Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34342e302f32332d3233203d3e203538343837.roa
File:                     3230322e31302e34342e302f32332d3233203d3e203538343837.roa (raw, json)
Hash identifier:          fjZuZkbwwuSw+kk/lRAcYHZefnoRGhYFK1bTK+DnngI=
Subject key identifier:   C0:EA:EF:21:0E:00:D7:5B:DD:A4:B5:BA:EF:53:F3:11:B8:BD:12:F9
Certificate issuer:       /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Certificate serial:       77419DA81E13B003D7556CE22C2B1EC86B175493
Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34342e302f32332d3233203d3e203538343837.roa
Signing time:             Thu 11 Apr 2024 10:02:02 +0000
ROA not before:           Thu 11 Apr 2024 09:57:02 +0000
ROA not after:            Thu 10 Apr 2025 10:02:02 +0000
asID:                     58487
IP address blocks:        202.10.44.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
                          rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:41:9d:a8:1e:13:b0:03:d7:55:6c:e2:2c:2b:1e:c8:6b:17:54:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
        Validity
            Not Before: Apr 11 09:57:02 2024 GMT
            Not After : Apr 10 10:02:02 2025 GMT
        Subject: CN=C0EAEF210E00D75BDDA4B5BAEF53F311B8BD12F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4e:9f:8e:5d:4f:e2:26:ac:81:d9:20:2d:ae:
                    d8:9d:48:b4:c4:7f:5d:e0:a5:f5:f4:ce:17:e5:f7:
                    8b:e3:a2:5b:07:cb:0e:de:e1:ea:b4:01:6d:4d:b0:
                    5f:8b:f1:40:c1:99:0f:83:8e:7c:8a:2e:14:bb:20:
                    6f:01:bf:1f:82:f5:0a:a0:bb:b3:84:fb:7d:3a:47:
                    91:65:f8:dc:e8:ff:9e:53:66:4a:32:6d:93:24:78:
                    0c:a8:a7:e2:eb:a3:ac:2b:d3:13:2f:37:09:a8:a0:
                    aa:6e:be:20:ed:c4:85:60:c4:7c:bb:d0:c9:7c:03:
                    df:80:a9:a4:8c:64:b2:78:71:c1:99:fc:d9:99:4e:
                    85:e8:18:fc:06:0f:36:18:f3:40:37:7a:c2:0c:31:
                    c9:aa:a7:43:29:89:9c:f9:16:63:df:9e:11:ed:24:
                    cf:c6:62:83:70:87:97:d8:89:68:17:0b:48:a6:78:
                    38:31:58:60:36:d2:e8:1e:ab:1c:68:16:49:3e:5c:
                    35:9a:10:9d:b3:83:55:6d:61:2d:80:b3:b8:6b:55:
                    5a:6d:aa:4a:7c:e6:da:6b:18:e8:ba:45:f3:64:6b:
                    51:27:7f:cb:60:11:8c:61:39:70:0d:7d:2e:da:88:
                    fb:19:14:3b:04:51:b3:2c:a2:4a:87:65:40:60:b6:
                    77:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:EA:EF:21:0E:00:D7:5B:DD:A4:B5:BA:EF:53:F3:11:B8:BD:12:F9
            X509v3 Authority Key Identifier:
                keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34342e302f32332d3233203d3e203538343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.10.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:2b:9e:76:7f:0d:1c:b9:34:4e:4d:5b:88:a1:7a:1d:29:49:
         b2:2f:2c:23:63:b1:17:94:37:14:6c:95:bf:e2:77:f8:be:03:
         9c:0f:34:f2:4c:69:06:e4:5a:23:df:fa:7f:1e:db:41:ec:40:
         89:9e:d3:4a:07:2f:6b:66:4a:c8:28:21:b5:35:ea:ca:fe:4a:
         3e:7b:80:23:58:fa:1e:ed:3d:a0:f9:c9:71:0f:c1:a8:a0:7c:
         21:2a:8a:18:de:a8:b7:bb:e0:1c:fe:40:d7:bd:d2:00:dc:5e:
         67:48:57:73:2b:f7:34:20:60:b9:53:6e:f2:b8:47:b8:18:79:
         46:42:ad:17:32:a1:b8:42:88:ba:87:dd:38:f1:b3:05:2f:39:
         9c:fc:d3:14:7e:5b:7b:5c:1a:15:84:75:9d:1a:00:7e:66:f5:
         41:da:8d:fa:c4:5e:d9:04:e6:00:1b:51:e5:fd:42:14:16:50:
         98:47:f2:ce:4b:5e:eb:6c:2a:e5:80:c9:3b:41:c9:f3:c3:ce:
         55:f9:fe:29:c9:06:b4:37:e7:9f:23:71:ac:8d:f4:9b:d8:a2:
         4d:1b:6b:21:92:6e:52:45:5b:f7:9e:f1:ef:c2:06:25:2e:14:
         9f:e1:d2:83:d1:1d:6b:7c:bc:3a:f0:23:ab:64:ba:94:73:b4:
         b2:4d:c7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:06:15 2024 by rpki-client on console-fra.rpki-client.org