Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33342e302f32342d3234203d3e203538343837.roa
File:                     3230322e31302e33342e302f32342d3234203d3e203538343837.roa (raw, json)
Hash identifier:          IUiOEtbuojkgfE9bFHeFV4SlR/P0It2TCwVcscSwoQ4=
Subject key identifier:   0F:91:92:C4:CA:C6:B6:5F:35:1D:F2:8E:B5:C6:B7:49:F0:49:22:53
Certificate issuer:       /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Certificate serial:       0EBB6923230062248609FEC9EE853F7DDAA963B2
Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33342e302f32342d3234203d3e203538343837.roa
Signing time:             Thu 11 Apr 2024 09:02:30 +0000
ROA not before:           Thu 11 Apr 2024 08:57:30 +0000
ROA not after:            Thu 10 Apr 2025 09:02:30 +0000
asID:                     58487
IP address blocks:        202.10.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
                          rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:29:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:bb:69:23:23:00:62:24:86:09:fe:c9:ee:85:3f:7d:da:a9:63:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
        Validity
            Not Before: Apr 11 08:57:30 2024 GMT
            Not After : Apr 10 09:02:30 2025 GMT
        Subject: CN=0F9192C4CAC6B65F351DF28EB5C6B749F0492253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6b:de:f7:dd:c6:e1:22:9e:aa:eb:36:d2:bc:
                    10:ed:50:0c:0a:93:73:fe:e2:4e:e9:46:c6:33:91:
                    af:0c:89:82:32:01:5b:cf:cf:06:90:e8:fb:99:3f:
                    00:eb:92:08:2b:c7:42:f1:29:5d:ae:66:a6:65:2b:
                    84:e4:0e:79:1a:be:a1:e0:2f:79:f9:8e:26:41:99:
                    be:9b:ee:83:be:09:2f:c7:5a:56:76:65:e5:38:fd:
                    ec:39:ff:99:19:0c:b1:cf:48:9d:12:b8:de:46:43:
                    08:35:b1:0e:40:53:40:94:de:4a:f3:95:24:23:32:
                    45:28:c9:92:27:9e:99:1c:db:d3:9c:8d:f8:6e:40:
                    3f:b7:87:dc:8a:03:30:24:da:50:5f:7e:c2:81:fd:
                    79:ea:5b:a5:9f:f2:90:25:f2:fd:6f:a3:15:0a:0f:
                    54:5e:f7:d1:92:94:ba:03:de:4e:ab:c4:50:24:9f:
                    34:78:5e:86:14:85:7e:5d:8f:ff:fb:e6:63:b5:dc:
                    60:2b:60:69:ab:d8:fd:7e:fe:14:20:d9:77:2f:91:
                    70:56:24:3a:76:f6:46:01:0e:80:f6:bd:fe:44:dd:
                    f0:42:97:db:e7:2d:e2:d2:75:ed:19:67:cc:64:19:
                    58:60:b3:aa:5e:5c:64:93:20:a9:6a:1b:2b:60:b3:
                    9d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:91:92:C4:CA:C6:B6:5F:35:1D:F2:8E:B5:C6:B7:49:F0:49:22:53
            X509v3 Authority Key Identifier:
                keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33342e302f32342d3234203d3e203538343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.10.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:a7:cb:96:88:42:ee:dc:fb:9c:72:45:9c:e6:12:45:62:78:
         0d:75:b0:f5:6f:34:80:8e:dd:1f:fa:e0:02:95:3c:0c:4e:12:
         a9:6d:bc:75:3a:97:31:03:57:f5:3c:aa:a0:6a:c4:5e:d0:c5:
         d7:2b:45:9a:15:84:89:1e:aa:c8:dd:79:4a:bc:4b:76:e3:08:
         d4:b9:4c:af:e9:cd:6e:0c:ab:ee:ed:62:ff:7c:40:84:24:df:
         b7:8f:72:88:1c:04:10:49:16:f7:e5:ae:46:45:ec:c6:fc:1a:
         9b:9a:ab:a6:82:bb:ca:98:a3:25:e7:aa:d2:99:bc:6c:d8:1b:
         27:e7:e0:33:22:63:62:6e:69:0a:5a:11:dc:c1:75:1d:c9:4e:
         05:9f:91:7f:e4:ca:94:d2:ff:f3:a8:c0:f1:4c:7e:aa:45:e0:
         03:3e:a0:0d:70:c5:db:d9:e4:57:d3:9e:a0:36:e1:33:2b:d9:
         4d:6f:10:d0:15:e9:2f:ef:3d:39:6e:c9:b2:34:a6:86:c1:cd:
         0f:41:a7:da:73:c1:e1:1b:b1:83:92:8d:27:4a:e5:95:07:b0:
         86:91:62:7c:85:e0:38:7c:0e:24:6c:73:c2:16:3b:ee:93:d5:
         47:c3:4f:31:5b:80:30:06:14:d0:4a:28:b1:6c:c8:aa:fb:6f:
         4f:f0:39:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:49:50 2024 by rpki-client on console-fra.rpki-client.org