Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/3230322e35322e34392e302f32342d3234203d3e203436303535.roa
File:                     3230322e35322e34392e302f32342d3234203d3e203436303535.roa (raw, json)
Hash identifier:          BRAsMxjvKV46QsUgC4ckF8DvpBGLC/oIhLDJczmM96U=
Subject key identifier:   3B:12:89:EB:DA:B3:92:3A:66:51:BD:F5:2B:8A:77:81:B5:88:50:B8
Certificate issuer:       /CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91
Certificate serial:       680D401F8076B20818B991A8658A479E49F7E653
Authority key identifier: FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/3230322e35322e34392e302f32342d3234203d3e203436303535.roa
Signing time:             Wed 09 Aug 2023 09:00:58 +0000
ROA not before:           Wed 09 Aug 2023 08:55:58 +0000
ROA not after:            Wed 07 Aug 2024 09:00:58 +0000
asID:                     46055
IP address blocks:        202.52.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl
                          rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 15:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:0d:40:1f:80:76:b2:08:18:b9:91:a8:65:8a:47:9e:49:f7:e6:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91
        Validity
            Not Before: Aug  9 08:55:58 2023 GMT
            Not After : Aug  7 09:00:58 2024 GMT
        Subject: CN=3B1289EBDAB3923A6651BDF52B8A7781B58850B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4f:c9:d7:c6:14:42:6b:89:82:e2:ba:a5:d5:
                    f0:2a:1e:c5:fd:60:d7:e4:36:df:a8:f4:df:78:dc:
                    ce:65:99:cb:6f:b3:f9:7c:7a:70:64:23:c0:06:28:
                    47:5d:7e:85:8f:6b:10:13:e9:31:fd:e3:09:7f:14:
                    d4:db:4d:74:f4:0b:b4:56:4a:a0:5a:f9:ab:56:cd:
                    4d:57:6d:4b:68:2c:5f:4b:d5:70:d8:02:84:48:3c:
                    50:11:c9:2a:c7:7c:8b:34:30:e3:f5:60:9b:30:24:
                    34:de:7f:23:39:2b:fa:3d:bd:b0:19:6d:0c:61:51:
                    9d:f7:2c:26:f2:5f:cc:fd:c2:36:d4:19:e2:6b:e2:
                    14:03:b5:9c:1b:c5:6f:c1:5d:9e:54:63:86:1e:ad:
                    e2:3d:d9:bf:3c:e6:7a:56:1f:e1:90:79:86:72:06:
                    b3:5c:d4:c2:66:42:86:9d:4b:90:75:2f:de:b4:95:
                    60:80:9b:e7:0d:39:66:45:85:be:37:29:f9:08:db:
                    2d:cc:46:33:54:31:95:43:65:d9:6d:83:94:04:6b:
                    ec:ad:77:1c:e6:e8:38:0d:1c:17:04:fa:00:7c:2d:
                    c8:67:de:82:5b:b0:e7:c0:58:5a:5f:cb:f2:01:c0:
                    e8:45:7c:d3:06:93:64:86:1d:49:58:5d:9d:38:7b:
                    a8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:12:89:EB:DA:B3:92:3A:66:51:BD:F5:2B:8A:77:81:B5:88:50:B8
            X509v3 Authority Key Identifier:
                keyid:FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/3230322e35322e34392e302f32342d3234203d3e203436303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.52.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:8c:38:79:f4:32:0a:cd:3b:90:7e:85:9c:b3:5c:af:54:c0:
         61:44:d5:c5:89:34:89:fb:c5:78:fc:94:8f:d9:29:d4:5d:e3:
         9d:32:71:4a:2c:fd:e9:9f:75:f8:44:be:e5:99:e4:6b:77:a8:
         07:8f:8d:a9:dd:12:5f:ff:65:1e:81:be:8a:09:84:ec:9f:db:
         c5:63:b8:52:6d:a9:17:e7:a6:84:1a:82:3f:32:11:a1:fe:7b:
         c2:f8:82:f5:42:f6:a1:a9:fd:d5:98:69:4d:6b:4b:bc:f2:bf:
         39:1c:00:a4:12:04:73:93:bf:2e:50:11:b0:9f:25:49:fe:35:
         7f:2a:fd:ba:97:31:e0:59:e0:88:87:7b:ee:f9:89:15:79:9a:
         48:e7:d9:f3:a4:9b:d7:b4:e6:3a:63:f4:38:ce:bf:b3:36:43:
         4c:a6:c9:89:d9:1c:7d:4c:e6:f2:70:d7:27:89:d7:45:e8:76:
         92:cb:7a:7f:f1:1c:61:e1:6d:8a:9b:eb:0b:e2:dc:90:dc:20:
         dd:96:ea:87:d0:2f:fb:f8:fc:b1:14:61:af:65:df:4a:8d:a3:
         d0:59:e4:fd:eb:ef:77:2b:53:ee:dc:78:1d:6e:fe:e6:e7:76:
         4a:c4:63:33:a4:29:e8:a1:fe:66:f7:4a:2b:ba:4c:e4:c2:ae:
         e6:df:67:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 14:24:32 2024 by rpki-client on console-fra.rpki-client.org