Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34362e302f32342d3234203d3e203538343837.roa
File:                     3230322e31302e34362e302f32342d3234203d3e203538343837.roa (raw, json)
Hash identifier:          HNC8zC/+ICaPct61w1fxqk/5X26aDfwEuWV7DKLIaYs=
Subject key identifier:   F4:5C:D9:0E:91:C7:71:A8:49:CA:06:86:3C:C6:BA:E9:9C:64:F9:40
Certificate issuer:       /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Certificate serial:       22B4FC9D781D1575DABD46388C4DD003B264CF5D
Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34362e302f32342d3234203d3e203538343837.roa
Signing time:             Thu 11 Apr 2024 10:02:02 +0000
ROA not before:           Thu 11 Apr 2024 09:57:02 +0000
ROA not after:            Thu 10 Apr 2025 10:02:02 +0000
asID:                     58487
IP address blocks:        202.10.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
                          rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:29:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:b4:fc:9d:78:1d:15:75:da:bd:46:38:8c:4d:d0:03:b2:64:cf:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
        Validity
            Not Before: Apr 11 09:57:02 2024 GMT
            Not After : Apr 10 10:02:02 2025 GMT
        Subject: CN=F45CD90E91C771A849CA06863CC6BAE99C64F940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:df:e0:ae:18:99:95:03:d4:cd:7f:67:86:1d:
                    c9:27:0a:46:d9:69:f3:21:a7:19:df:c5:6f:27:09:
                    d1:c8:f2:83:92:3c:e0:4b:13:c3:1b:aa:2d:99:b9:
                    f0:6b:ca:8f:39:c5:6e:63:b0:3e:2b:a0:f6:74:77:
                    77:a9:21:66:89:c2:71:83:a8:78:bf:8f:19:a1:fe:
                    79:57:d2:39:78:0e:5b:74:ae:6a:1c:00:29:92:25:
                    81:a5:76:19:8c:e1:72:89:46:7d:21:4f:fe:cd:7e:
                    0d:68:e8:53:c7:22:2e:93:61:b5:b9:d8:d5:11:3f:
                    cd:10:5e:5e:07:a9:26:87:79:5e:f6:be:66:66:ff:
                    da:eb:d9:29:44:8c:9a:77:72:6c:7e:d0:57:61:ae:
                    e1:08:2a:34:06:f2:c0:0b:18:f3:f5:ed:78:a4:cc:
                    b5:18:29:34:71:9a:a2:26:9c:47:80:1f:8e:41:8d:
                    01:16:e8:34:1f:ae:b5:cd:45:0e:b4:b6:8e:21:66:
                    29:52:eb:02:c4:4c:2a:b9:6c:5c:01:58:a9:52:96:
                    f7:73:2e:3c:93:3c:4e:83:ee:1b:50:42:15:8c:3f:
                    b8:b5:26:14:de:be:84:eb:37:54:4e:96:d4:9a:5b:
                    23:bc:a5:59:85:c9:41:53:39:e1:72:44:1f:e3:fa:
                    a3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:5C:D9:0E:91:C7:71:A8:49:CA:06:86:3C:C6:BA:E9:9C:64:F9:40
            X509v3 Authority Key Identifier:
                keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34362e302f32342d3234203d3e203538343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.10.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:11:72:46:a0:51:00:3f:54:80:7d:56:43:c9:be:02:67:a5:
         8b:48:d0:90:0b:7e:36:7d:4d:d0:ae:d6:2a:ee:a1:3c:31:41:
         c3:bb:a8:4f:04:32:32:cb:c3:31:12:b5:25:f5:f1:c1:f6:af:
         4a:cc:f6:34:37:6f:1d:46:93:8d:25:78:99:f2:ac:65:07:8a:
         3c:0f:e2:a5:e1:f4:6e:ac:77:00:a8:ec:b2:76:93:e2:e1:ba:
         f6:ba:9f:29:ef:28:ee:3d:0d:c6:da:68:24:88:5d:d8:ce:79:
         69:48:7e:a7:90:35:2d:7d:00:5b:ee:1a:c3:1c:6d:2d:8b:dd:
         86:58:eb:d5:1b:c7:82:83:e1:0d:16:90:2a:b5:93:4f:cd:82:
         01:bf:16:06:42:b4:fd:37:fb:c8:b4:b8:56:cc:62:37:6c:85:
         33:a9:2c:66:df:3a:e8:16:ab:d0:e6:3c:db:2a:69:e0:1e:d3:
         c6:95:58:e9:b1:02:e7:2c:d7:73:5c:93:d5:d0:d2:45:a1:6a:
         ec:1f:37:3c:8c:93:36:19:50:f2:40:c7:75:a1:92:c2:da:92:
         4e:32:45:1e:4e:4b:67:05:5a:8b:57:34:da:48:c4:02:6e:1a:
         29:31:b0:db:28:22:58:a2:a0:ca:5c:14:a1:65:c0:ab:a9:2c:
         82:7b:c5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:43:32 2024 by rpki-client on console-ams.rpki-client.org