb:05:a8:1e:d1:b7:a5:b9:f1:f4:f7:9a:7a:cd:8b:34:
         e9:9f:9d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 11:59:48 2024 by rpki-client on console-fra.rpki-client.org