Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34332e302f32342d3234203d3e203538343837.roa
File:                     3230322e31302e34332e302f32342d3234203d3e203538343837.roa (raw, json)
Hash identifier:          YkRyUtc2KD1Ef2RgD8pgBsUuNvCrg7SLY6jCM/uukPs=
Subject key identifier:   31:03:23:CD:74:DB:D4:5D:03:D5:5A:E8:5A:F2:5F:B0:60:BD:F7:E3
Certificate issuer:       /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Certificate serial:       2F7932F9898D052B00AB3224C9742BB51B3DA391
Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34332e302f32342d3234203d3e203538343837.roa
Signing time:             Thu 11 Apr 2024 10:02:02 +0000
ROA not before:           Thu 11 Apr 2024 09:57:02 +0000
ROA not after:            Thu 10 Apr 2025 10:02:02 +0000
asID:                     58487
IP address blocks:        202.10.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
                          rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:79:32:f9:89:8d:05:2b:00:ab:32:24:c9:74:2b:b5:1b:3d:a3:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
        Validity
            Not Before: Apr 11 09:57:02 2024 GMT
            Not After : Apr 10 10:02:02 2025 GMT
        Subject: CN=310323CD74DBD45D03D55AE85AF25FB060BDF7E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f6:db:18:ad:ee:2d:3b:a9:58:b5:bc:6f:81:
                    e4:32:ce:0c:30:7b:84:ad:e3:e0:c3:74:2f:c8:ce:
                    e5:64:9e:f6:cf:cb:cd:28:5c:f6:dd:70:11:32:47:
                    17:08:6c:57:d1:29:41:66:91:e2:4e:64:3d:70:42:
                    3c:3c:50:55:3c:f9:d7:b7:c2:e4:be:b7:10:2e:eb:
                    be:0b:76:54:95:9d:7e:a4:dd:b8:8b:69:41:94:a5:
                    a4:1f:be:61:a2:99:1a:51:27:61:80:f0:6f:6d:eb:
                    05:44:79:e9:e9:d3:da:c8:1e:46:28:3b:2a:23:a6:
                    f8:60:3e:aa:b0:fd:97:76:bb:b7:8e:ed:f9:5b:bf:
                    93:c4:c1:00:f6:7b:9b:ee:96:87:a6:aa:53:cc:54:
                    18:7a:4a:b2:40:a2:73:ea:5d:22:d2:81:f9:75:0a:
                    5b:a0:0b:1e:7d:51:74:28:5f:03:25:b5:c1:2e:75:
                    36:b4:30:a4:83:0c:11:e8:12:b8:1d:58:c2:c4:98:
                    28:03:a4:f1:59:01:d5:08:f9:f1:16:61:63:3a:e6:
                    ec:ca:3d:59:8d:72:ab:52:37:99:00:d3:e3:ac:3d:
                    91:e2:a1:5c:c5:c5:af:d7:8f:81:92:be:5a:da:a8:
                    bb:f0:5a:36:cf:73:3e:12:de:04:f1:15:02:34:6f:
                    09:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:03:23:CD:74:DB:D4:5D:03:D5:5A:E8:5A:F2:5F:B0:60:BD:F7:E3
            X509v3 Authority Key Identifier:
                keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34332e302f32342d3234203d3e203538343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.10.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:44:5e:98:0d:c0:14:ba:a7:2c:fb:32:b6:d1:07:ca:5f:fa:
         a7:58:b3:7f:05:c1:17:d0:9f:09:6d:6d:a4:f1:4b:c9:37:c5:
         9d:47:c4:f2:00:8b:11:75:f6:88:a8:f8:bb:23:46:2c:2d:3e:
         1f:b4:3d:a8:68:b9:2d:85:d9:05:59:9f:0d:1a:f7:af:e8:d2:
         4d:03:81:3d:c9:e1:15:52:66:5a:55:e8:cd:7f:1e:7e:31:9d:
         88:90:e7:f8:75:1c:2c:a8:20:de:38:ea:6b:6d:17:01:df:7a:
         85:ed:b9:1b:e9:8f:e6:bc:41:cd:ae:e8:8a:eb:f2:7c:a7:5a:
         2a:75:fa:93:4d:85:01:09:6d:41:50:f4:9d:6f:4b:44:df:05:
         ea:fe:5d:c8:ef:87:8c:12:7f:06:88:91:1f:34:28:a4:46:fe:
         8b:1e:2e:db:f1:ca:3c:eb:56:53:38:a3:e8:5d:04:05:16:d2:
         f0:77:c4:27:81:69:c2:3c:f4:b5:ba:4e:91:dc:76:67:db:44:
         75:5d:ee:6b:5b:43:b2:48:3f:5f:4a:4d:65:05:6e:88:cd:38:
         13:83:91:84:ec:2c:51:95:05:8d:32:19:cf:50:85:94:3b:a5:
         61:77:56:54:09:73:3e:52:4d:e8:1a:83:e2:10:1a:97:c2:65:
         47:90:2b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:06:15 2024 by rpki-client on console-fra.rpki-client.org