Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/3230322e35302e3230302e302f32342d3234203d3e203535363936.roa
File:                     3230322e35302e3230302e302f32342d3234203d3e203535363936.roa (raw, json)
Hash identifier:          xUr7Asx3S1wSVs89gOq24W2GpUG+Cd1JwPvLUZvCl5c=
Subject key identifier:   2F:24:B2:13:A7:CC:E3:0B:AD:40:65:66:E0:2C:61:74:5A:4D:38:8B
Certificate issuer:       /CN=B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B
Certificate serial:       7814F3E91C5A75240EFD1A40E797C4634C1396BE
Authority key identifier: B3:F1:DA:A6:77:09:A0:65:61:DC:9E:AC:5A:87:21:03:5E:EA:AB:5B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/3230322e35302e3230302e302f32342d3234203d3e203535363936.roa
Signing time:             Wed 24 Jan 2024 07:00:00 +0000
ROA not before:           Wed 24 Jan 2024 06:55:00 +0000
ROA not after:            Wed 22 Jan 2025 07:00:00 +0000
asID:                     55696
IP address blocks:        202.50.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl
                          rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 17:44:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:14:f3:e9:1c:5a:75:24:0e:fd:1a:40:e7:97:c4:63:4c:13:96:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B
        Validity
            Not Before: Jan 24 06:55:00 2024 GMT
            Not After : Jan 22 07:00:00 2025 GMT
        Subject: CN=2F24B213A7CCE30BAD406566E02C61745A4D388B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bd:7d:b9:4b:dc:87:f1:3e:a4:79:3b:5e:67:
                    1e:e1:76:76:4b:31:bc:0a:d8:47:e1:44:70:b0:b6:
                    56:ee:78:a5:f2:f2:6d:17:5b:07:59:53:b0:8c:1c:
                    c9:2e:f7:27:7d:06:99:39:a8:e9:e8:ae:1c:f7:22:
                    82:4f:89:83:ff:07:4d:a8:96:b6:f9:91:09:0e:65:
                    a4:dd:45:ea:08:07:0d:f6:82:43:5d:67:ff:31:6b:
                    dd:b0:23:d7:a1:ec:bd:fb:52:dd:ff:e4:19:3e:f0:
                    fc:fd:4a:b8:54:b8:94:89:7f:51:3a:30:e6:8a:80:
                    ff:cf:06:bb:f8:66:95:f6:6c:8a:ea:e9:d5:9c:40:
                    59:32:17:a5:4f:e4:01:b7:33:2b:16:d4:34:b1:41:
                    48:9c:3d:ad:10:7b:76:7d:47:84:10:87:9b:db:61:
                    18:a4:56:ac:f4:23:97:64:20:0e:d9:78:b2:6d:94:
                    d2:0e:aa:de:08:84:dd:11:2a:7a:eb:9e:38:bd:5c:
                    3d:4c:58:b5:47:99:40:39:b5:b6:3b:6f:65:74:28:
                    7f:16:47:ba:13:32:15:f5:1d:b0:68:a7:a2:53:e2:
                    53:ad:f0:af:4c:1d:62:2d:02:07:aa:5f:55:43:77:
                    03:eb:00:00:41:a3:b0:51:ac:b7:e1:4a:29:d0:d2:
                    8f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:24:B2:13:A7:CC:E3:0B:AD:40:65:66:E0:2C:61:74:5A:4D:38:8B
            X509v3 Authority Key Identifier:
                keyid:B3:F1:DA:A6:77:09:A0:65:61:DC:9E:AC:5A:87:21:03:5E:EA:AB:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/3230322e35302e3230302e302f32342d3234203d3e203535363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.50.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:b1:25:ee:ca:93:f2:7a:29:ac:33:92:48:20:c5:b9:4c:1a:
         d9:9d:55:2f:14:b7:84:ba:09:f9:57:03:0a:b9:c8:e9:a9:fd:
         4f:01:4c:bd:c7:6c:ee:1c:4d:bc:20:13:d6:84:64:10:b4:b3:
         a3:4b:4c:28:c2:c4:35:e6:87:56:88:7e:74:12:39:aa:5e:d1:
         6e:83:8a:cb:27:dc:78:b7:f4:5a:0a:67:fd:46:02:e9:87:a1:
         28:93:ab:83:8b:2f:18:1c:23:ee:a7:f9:db:f5:83:b1:3a:30:
         7b:59:be:27:1f:05:69:9e:ef:ab:9c:20:f9:a8:e5:43:43:3f:
         13:08:98:3c:7f:9c:37:b8:8c:6f:fd:e3:cb:eb:4c:5d:d9:85:
         92:96:31:ce:d5:22:c8:43:a4:16:b5:e6:7e:0d:ce:f7:b1:0d:
         27:78:95:67:43:1c:91:0d:ac:3f:95:27:b5:f7:f0:90:28:84:
         21:a5:9a:63:4e:3e:0a:85:29:e4:0b:6c:03:b0:43:05:83:d1:
         16:2d:c8:c9:8f:66:3e:8c:1d:2d:e5:b1:74:17:db:d2:84:d9:
         ae:26:c0:2f:00:4b:fe:a0:29:13:4f:54:65:5d:b7:c8:02:70:
         ba:55:79:83:8b:ab:a1:4f:77:b9:f6:aa:92:fe:44:9c:15:9c:
         2b:15:18:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:49:31 2024 by rpki-client on console-ams.rpki-client.org