Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/3230322e35312e31362e302f32332d3234203d3e203233393530.roa
File:                     3230322e35312e31362e302f32332d3234203d3e203233393530.roa (raw, json)
Hash identifier:          LFSshHohvujyC4t8MnZGDLNz59k8RF0Gd5qPFRAxfIs=
Subject key identifier:   52:D6:F5:E6:60:C8:43:9A:B9:FE:C9:22:A8:DB:4F:4C:92:0D:D0:D3
Certificate issuer:       /CN=9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0
Certificate serial:       08AB371B86E6EDFF9213FB3D39738453032E8451
Authority key identifier: 9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/3230322e35312e31362e302f32332d3234203d3e203233393530.roa
Signing time:             Thu 07 Dec 2023 15:00:00 +0000
ROA not before:           Thu 07 Dec 2023 14:55:00 +0000
ROA not after:            Thu 05 Dec 2024 15:00:00 +0000
asID:                     23950
IP address blocks:        202.51.16.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl
                          rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 08:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ab:37:1b:86:e6:ed:ff:92:13:fb:3d:39:73:84:53:03:2e:84:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0
        Validity
            Not Before: Dec  7 14:55:00 2023 GMT
            Not After : Dec  5 15:00:00 2024 GMT
        Subject: CN=52D6F5E660C8439AB9FEC922A8DB4F4C920DD0D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:77:1e:7f:e9:d5:a5:58:3f:f3:ca:fe:25:12:
                    9a:23:a6:70:63:df:b7:65:4e:20:55:97:7d:ce:68:
                    1d:6c:ec:37:65:58:ba:56:59:39:af:48:47:c2:48:
                    43:c8:23:95:61:c0:fb:74:f9:40:da:76:89:ee:c6:
                    77:82:7d:d8:c8:02:a8:d8:af:4f:d6:04:79:e8:d0:
                    b3:2b:c5:0a:16:44:84:55:aa:35:53:26:bc:cc:9b:
                    1c:03:c1:24:52:b9:cd:3b:c0:85:c9:ce:60:c7:cf:
                    e3:9c:74:db:92:f9:25:27:ac:04:09:6c:c2:d2:22:
                    27:12:9d:9a:1f:23:bf:be:34:50:e1:9f:3a:96:80:
                    02:fd:4d:c8:29:dc:0e:e9:a8:98:01:40:70:57:93:
                    b7:a2:f7:68:96:09:26:92:eb:f3:c1:90:ad:cf:15:
                    20:28:0c:c2:c9:6e:76:05:f3:c0:7a:86:93:51:74:
                    d4:26:38:6c:39:57:a5:a7:e3:90:bd:de:f5:9f:e8:
                    87:15:30:31:a5:81:a1:62:1c:f3:a2:36:10:80:15:
                    52:e6:57:c9:a5:63:9b:18:60:50:e5:1c:94:b8:73:
                    d8:51:06:79:1c:c6:16:2f:b5:00:bb:5a:da:74:4e:
                    72:3f:89:00:41:7b:38:37:44:8c:57:82:c9:b5:58:
                    78:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D6:F5:E6:60:C8:43:9A:B9:FE:C9:22:A8:DB:4F:4C:92:0D:D0:D3
            X509v3 Authority Key Identifier:
                keyid:9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/3230322e35312e31362e302f32332d3234203d3e203233393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.51.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:53:dc:3a:1f:d3:e1:4c:f6:6d:7a:8b:9d:e3:72:68:61:fd:
         d2:55:b1:6f:93:4f:da:57:74:4e:b2:78:47:5f:c1:a0:78:dc:
         00:87:6e:16:fa:54:ca:2e:f0:27:b6:a0:be:97:51:8d:5c:dd:
         cc:95:f2:88:3f:d9:08:46:06:37:65:8d:03:ca:f7:f9:2c:82:
         3c:1c:98:3c:dd:9e:bf:a2:02:aa:0a:62:bc:d3:ea:00:e2:f7:
         4a:0d:31:26:65:01:a8:cc:52:c5:3b:d2:c5:61:8c:2b:1f:c1:
         da:ce:ce:8f:99:d4:50:33:70:08:ad:9b:2d:61:7e:8a:06:d2:
         56:d2:8d:33:44:23:7c:cf:68:c1:af:22:fb:b7:4f:23:87:2e:
         30:02:14:36:37:ac:5a:c0:46:91:83:57:45:16:85:aa:fc:27:
         1e:8b:cb:2a:ff:2a:43:6b:c4:01:9a:aa:e3:66:5d:a9:03:30:
         12:ef:16:a2:5e:ce:e1:4a:0c:1c:1a:78:86:a1:6e:66:a5:33:
         ca:7b:d4:f1:0d:ef:90:10:0d:53:96:bb:2a:f4:c1:e1:86:7c:
         e2:fa:ac:80:52:21:3d:f9:bd:96:55:0f:71:46:68:06:a3:d8:
         88:60:45:cd:e1:90:6f:6f:32:97:9b:8e:cd:46:95:7a:4a:b1:
         16:14:c9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 14:42:32 2024 by rpki-client on console-ams.rpki-client.org