Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33362e302f32332d3233203d3e203538343837.roa
File:                     3230322e31302e33362e302f32332d3233203d3e203538343837.roa (raw, json)
Hash identifier:          8xzMsbqgUWEv5/2TkSk2putdgpvBKii+FKkAsPeGpDw=
Subject key identifier:   2F:2C:E8:05:FD:34:D8:43:73:70:C1:05:E2:0B:47:E7:C2:76:FB:87
Certificate issuer:       /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Certificate serial:       05D52A069509D156DE176D8A5AA7D77016D3366A
Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33362e302f32332d3233203d3e203538343837.roa
Signing time:             Thu 11 Apr 2024 10:02:02 +0000
ROA not before:           Thu 11 Apr 2024 09:57:02 +0000
ROA not after:            Thu 10 Apr 2025 10:02:02 +0000
asID:                     58487
IP address blocks:        202.10.36.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
                          rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:d5:2a:06:95:09:d1:56:de:17:6d:8a:5a:a7:d7:70:16:d3:36:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
        Validity
            Not Before: Apr 11 09:57:02 2024 GMT
            Not After : Apr 10 10:02:02 2025 GMT
        Subject: CN=2F2CE805FD34D8437370C105E20B47E7C276FB87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c5:cb:e8:31:f1:f0:b4:da:fd:cd:af:c9:64:
                    78:54:a1:e4:6c:1c:69:c1:b1:92:86:69:c6:a2:48:
                    08:9b:61:06:31:b2:e3:e7:c2:28:26:c7:87:8a:be:
                    a3:2c:a0:09:f7:a9:96:14:bf:2f:bf:3a:5f:8a:cb:
                    95:7b:71:4a:a8:50:ac:da:a0:ca:fc:18:35:24:6a:
                    66:4a:95:b0:51:90:8e:6c:eb:ce:e3:2a:9e:b2:b5:
                    d2:94:6e:cb:07:8d:b2:86:35:46:a5:a8:7a:88:cc:
                    0d:d0:2c:63:b0:e5:89:12:b4:59:ce:9e:4e:7d:95:
                    b1:fa:3b:0e:02:ea:91:e9:14:a6:e2:26:1d:f6:fe:
                    b7:8a:6a:f4:d5:9b:89:94:72:25:a6:1a:e0:2a:c1:
                    88:8c:92:2d:d1:6f:7a:f6:a5:30:8a:73:99:73:07:
                    d6:1c:ba:cd:10:d5:60:51:6a:07:99:61:54:af:47:
                    4d:0e:4e:d2:c9:bb:67:a5:c5:04:61:7a:da:82:79:
                    cd:7f:1c:71:95:58:02:5a:e0:0a:22:07:da:db:54:
                    e7:bd:93:0d:42:57:16:26:67:7a:c8:37:ea:9e:4d:
                    9a:de:b1:aa:35:a7:32:51:2b:7b:34:5b:23:12:f4:
                    72:45:02:b6:2b:bc:2a:9f:53:7e:41:a2:21:8f:a1:
                    45:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:2C:E8:05:FD:34:D8:43:73:70:C1:05:E2:0B:47:E7:C2:76:FB:87
            X509v3 Authority Key Identifier:
                keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33362e302f32332d3233203d3e203538343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.10.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cc:f1:46:52:e4:b6:42:34:33:c9:45:2d:1f:72:13:f8:af:94:
         12:49:27:df:c3:a8:ac:f5:b9:8f:ed:54:53:79:7b:64:db:4b:
         db:9e:01:98:d2:d0:6e:d7:25:53:cb:99:48:c0:ff:68:fe:22:
         8c:69:d9:97:3f:6b:50:6e:d0:54:f9:bf:1c:5e:b8:7b:37:e3:
         8a:8a:5d:07:e2:4f:bb:fd:6a:58:73:1a:fd:5f:df:4b:b5:69:
         fe:36:57:fb:a0:55:93:7b:c9:c0:ef:0c:2f:4a:64:73:e2:33:
         12:c4:95:fc:a0:dd:a2:04:8e:ba:11:98:a9:2b:93:3d:55:69:
         84:3e:f0:aa:bf:f9:f6:11:75:c3:fa:f6:76:32:1b:c7:27:ee:
         6f:40:42:59:c1:3a:77:1d:2c:75:3c:c3:b9:3b:0e:4d:e4:50:
         70:2b:e2:e3:16:e5:37:e5:61:d7:4c:8d:1f:04:f7:5a:a0:08:
         9c:3b:50:8c:ed:e4:14:f3:41:51:4e:ac:88:aa:df:95:5e:03:
         c5:98:a9:1d:c5:ba:04:75:10:59:6a:fd:72:8d:7c:77:ec:03:
         99:80:7e:e5:98:74:87:ee:fe:1c:7b:a7:51:ab:fa:41:c3:96:
         bc:2e:dd:e2:1f:34:b0:7b:67:48:08:52:79:ad:d5:55:95:a1:
         f7:2c:c3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:04:28 2024 by rpki-client on console-ams.rpki-client.org