Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3231302e3231302e3132382e302f31382d3234203d3e2034373837.roa
File:                     3231302e3231302e3132382e302f31382d3234203d3e2034373837.roa (raw, json)
Hash identifier:          zd5tFf9L2F9b3dSbA7ZkK0qObXjlZFu1uPI+qqPt7hY=
Subject key identifier:   B7:3D:BF:26:2E:30:E1:F4:0F:74:35:BF:2D:97:E4:85:E8:6C:DC:06
Certificate issuer:       /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial:       35B9D26429BEC776FADAFA3471E4418ED5755DEB
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3231302e3231302e3132382e302f31382d3234203d3e2034373837.roa
Signing time:             Mon 22 Jul 2024 16:39:55 +0000
ROA not before:           Mon 22 Jul 2024 16:34:55 +0000
ROA not after:            Mon 21 Jul 2025 16:39:55 +0000
asID:                     4787
IP address blocks:        210.210.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
                          rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:b9:d2:64:29:be:c7:76:fa:da:fa:34:71:e4:41:8e:d5:75:5d:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
        Validity
            Not Before: Jul 22 16:34:55 2024 GMT
            Not After : Jul 21 16:39:55 2025 GMT
        Subject: CN=B73DBF262E30E1F40F7435BF2D97E485E86CDC06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8e:c2:df:d2:92:f4:c7:0c:b8:4b:5d:ff:82:
                    19:0f:64:df:9b:ab:34:94:2d:2d:5f:47:e8:df:2e:
                    65:89:eb:cb:1b:93:a2:7a:68:e0:95:0c:b5:e4:e8:
                    a9:ac:bb:ab:86:d2:f5:91:94:38:74:84:44:69:7d:
                    99:21:60:3c:28:c2:25:7f:23:54:20:70:6a:2f:46:
                    4c:89:6c:ce:2b:8d:c7:c8:5c:c8:1b:b1:4f:9a:fd:
                    b5:39:60:2b:6f:97:3b:72:9c:65:37:e2:bf:7c:af:
                    27:ce:7a:d5:f1:c9:5e:3e:30:39:21:ba:0e:25:03:
                    d0:27:39:f7:a3:f4:29:de:a5:83:f1:49:f9:d6:f1:
                    7a:27:c5:43:ea:9a:b0:64:77:70:3c:5d:b3:c8:78:
                    40:3f:22:77:d9:17:71:b6:98:14:4a:20:25:28:5e:
                    c4:0a:a7:22:39:7c:ab:cf:07:c6:c7:b8:12:e1:77:
                    ba:8d:06:4f:ec:1c:25:14:7b:b4:91:5c:61:ff:e7:
                    b8:93:d0:a3:37:20:13:87:86:a5:bd:93:ac:cb:f3:
                    9d:3b:5f:90:cc:03:ea:90:7e:a0:40:cb:e9:1c:50:
                    31:33:6c:df:88:ae:00:67:b8:a1:d2:40:f4:11:0c:
                    82:bb:e6:0b:af:61:7a:5d:bd:dd:61:00:cc:02:df:
                    27:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:3D:BF:26:2E:30:E1:F4:0F:74:35:BF:2D:97:E4:85:E8:6C:DC:06
            X509v3 Authority Key Identifier:
                keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3231302e3231302e3132382e302f31382d3234203d3e2034373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.210.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         52:1d:9e:0a:10:fb:74:6d:74:d1:72:07:14:31:0e:d5:3a:ab:
         cc:19:62:ff:8e:86:32:43:7c:c2:78:4a:41:38:c0:03:30:3e:
         aa:64:37:ea:36:0c:85:2c:81:80:60:01:b9:35:71:2c:c5:e9:
         94:d2:08:89:f1:30:c5:50:4a:df:fd:93:32:f3:b9:2a:f8:12:
         0b:f0:72:9d:34:cc:61:14:b6:95:bc:f6:09:d6:73:28:96:f5:
         3d:3a:70:2d:92:b3:a7:f8:2f:ec:41:2d:5c:74:20:56:ca:21:
         94:95:3d:3b:c4:b0:e9:1e:e4:f8:f3:f2:a4:38:92:a4:d1:9e:
         27:75:cb:d3:5a:77:04:d3:dc:a1:5a:f6:64:7d:f4:ef:f8:e7:
         a3:9e:72:de:5c:b0:fe:54:ae:66:ef:b7:d6:ad:bc:7b:98:5d:
         99:9e:e4:dc:57:57:52:f1:02:ea:86:ca:ab:3f:4d:7e:44:75:
         4f:a5:09:b7:2a:58:49:9b:47:55:5e:c3:3c:e3:db:6b:11:a9:
         32:51:c6:9c:7d:6a:5e:6a:ba:50:ad:b2:6e:ee:e8:84:c9:f0:
         d3:98:6b:18:54:32:de:65:7d:80:4f:0b:7a:97:58:73:7e:25:
         ff:54:e9:dd:14:77:7e:99:e1:27:5a:2f:8c:8b:26:db:f1:bf:
         f1:85:a2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:03 2024 by rpki-client on console-ams.rpki-client.org