Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34372e302f32342d3234203d3e203538343837.roa
File:                     3230322e31302e34372e302f32342d3234203d3e203538343837.roa (raw, json)
Hash identifier:          jeUIZPV2vwOj4ZRSgEYI4FfSF1f7IbBrJ7+hf4QLOHo=
Subject key identifier:   2E:89:19:C6:26:57:14:50:0F:C4:CE:4D:15:C4:3B:4C:E7:BD:FC:73
Certificate issuer:       /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Certificate serial:       53A144F1C38B6BE609154B985253B151846FD47B
Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34372e302f32342d3234203d3e203538343837.roa
Signing time:             Thu 11 Apr 2024 10:02:02 +0000
ROA not before:           Thu 11 Apr 2024 09:57:02 +0000
ROA not after:            Thu 10 Apr 2025 10:02:02 +0000
asID:                     58487
IP address blocks:        202.10.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
                          rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a1:44:f1:c3:8b:6b:e6:09:15:4b:98:52:53:b1:51:84:6f:d4:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
        Validity
            Not Before: Apr 11 09:57:02 2024 GMT
            Not After : Apr 10 10:02:02 2025 GMT
        Subject: CN=2E8919C6265714500FC4CE4D15C43B4CE7BDFC73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:cb:70:9e:6a:47:e1:aa:07:4a:7d:7d:71:b1:
                    63:3b:a3:c8:4f:21:61:77:d0:59:34:76:40:38:25:
                    8a:06:2f:88:99:a5:99:5d:38:0a:2e:c2:86:28:39:
                    4e:e3:54:36:83:b0:8e:fb:bc:cd:79:e5:bf:4c:cf:
                    87:6a:19:7c:64:ee:e1:0a:41:ee:66:ee:c0:d6:64:
                    d3:3d:8f:90:c6:73:47:84:9f:ce:85:e0:0f:28:d0:
                    06:a6:57:18:22:a9:f0:bd:c0:c6:79:5d:46:86:38:
                    26:4a:ef:13:51:77:10:18:c2:0c:35:8f:0d:72:0b:
                    e0:3a:f2:fc:f0:eb:a8:a6:d7:fc:bf:78:6c:05:14:
                    18:b5:4e:c3:11:29:83:55:7f:45:7a:98:90:01:3b:
                    b1:87:5c:88:cb:3d:0e:86:49:d5:a3:36:95:19:96:
                    23:97:e9:87:e7:91:f6:c1:76:f6:f1:91:5e:c1:1a:
                    3b:4f:9f:fe:77:d1:58:18:45:f9:d1:e5:69:96:e0:
                    63:65:78:97:cf:2f:42:f6:2a:23:f4:86:06:77:5e:
                    75:31:54:b4:34:f0:36:2c:6d:cb:93:36:5d:8c:1b:
                    c5:9c:72:0a:4c:92:cb:b9:cf:c0:87:fc:02:0c:b4:
                    43:71:6a:18:91:89:73:3b:9b:ec:95:92:65:50:6f:
                    0a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:89:19:C6:26:57:14:50:0F:C4:CE:4D:15:C4:3B:4C:E7:BD:FC:73
            X509v3 Authority Key Identifier:
                keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34372e302f32342d3234203d3e203538343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.10.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:ff:63:05:da:9f:6f:21:e1:03:1a:fe:76:13:23:c4:99:19:
         fd:45:8d:16:69:11:d8:6f:35:69:4d:34:e9:66:57:d4:a9:4b:
         fd:27:45:43:97:ab:e6:b2:0e:c7:a8:86:e0:f3:63:e3:fa:75:
         9c:b6:e8:87:bf:00:92:5c:1e:89:07:fc:61:75:b1:5b:3d:c0:
         1a:91:63:d8:35:6b:8a:7a:fd:47:9e:4e:ca:7c:16:32:0a:8b:
         24:2b:8a:02:d6:1a:4b:c6:b7:75:05:6b:35:f5:82:f0:dd:80:
         ff:0f:c0:e1:9f:7b:35:fd:83:45:cb:d6:c3:66:1f:35:65:d6:
         d7:24:9b:88:9e:4f:68:39:ca:06:7a:ab:48:f5:4b:a0:eb:a6:
         65:fa:79:ae:ef:a4:d1:a9:5a:cb:2e:18:35:5f:a5:24:da:78:
         ca:22:0e:27:c8:5b:1e:76:96:85:c5:f1:24:51:b9:57:a4:74:
         d5:07:52:1a:da:40:c9:82:eb:a6:cd:f4:73:4e:8d:4c:ad:1e:
         a8:86:62:5a:b3:0b:18:95:69:35:79:b6:60:50:14:d0:31:86:
         ca:af:8c:bb:dd:72:63:8a:25:9c:c8:ea:a6:42:8e:ed:87:87:
         52:a0:a5:75:f8:fe:17:66:74:bf:be:59:60:94:52:68:b8:7c:
         20:51:c6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:06:15 2024 by rpki-client on console-fra.rpki-client.org