Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/3230322e35322e35382e302f32332d3233203d3e203436303538.roa
File:                     3230322e35322e35382e302f32332d3233203d3e203436303538.roa (raw, json)
Hash identifier:          wERTTK6PUlbkpsEqvjEF84VPr/7gJTPS8S/scf4WQXU=
Subject key identifier:   36:C6:8E:28:DE:96:37:30:94:CF:6F:7A:B6:8D:ED:CC:3B:57:C7:BC
Certificate issuer:       /CN=2E55483B906244D2DA357F014F9AFA606D95C345
Certificate serial:       7A508D2C00B53383111B92C1DBDD5D16202A41C5
Authority key identifier: 2E:55:48:3B:90:62:44:D2:DA:35:7F:01:4F:9A:FA:60:6D:95:C3:45
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E55483B906244D2DA357F014F9AFA606D95C345.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/3230322e35322e35382e302f32332d3233203d3e203436303538.roa
Signing time:             Sun 19 May 2024 07:35:15 +0000
ROA not before:           Sun 19 May 2024 07:30:15 +0000
ROA not after:            Sun 18 May 2025 07:35:15 +0000
asID:                     46058
IP address blocks:        202.52.58.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.crl
                          rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E55483B906244D2DA357F014F9AFA606D95C345.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:50:8d:2c:00:b5:33:83:11:1b:92:c1:db:dd:5d:16:20:2a:41:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E55483B906244D2DA357F014F9AFA606D95C345
        Validity
            Not Before: May 19 07:30:15 2024 GMT
            Not After : May 18 07:35:15 2025 GMT
        Subject: CN=36C68E28DE96373094CF6F7AB68DEDCC3B57C7BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4c:b7:2f:cf:5e:97:7e:b1:93:e6:2a:d8:b8:
                    44:c3:3e:e0:bd:17:70:46:94:f4:0a:74:01:40:f7:
                    1c:16:6c:2c:54:09:4c:70:04:48:c0:bb:30:f7:e7:
                    00:34:f6:c9:50:f5:ae:82:2e:40:3c:d9:9b:b2:60:
                    55:af:3b:c4:85:99:a8:71:53:3a:61:84:5e:14:0b:
                    4a:22:27:31:10:45:69:71:77:16:3c:05:64:a9:8b:
                    85:6a:10:8f:af:d0:b0:5d:6f:75:7e:f5:ca:9a:fc:
                    56:18:4c:91:da:62:57:8b:f1:49:07:47:7d:66:4d:
                    0f:47:8e:48:1b:27:88:85:1a:ea:1d:40:e9:77:a2:
                    fd:b6:1b:a4:d4:94:99:11:10:7a:f2:d4:0d:53:cf:
                    ac:c5:ab:e1:6b:7d:69:0a:e1:f4:ed:33:3a:35:3a:
                    20:af:05:99:41:07:99:2d:00:29:f2:d2:ee:78:d0:
                    43:24:92:9a:e6:32:3d:9f:1d:1e:68:4c:90:2a:67:
                    fc:dd:5c:d1:f3:1b:45:e8:e3:28:d7:62:cc:d8:47:
                    e8:75:cb:fe:d1:09:9e:fc:09:25:de:d8:1e:40:2c:
                    bc:08:d8:43:84:f8:99:0b:09:bc:c2:96:f2:d9:0f:
                    ac:07:cd:85:ae:19:a6:ef:39:48:1b:02:28:44:9b:
                    ba:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C6:8E:28:DE:96:37:30:94:CF:6F:7A:B6:8D:ED:CC:3B:57:C7:BC
            X509v3 Authority Key Identifier:
                keyid:2E:55:48:3B:90:62:44:D2:DA:35:7F:01:4F:9A:FA:60:6D:95:C3:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E55483B906244D2DA357F014F9AFA606D95C345.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/3230322e35322e35382e302f32332d3233203d3e203436303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.52.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:a0:0f:07:7c:a8:f9:6c:40:a8:3e:56:29:cc:00:bb:20:fd:
         a8:3c:eb:c1:d1:3d:9e:9f:53:77:15:34:8a:55:b6:86:a9:30:
         a0:43:97:bd:39:54:77:df:8c:4e:4e:eb:e9:4c:59:22:df:05:
         d0:61:3a:27:88:70:5f:94:b7:01:36:77:5e:36:5d:d5:43:ce:
         b3:6f:f3:ac:c6:fe:d8:b0:16:80:c3:77:03:a6:b1:57:82:73:
         8f:98:5f:d9:15:af:be:71:1e:16:11:94:e5:e8:ca:4c:b0:cb:
         41:cd:38:98:f8:81:7c:f8:1b:45:a0:92:6c:81:6d:8c:a9:a9:
         c1:32:62:24:49:c0:b7:23:11:d6:bb:a2:5a:2e:80:61:ae:28:
         c8:e6:a9:4c:ba:97:5d:a5:ca:99:75:35:13:d3:c0:6e:3b:5b:
         c3:6f:4e:68:ef:e8:c8:d8:5e:df:e9:86:2f:51:9c:dc:ca:4e:
         4f:2b:52:10:62:3a:1a:f3:ae:3e:ee:67:82:cc:0d:4e:f8:98:
         11:15:e1:2b:1f:ab:7f:85:ce:5c:cd:cc:8b:42:d5:ae:d3:60:
         4f:a8:c4:ea:ba:77:b4:07:8f:23:16:a0:e4:bb:46:eb:56:c7:
         77:dd:43:0f:2f:74:7e:c4:25:c9:5c:9c:4a:07:01:79:bb:e2:
         ac:87:ed:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:14 2024 by rpki-client on console-ams.rpki-client.org