Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3138322e302f32342d3234203d3e20313430343231.roa
File:                     3230322e38372e3138322e302f32342d3234203d3e20313430343231.roa (raw, json)
Hash identifier:          F9uIBphVRURrdj/GnH1mwfhNWDOMI3nnzp3w6db4ZJA=
Subject key identifier:   8E:A2:19:C4:02:28:F1:B3:21:3B:B9:7B:2C:87:F7:68:1D:72:9A:4A
Certificate issuer:       /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial:       555C005EA4487B57721A213A7CC71A6716BEA2
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3138322e302f32342d3234203d3e20313430343231.roa
Signing time:             Thu 08 Aug 2024 07:43:08 +0000
ROA not before:           Thu 08 Aug 2024 07:38:08 +0000
ROA not after:            Thu 07 Aug 2025 07:43:08 +0000
asID:                     140421
IP address blocks:        202.87.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
                          rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 22:07:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:5c:00:5e:a4:48:7b:57:72:1a:21:3a:7c:c7:1a:67:16:be:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
        Validity
            Not Before: Aug  8 07:38:08 2024 GMT
            Not After : Aug  7 07:43:08 2025 GMT
        Subject: CN=8EA219C40228F1B3213BB97B2C87F7681D729A4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1b:24:a7:f3:13:bc:b2:c9:c7:bd:0d:4a:ae:
                    8f:91:15:a5:b2:08:94:38:b3:07:4f:1d:c2:78:10:
                    3f:d6:47:f5:92:ae:a2:76:b8:d1:01:5c:be:29:e8:
                    11:19:bd:d9:e1:90:ff:0c:f7:87:05:e8:21:f0:49:
                    e8:bd:52:a7:0f:ea:88:bf:dc:97:ff:4b:a5:13:74:
                    8d:4b:8f:75:7e:35:42:7f:6d:02:34:43:5b:ee:00:
                    09:5c:06:ad:9f:36:f7:a6:e9:94:a7:27:c5:4d:f0:
                    91:d3:eb:f0:04:ef:16:1a:1f:0e:f8:50:75:3b:c4:
                    5e:92:63:9f:45:b9:89:c3:cb:ec:75:4f:34:8e:5d:
                    9e:a7:f7:80:23:07:72:0e:ad:9e:35:0d:4e:91:c9:
                    c9:5d:4d:35:3e:35:bb:a7:25:16:23:13:83:9a:22:
                    93:55:0f:e3:6f:7a:34:d5:9c:68:9f:20:ee:0b:eb:
                    99:5d:42:10:b5:48:bf:c2:85:1a:70:e0:8c:27:e9:
                    34:a4:95:17:9b:ea:80:58:5f:48:ce:fb:ec:31:f9:
                    54:5b:99:03:39:96:b7:29:92:58:9e:f3:c3:eb:37:
                    ce:26:98:67:8b:4d:72:bf:cd:6c:38:63:08:c8:53:
                    b9:a5:0a:af:1c:20:79:bc:96:48:b6:5f:ab:23:af:
                    ff:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A2:19:C4:02:28:F1:B3:21:3B:B9:7B:2C:87:F7:68:1D:72:9A:4A
            X509v3 Authority Key Identifier:
                keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3138322e302f32342d3234203d3e20313430343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.87.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:11:48:7a:2d:2f:e7:a9:6a:b3:37:6e:61:1d:1a:4d:af:c7:
         af:33:b6:a8:38:8b:2c:5f:9a:99:6c:5e:47:70:94:af:04:9f:
         eb:7d:77:3e:f3:c5:0b:e1:06:94:3b:2d:3d:9d:e6:94:0b:50:
         ae:a8:65:ad:ae:81:54:90:e3:8c:cc:00:57:53:ea:35:ea:ca:
         ae:67:65:2b:d5:d8:41:de:71:c7:a1:72:3d:63:ba:07:80:5c:
         24:95:9a:07:b6:8a:a2:6b:0c:92:ba:b9:45:08:c2:32:82:61:
         5e:6d:58:a0:32:ea:5d:79:86:03:3f:e8:25:ff:4a:fb:36:7b:
         4d:5b:16:d6:e2:90:bf:7e:b8:5a:88:92:43:aa:1d:8d:6a:dd:
         27:8e:a2:7a:05:9c:35:cf:53:6d:fb:09:f4:5c:06:a8:2c:53:
         9b:79:0f:a4:8b:be:38:bd:5b:cb:e8:6c:ee:24:7d:34:81:e2:
         6d:c9:38:27:4c:d0:c2:d2:70:da:49:4f:8b:83:77:ed:e3:12:
         f7:3e:c7:12:f7:32:b0:75:52:73:97:19:c3:ff:f2:99:75:b5:
         46:05:74:a9:29:d0:7f:94:7a:dc:d2:52:b0:fc:d4:fe:b7:b3:
         1f:17:d4:19:5e:02:54:30:db:05:8c:c1:32:0a:54:bd:66:5e:
         ee:24:33:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 08:51:55 2024 by rpki-client on console-fra.rpki-client.org