Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/3230322e35302e3230312e302f32342d3234203d3e203535363936.roa
File:                     3230322e35302e3230312e302f32342d3234203d3e203535363936.roa (raw, json)
Hash identifier:          Uo0J9xAcD1RheyZa6iPvXxzPGUZXZ2k4Ch5UihtapZE=
Subject key identifier:   8C:DC:13:37:1A:38:F0:5A:BB:4A:63:86:E1:E8:66:2A:0A:71:57:E0
Certificate issuer:       /CN=B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B
Certificate serial:       7955F20C83F6AEC460ED7EC936A7D8F1E0E0A489
Authority key identifier: B3:F1:DA:A6:77:09:A0:65:61:DC:9E:AC:5A:87:21:03:5E:EA:AB:5B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/3230322e35302e3230312e302f32342d3234203d3e203535363936.roa
Signing time:             Wed 24 Jan 2024 07:00:00 +0000
ROA not before:           Wed 24 Jan 2024 06:55:00 +0000
ROA not after:            Wed 22 Jan 2025 07:00:00 +0000
asID:                     55696
IP address blocks:        202.50.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl
                          rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 17:44:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:55:f2:0c:83:f6:ae:c4:60:ed:7e:c9:36:a7:d8:f1:e0:e0:a4:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B
        Validity
            Not Before: Jan 24 06:55:00 2024 GMT
            Not After : Jan 22 07:00:00 2025 GMT
        Subject: CN=8CDC13371A38F05ABB4A6386E1E8662A0A7157E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:01:21:f0:5f:8a:e9:3a:5d:4c:d0:44:e3:13:
                    c8:f6:88:8a:08:c8:41:02:6c:a8:55:4e:5d:51:ff:
                    19:8d:27:aa:a4:c8:09:94:6f:4c:25:9f:63:3c:39:
                    8c:b0:a0:cf:2e:85:a0:ee:7b:e6:1a:bf:67:c0:c7:
                    83:3a:5d:89:7f:6c:67:c0:96:3e:09:a1:03:99:b9:
                    3a:44:73:75:6c:d3:a1:22:da:79:96:7e:cd:4c:25:
                    78:5d:99:1d:eb:cb:b2:f0:aa:90:56:53:32:a4:4e:
                    74:11:cb:77:ca:8f:44:0a:67:03:33:b2:2c:e1:3a:
                    b8:1d:5d:e7:0c:98:d8:58:a5:a2:5b:3e:1f:5b:90:
                    b9:37:bd:0e:7f:7f:94:0d:c3:5e:3c:7b:74:5a:e3:
                    41:4d:44:34:bd:48:d5:a4:9a:cd:01:31:7c:78:68:
                    d5:f6:95:72:8d:bd:9f:db:c4:c9:2f:eb:4f:a8:74:
                    14:ea:6f:35:79:64:fe:17:2c:78:5b:93:72:42:0a:
                    ff:af:09:a0:26:d3:e3:16:f2:f1:6d:9f:fb:f6:ab:
                    92:5a:ea:0f:38:9e:01:fe:51:99:80:a0:08:d7:b1:
                    7d:9d:ab:2a:29:30:9c:a3:0c:5b:dd:e3:57:c5:1b:
                    f9:61:25:3e:df:f7:0e:16:72:66:4e:58:ba:24:56:
                    a4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:DC:13:37:1A:38:F0:5A:BB:4A:63:86:E1:E8:66:2A:0A:71:57:E0
            X509v3 Authority Key Identifier:
                keyid:B3:F1:DA:A6:77:09:A0:65:61:DC:9E:AC:5A:87:21:03:5E:EA:AB:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/3230322e35302e3230312e302f32342d3234203d3e203535363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.50.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:29:a5:c6:fd:f2:40:30:86:e8:ac:70:5e:82:ef:c3:11:d3:
         46:9e:39:94:7c:cb:f3:12:6a:a6:33:f2:b3:b8:6c:c0:6f:30:
         30:d0:c5:ce:02:f0:fc:8f:78:a2:d1:00:18:d6:96:42:af:ff:
         fa:8b:b7:56:48:4d:68:dc:71:0b:e2:51:eb:b5:e6:c2:ad:58:
         e1:51:8c:49:44:43:ed:83:c5:d8:e4:24:63:50:10:86:a3:21:
         3f:7a:a4:94:3c:df:7a:2b:c4:9e:54:40:0f:f4:13:ee:fc:08:
         53:a3:2c:5c:82:8d:16:26:fe:ee:5f:c5:a2:50:b4:15:b2:f1:
         e0:d4:c9:41:80:d7:ca:51:28:74:ca:01:28:2a:ae:b8:c3:15:
         54:ed:e6:fb:8b:4b:c2:bf:1c:48:c2:e2:61:82:7a:20:c6:c7:
         72:fb:d3:a5:54:9e:8e:aa:0a:59:e3:08:59:bd:10:b5:2c:63:
         1d:07:f5:82:67:d1:24:7e:7b:f8:66:df:4f:d9:7d:9c:7a:56:
         61:af:af:af:31:10:53:b3:1c:5f:48:a7:c0:b6:d2:eb:09:79:
         13:52:60:76:ef:2e:2d:67:b5:af:93:f2:aa:68:57:d7:72:f1:
         54:a5:68:36:f1:6c:3c:09:46:69:af:6a:37:43:6d:5e:8c:13:
         9e:00:10:0f
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUeVXyDIP2rsRg7X7JNqfY8eDgpIkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNGMURBQTY3NzA5QTA2NTYxREM5RUFDNUE4NzIxMDM1
RUVBQUI1QjAeFw0yNDAxMjQwNjU1MDBaFw0yNTAxMjIwNzAwMDBaMDMxMTAvBgNV
BAMTKDhDREMxMzM3MUEzOEYwNUFCQjRBNjM4NkUxRTg2NjJBMEE3MTU3RTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeASHwX4rpOl1M0ETjE8j2iIoI
yEECbKhVTl1R/xmNJ6qkyAmUb0wln2M8OYywoM8uhaDue+Yav2fAx4M6XYl/bGfA
lj4JoQOZuTpEc3Vs06Ei2nmWfs1MJXhdmR3ry7LwqpBWUzKkTnQRy3fKj0QKZwMz
sizhOrgdXecMmNhYpaJbPh9bkLk3vQ5/f5QNw148e3Ra40FNRDS9SNWkms0BMXx4
aNX2lXKNvZ/bxMkv60+odBTqbzV5ZP4XLHhbk3JCCv+vCaAm0+MW8vFtn/v2q5Ja
6g84ngH+UZmAoAjXsX2dqyopMJyjDFvd41fFG/lhJT7f9w4WcmZOWLokVqQBAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUjNwTNxo48Fq7SmOG4ehmKgpxV+AwHwYDVR0j
BBgwFoAUs/HapncJoGVh3J6sWochA17qq1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
Mjg4MGRlZS03YWEyLTRiZTQtYmYzNS1jZGJkMTFkNzk1MDcvMC9CM0YxREFBNjc3
MDlBMDY1NjFEQzlFQUM1QTg3MjEwMzVFRUFBQjVCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjNGMURBQTY3NzA5QTA2NTYxREM5RUFDNUE4NzIxMDM1RUVB
QUI1Qi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUyODgwZGVlLTdhYTItNGJlNC1i
ZjM1LWNkYmQxMWQ3OTUwNy8wLzMyMzAzMjJlMzUzMDJlMzIzMDMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzNTM2MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMoyyTANBgkqhkiG
9w0BAQsFAAOCAQEAiCmlxv3yQDCG6KxwXoLvwxHTRp45lHzL8xJqpjPys7hswG8w
MNDFzgLw/I94otEAGNaWQq//+ou3VkhNaNxxC+JR67Xmwq1Y4VGMSURD7YPF2OQk
Y1AQhqMhP3qklDzfeivEnlRAD/QT7vwIU6MsXIKNFib+7l/FolC0FbLx4NTJQYDX
ylEodMoBKCquuMMVVO3m+4tLwr8cSMLiYYJ6IMbHcvvTpVSejqoKWeMIWb0QtSxj
HQf1gmfRJH57+GbfT9l9nHpWYa+vrzEQU7McX0inwLbS6wl5E1Jgdu8uLWe1r5Py
qmhX13LxVKVoNvFsPAlGaa9qN0NtXowTngAQDw==
-----END CERTIFICATE-----
Generated at Mon Nov 25 15:26:44 2024 by rpki-client on console-fra.rpki-client.org