Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/3230322e35322e34382e302f32342d3234203d3e203436303535.roa
File:                     3230322e35322e34382e302f32342d3234203d3e203436303535.roa (raw, json)
Hash identifier:          aHoEwvcI7fJ8v6s7qpw9CYrcpxOeVqGK3uNeXVir63o=
Subject key identifier:   63:0B:2A:F0:67:77:8C:0C:DD:B6:1F:59:B0:F2:33:AD:7C:22:14:49
Certificate issuer:       /CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91
Certificate serial:       6A068FA08044960005047E95E164CE9E433A61E5
Authority key identifier: FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/3230322e35322e34382e302f32342d3234203d3e203436303535.roa
Signing time:             Wed 09 Aug 2023 09:00:58 +0000
ROA not before:           Wed 09 Aug 2023 08:55:58 +0000
ROA not after:            Wed 07 Aug 2024 09:00:58 +0000
asID:                     46055
IP address blocks:        202.52.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl
                          rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Apr 2024 23:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:06:8f:a0:80:44:96:00:05:04:7e:95:e1:64:ce:9e:43:3a:61:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91
        Validity
            Not Before: Aug  9 08:55:58 2023 GMT
            Not After : Aug  7 09:00:58 2024 GMT
        Subject: CN=630B2AF067778C0CDDB61F59B0F233AD7C221449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:07:92:d4:1c:94:ee:9c:33:fc:51:34:a7:ce:
                    57:3e:f4:66:54:ef:b5:0f:0f:19:7d:0c:1a:bf:03:
                    81:25:b9:d3:d0:5b:79:5e:3e:ec:83:ab:85:17:7a:
                    3d:10:47:ca:ad:c8:b9:4d:75:a6:5b:80:53:29:62:
                    17:5f:c9:66:0b:26:70:d5:ad:ca:8b:9b:e1:3f:ac:
                    b6:c3:55:9d:e7:76:83:43:b4:ad:e6:04:b8:3d:f4:
                    4f:19:c3:47:2b:9a:03:48:41:bf:3d:27:d8:f5:bf:
                    c3:70:e8:ea:e4:90:1e:97:27:cb:b3:5b:d9:7d:ab:
                    69:1a:43:72:92:80:f9:24:44:cc:ce:66:11:c8:57:
                    6a:ed:69:73:6e:3a:c0:dd:51:cd:30:ba:08:78:83:
                    ea:44:8a:8a:89:01:26:98:19:c5:f3:b3:6f:9e:ec:
                    c9:5b:37:c1:79:ec:c5:00:4a:23:79:ee:3a:79:a8:
                    14:8f:04:a6:60:ee:de:32:7f:4a:a8:3e:e4:83:a9:
                    c4:7e:cb:f4:0f:a5:a4:61:15:16:b2:68:2f:b1:ed:
                    10:b0:6a:1d:a5:2f:34:ee:7b:ee:d5:e1:c4:cf:73:
                    86:c9:ed:eb:f4:d3:2b:54:aa:19:af:d3:20:b7:47:
                    8f:7f:18:c9:e0:16:eb:a5:bd:5c:d3:75:a6:d8:42:
                    89:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:0B:2A:F0:67:77:8C:0C:DD:B6:1F:59:B0:F2:33:AD:7C:22:14:49
            X509v3 Authority Key Identifier:
                keyid:FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/3230322e35322e34382e302f32342d3234203d3e203436303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.52.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:53:02:36:b1:69:bb:69:ea:49:3e:53:d3:49:8f:5d:5d:66:
         14:fa:ca:ae:88:25:4f:0a:de:f8:f0:0e:de:31:80:10:6f:01:
         ff:92:42:de:24:07:49:22:6f:8c:2c:10:06:a8:72:15:ac:d8:
         0c:d1:45:2d:27:e1:39:38:d2:e3:7f:86:3f:a3:52:52:26:1f:
         12:e8:94:1c:10:df:02:42:4f:02:50:6c:49:6f:3f:5d:6f:ac:
         cc:c7:af:2b:1c:df:02:3c:82:4d:97:6f:f9:96:8a:d0:1b:c8:
         0a:8a:88:53:07:31:9c:cd:60:48:26:f4:ec:86:30:31:ac:03:
         51:fa:a2:73:f3:0d:8c:5f:d0:4e:6e:9c:41:30:4d:a4:15:5e:
         3b:d9:7d:d5:f4:ea:a5:4e:c3:56:cc:c7:74:30:1b:1a:c0:af:
         0e:88:ae:6a:69:8e:d5:52:2e:a5:4f:a8:ef:91:1a:69:a3:14:
         3b:ca:ae:b0:5d:69:60:cd:d5:bb:9b:46:2d:af:5a:b5:5b:6b:
         0c:9a:cb:c2:fb:97:1e:f4:62:9b:23:8e:1f:2a:97:3d:72:bf:
         92:b3:32:74:60:e0:76:92:ce:df:0c:5a:78:30:5f:32:71:2b:
         8a:14:fc:4d:89:7a:60:26:ff:f6:a0:d7:2c:ad:79:a1:d3:f1:
         fc:6f:aa:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 20:11:26 2024 by rpki-client on console-fra.rpki-client.org