Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35322e302f32342d3234203d3e203435333132.roa
File:                     3230322e38312e35322e302f32342d3234203d3e203435333132.roa (raw, json)
Hash identifier:          dFEf+CQAB+w4zfPgYoaevZGZT1TqAHjLeFPVeVjNvZ4=
Subject key identifier:   DC:D5:B2:0D:38:26:2A:F9:C7:13:CE:63:2B:90:FE:A7:1A:0C:A8:3B
Certificate issuer:       /CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
Certificate serial:       266F77952577530ABB710F7582605F82E07E8D06
Authority key identifier: 15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35322e302f32342d3234203d3e203435333132.roa
Signing time:             Mon 31 Jul 2023 00:06:24 +0000
ROA not before:           Mon 31 Jul 2023 00:01:24 +0000
ROA not after:            Mon 29 Jul 2024 00:06:24 +0000
asID:                     45312
IP address blocks:        202.81.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl
                          rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 07:46:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:6f:77:95:25:77:53:0a:bb:71:0f:75:82:60:5f:82:e0:7e:8d:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
        Validity
            Not Before: Jul 31 00:01:24 2023 GMT
            Not After : Jul 29 00:06:24 2024 GMT
        Subject: CN=DCD5B20D38262AF9C713CE632B90FEA71A0CA83B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fd:00:13:7f:ac:b7:c7:a5:0a:0c:ab:ac:d2:
                    89:70:42:9b:76:81:ef:de:5d:ce:d6:77:a6:85:11:
                    fa:f6:17:2b:2c:ea:2b:ee:2b:e9:f3:c3:96:7f:cb:
                    81:40:38:2a:d5:b0:c8:b6:95:23:1d:40:e2:1c:b7:
                    ca:97:73:2c:37:59:52:c1:09:6d:20:c3:71:28:50:
                    8b:87:c4:f2:57:98:98:31:54:9c:d4:e7:20:88:68:
                    7f:04:7b:f0:00:a3:ff:72:ad:0c:e1:b7:7f:b9:e3:
                    c8:a8:61:0e:58:96:87:48:53:b3:b9:89:8f:63:6a:
                    e5:58:51:a6:37:18:76:87:b4:86:60:06:f0:4d:e6:
                    c7:8d:85:cd:02:3f:02:83:4d:01:ff:58:2d:4a:5b:
                    1b:cf:e4:4e:1c:a8:01:e7:88:90:d5:7d:eb:a8:f2:
                    9d:d3:ca:80:0e:d9:b8:95:30:b7:42:c6:0e:23:f5:
                    40:12:95:0a:a5:94:17:5e:a6:4b:88:89:2f:cc:a8:
                    65:d1:85:eb:25:de:93:62:de:59:8c:2b:a6:48:10:
                    12:c9:73:60:e5:d3:3d:b3:84:c6:f4:4f:51:fc:0f:
                    02:18:59:08:c3:8e:d7:ba:97:6b:84:0b:29:06:db:
                    c0:04:d7:06:d2:e2:4c:34:48:39:b6:7a:09:80:67:
                    dd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D5:B2:0D:38:26:2A:F9:C7:13:CE:63:2B:90:FE:A7:1A:0C:A8:3B
            X509v3 Authority Key Identifier:
                keyid:15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35322e302f32342d3234203d3e203435333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.81.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:70:ab:15:8e:57:8a:ac:88:a2:35:d2:54:1b:37:8f:b2:cd:
         87:77:8c:0b:44:15:cf:85:b2:70:46:3b:b1:c6:b2:6f:69:f6:
         94:f7:2e:9e:48:a4:03:5f:7f:e8:67:80:7b:6f:2d:38:46:84:
         3b:19:5d:69:1d:c2:e9:42:30:82:c4:08:94:9c:f6:6f:3c:22:
         59:b7:1d:73:8e:f2:1f:41:e7:4c:7d:26:71:26:a2:ac:b6:b5:
         2f:bd:73:7f:e0:22:4e:5e:74:ae:22:72:23:e8:36:9e:73:b1:
         3c:fc:1c:c4:ba:a9:60:01:57:6f:a9:9d:91:1f:ef:b1:25:cc:
         aa:89:b7:0e:4a:c4:87:60:06:af:b2:48:6b:3d:bb:09:2d:ab:
         4b:64:6e:37:4c:8e:13:31:6f:33:34:38:09:af:53:f8:5b:3d:
         46:4a:cd:49:c8:98:5f:80:c0:7a:91:82:b7:33:de:4b:d6:16:
         be:25:46:05:0f:24:b4:8e:4d:99:c3:85:cf:5d:ca:6f:86:15:
         ee:04:35:b8:45:22:80:4e:57:9c:21:00:50:11:eb:56:5a:89:
         a4:67:18:58:5a:d2:07:55:48:b9:61:27:71:e0:b3:42:50:ae:
         d3:fa:b7:b6:14:0e:f4:d2:d4:92:e0:3a:52:8c:7e:a7:84:19:
         1d:7f:7a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 05:31:33 2024 by rpki-client on console-fra.rpki-client.org