Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34352e302f32342d3234203d3e203538343837.roa
File:                     3230322e31302e34352e302f32342d3234203d3e203538343837.roa (raw, json)
Hash identifier:          esVyrU535rmhYhnc7b4ddPvC1VCQH+vZ4Tj5OxpVk38=
Subject key identifier:   06:C0:7D:E4:68:00:DA:3A:8A:B0:06:45:88:7F:BC:C9:E9:AA:83:BE
Certificate issuer:       /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Certificate serial:       2C653F003403352F4E91678EC5D076E65B8DD113
Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34352e302f32342d3234203d3e203538343837.roa
Signing time:             Thu 11 Apr 2024 10:02:03 +0000
ROA not before:           Thu 11 Apr 2024 09:57:03 +0000
ROA not after:            Thu 10 Apr 2025 10:02:03 +0000
asID:                     58487
IP address blocks:        202.10.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
                          rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:29:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:65:3f:00:34:03:35:2f:4e:91:67:8e:c5:d0:76:e6:5b:8d:d1:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
        Validity
            Not Before: Apr 11 09:57:03 2024 GMT
            Not After : Apr 10 10:02:03 2025 GMT
        Subject: CN=06C07DE46800DA3A8AB00645887FBCC9E9AA83BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:96:33:21:77:2b:f3:77:f0:e8:bc:c5:eb:27:
                    3a:0f:a1:94:0c:68:23:71:f1:27:af:8e:81:8c:20:
                    51:04:97:6c:c4:06:ef:9e:9e:8a:6b:93:49:92:c3:
                    ec:34:cf:1a:ab:8c:44:c9:86:e9:43:d9:9b:e2:ee:
                    e9:8c:9b:3b:15:23:63:fe:3b:c9:bb:35:0e:ff:1c:
                    7e:f4:87:c5:ef:5d:d6:b5:d6:44:6f:ce:51:66:4d:
                    ca:01:a5:af:c0:0f:e1:64:96:a9:e6:61:7f:c2:08:
                    1e:94:7b:45:6a:52:32:cb:9d:8d:85:12:6a:f3:a5:
                    54:ff:87:21:18:94:75:da:d9:ee:ce:8c:85:f6:6b:
                    75:61:53:3b:b4:67:2e:61:2d:c6:0c:0e:b4:95:76:
                    f5:63:69:4f:3a:48:52:54:29:e8:e7:c9:0a:3f:a6:
                    40:32:8f:61:c0:46:d7:b0:1c:8d:fd:60:5a:25:23:
                    29:56:9e:8c:4e:fa:a7:35:e7:36:53:f9:6a:35:f6:
                    15:55:3d:d0:7c:12:59:e5:82:a2:bf:26:04:bd:be:
                    c2:e8:4e:cd:4a:5e:c4:52:99:b0:64:02:79:eb:da:
                    4d:94:fc:83:90:14:fe:86:b0:ca:13:af:94:fc:c8:
                    f9:c5:02:c2:ff:e0:be:97:16:6f:99:67:a7:52:43:
                    a4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C0:7D:E4:68:00:DA:3A:8A:B0:06:45:88:7F:BC:C9:E9:AA:83:BE
            X509v3 Authority Key Identifier:
                keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34352e302f32342d3234203d3e203538343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.10.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:49:80:41:c7:73:a2:3c:27:41:15:ac:a6:d1:b3:5e:2a:10:
         55:33:bb:6d:64:a5:2b:32:db:c6:9f:2c:ec:ed:5c:60:96:f2:
         75:f1:7a:5a:bd:b1:8f:b7:25:11:b5:c4:d9:c6:d4:0f:04:b4:
         2a:68:56:ee:37:21:cd:b6:ca:65:be:b2:5e:13:d0:6c:45:0d:
         bc:74:d0:75:9d:c8:f6:43:b1:e7:09:6d:3a:19:64:0f:98:9f:
         40:3a:6a:1d:b5:0b:fe:b6:36:af:a5:1c:2a:45:57:cf:60:50:
         e1:41:d6:20:21:da:98:d6:0d:c6:69:76:4e:50:ef:8c:d8:dd:
         a0:b8:a5:0a:56:d9:3d:87:40:d0:43:21:2e:cf:20:81:5c:8a:
         e7:ea:ea:5a:5d:5a:b8:00:2a:77:57:87:ab:fb:99:dc:33:4a:
         40:7e:8b:1f:d2:b8:1d:8e:6e:8b:78:b8:03:79:9a:8d:6a:4e:
         da:32:13:2b:48:62:24:de:72:38:4a:b7:97:50:95:3c:fc:7f:
         ba:14:65:63:bc:18:37:0e:d0:7a:4b:60:74:df:20:3b:d9:54:
         03:a7:35:01:56:7b:f4:3b:c7:00:ee:a3:4e:57:8b:c5:c9:f2:
         98:b0:c2:e5:bd:e2:e3:48:90:7a:ca:87:26:17:f9:d2:8a:f1:
         25:8a:2d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:49:50 2024 by rpki-client on console-fra.rpki-client.org