Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/3230322e35322e35302e302f32342d3234203d3e203436303536.roa
File:                     3230322e35322e35302e302f32342d3234203d3e203436303536.roa (raw, json)
Hash identifier:          AJi5f5HAI17fffWf8PYIDEUdv17L129SmpYGfw7CMEE=
Subject key identifier:   3B:65:C2:80:59:32:6C:DE:18:A5:6E:48:C7:05:F5:7C:F6:44:20:50
Certificate issuer:       /CN=AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06
Certificate serial:       7897D15A41B04A95C62AA99D49B5A0C3952996C3
Authority key identifier: AB:58:72:11:82:B4:EA:A8:FE:CD:4A:D8:80:8C:EE:F5:CD:DD:1B:06
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/3230322e35322e35302e302f32342d3234203d3e203436303536.roa
Signing time:             Mon 01 Jul 2024 01:06:03 +0000
ROA not before:           Mon 01 Jul 2024 01:01:03 +0000
ROA not after:            Mon 30 Jun 2025 01:06:03 +0000
asID:                     46056
IP address blocks:        202.52.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl
                          rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Feb 2025 02:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:97:d1:5a:41:b0:4a:95:c6:2a:a9:9d:49:b5:a0:c3:95:29:96:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06
        Validity
            Not Before: Jul  1 01:01:03 2024 GMT
            Not After : Jun 30 01:06:03 2025 GMT
        Subject: CN=3B65C28059326CDE18A56E48C705F57CF6442050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d4:80:3c:da:ae:46:15:e5:42:57:90:21:30:
                    b3:27:44:c9:91:3c:60:aa:d1:ea:4f:67:d5:29:db:
                    76:05:b1:2a:10:a3:fb:63:d4:2c:9b:43:4b:c6:6c:
                    f5:18:58:8f:f0:a2:16:de:18:d0:4c:a2:2a:a8:3e:
                    77:2d:58:1b:d3:03:39:72:4b:2d:2c:e4:79:72:a9:
                    cc:d0:b8:34:65:7b:61:bc:2e:34:5b:28:5f:dc:b7:
                    df:22:38:76:82:ed:4b:c8:6e:25:56:91:fa:d9:3d:
                    b4:4f:2e:9e:99:a8:d1:f2:76:d9:60:84:73:03:db:
                    4c:5a:b5:f0:d8:38:ce:41:da:d5:67:7c:3d:92:eb:
                    78:8d:76:0c:cd:a2:86:d5:8e:2d:e1:98:74:5c:ed:
                    62:7a:8a:67:81:3e:6d:78:f0:4e:8e:0b:04:53:cf:
                    98:7f:1f:50:43:16:7e:49:7b:9a:86:5f:26:bc:03:
                    0d:61:40:63:b5:90:e8:5d:94:fc:0d:f9:28:2d:c7:
                    eb:8b:ac:11:b7:f7:9e:c3:b7:88:39:a3:81:85:c6:
                    02:a9:ba:34:7c:96:e3:bb:c6:29:ec:1a:f0:e7:fc:
                    3f:7a:dc:ed:48:3c:4d:b3:f5:b5:cf:c6:31:e5:03:
                    38:57:5a:b4:2c:89:47:53:63:b6:fb:15:1d:f2:f7:
                    d5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:65:C2:80:59:32:6C:DE:18:A5:6E:48:C7:05:F5:7C:F6:44:20:50
            X509v3 Authority Key Identifier:
                keyid:AB:58:72:11:82:B4:EA:A8:FE:CD:4A:D8:80:8C:EE:F5:CD:DD:1B:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/3230322e35322e35302e302f32342d3234203d3e203436303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.52.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:4c:21:32:6b:b4:8b:2a:9e:76:2f:ee:41:1e:d4:7c:42:60:
         63:9f:04:cd:52:3f:a3:d4:4d:a6:47:46:a1:59:f8:f9:94:4c:
         cb:3f:ba:52:cf:8d:76:e6:f6:6a:f8:d4:fb:31:ff:5f:19:c5:
         3e:54:72:a7:5f:a9:6f:65:43:0f:a7:0a:bd:55:4d:d3:fe:4e:
         f0:6a:11:fc:37:ec:b8:89:9c:08:c7:8a:97:0c:50:88:b2:89:
         29:7d:43:d1:41:14:3e:98:df:8d:21:0f:ce:5f:c6:91:81:a8:
         84:8d:2d:21:d8:ae:a3:1c:97:3c:07:8e:3b:26:d4:fe:63:63:
         23:90:5c:1b:2a:eb:6c:b8:4b:2e:cf:e8:63:66:a7:6d:f6:19:
         f8:5b:29:1c:cb:bc:c4:ac:f5:d2:7d:db:6a:6a:5a:3e:55:f1:
         43:17:4d:31:1b:24:98:cb:68:8e:ea:9a:8a:a8:cd:44:30:de:
         ff:3a:28:bc:44:3d:cc:2e:c6:c5:10:1c:8d:ec:55:91:7c:be:
         58:f3:e6:0b:71:cd:44:d4:46:c9:7e:b2:c1:4e:52:25:e2:9a:
         97:c5:02:aa:5b:df:af:c8:fa:36:c0:95:72:0e:34:d1:84:63:
         37:ab:bd:ed:10:3f:43:f6:c3:ec:8f:3f:d7:ea:1c:d0:7b:a1:
         66:c1:5a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:03:37 2025 by rpki-client