Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/3230322e35322e35392e302f32342d3234203d3e203436303538.roa
File:                     3230322e35322e35392e302f32342d3234203d3e203436303538.roa (raw, json)
Hash identifier:          es4te2vVxb4JEToUjIvu0tqHYlVICPMUEJI9fzPo4mo=
Subject key identifier:   55:81:EE:4D:9E:BD:6D:B1:7F:FB:CD:DC:0C:DB:40:CE:59:F4:64:94
Certificate issuer:       /CN=2E55483B906244D2DA357F014F9AFA606D95C345
Certificate serial:       7FBA8A84475E3AA52EE7487687C6730C53E217C0
Authority key identifier: 2E:55:48:3B:90:62:44:D2:DA:35:7F:01:4F:9A:FA:60:6D:95:C3:45
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E55483B906244D2DA357F014F9AFA606D95C345.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/3230322e35322e35392e302f32342d3234203d3e203436303538.roa
Signing time:             Sat 18 May 2024 06:08:09 +0000
ROA not before:           Sat 18 May 2024 06:03:09 +0000
ROA not after:            Sat 17 May 2025 06:08:09 +0000
asID:                     46058
IP address blocks:        202.52.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.crl
                          rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E55483B906244D2DA357F014F9AFA606D95C345.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:ba:8a:84:47:5e:3a:a5:2e:e7:48:76:87:c6:73:0c:53:e2:17:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E55483B906244D2DA357F014F9AFA606D95C345
        Validity
            Not Before: May 18 06:03:09 2024 GMT
            Not After : May 17 06:08:09 2025 GMT
        Subject: CN=5581EE4D9EBD6DB17FFBCDDC0CDB40CE59F46494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:aa:db:b8:4c:a2:39:b3:46:fa:d8:34:5a:3f:
                    6c:c4:49:cf:6f:4d:5e:a4:20:44:9c:40:08:1c:92:
                    4c:83:d3:22:7f:36:f8:a4:bb:ab:d7:7a:70:2d:a0:
                    af:3d:ee:65:7c:84:c1:c5:f8:c0:c8:cc:5f:85:3b:
                    d7:d8:3b:4b:5f:cc:55:68:a1:60:ce:02:57:44:9e:
                    bf:ab:26:f7:68:bd:82:e7:8e:7f:8e:bd:1b:db:28:
                    93:27:b4:f2:67:40:6a:dc:59:64:15:c1:7e:10:b8:
                    15:df:7a:83:1d:b2:e3:6c:29:70:30:6f:27:05:76:
                    c3:ce:b2:7e:75:44:df:53:01:a5:dd:bd:f8:f4:f5:
                    d1:f7:89:21:d3:8f:6f:c1:8c:86:0c:fd:db:86:a0:
                    d3:d6:8f:6d:52:6f:73:b0:a1:b7:92:b7:6f:88:c6:
                    0e:13:18:43:9d:4e:b9:96:b4:3d:9f:31:08:cf:a9:
                    49:f4:3a:fd:fb:18:60:b0:0c:19:14:d3:74:a8:1f:
                    53:54:08:24:1a:94:ca:ed:21:36:e5:18:39:c7:a1:
                    ee:93:44:4e:4e:6c:06:de:7a:50:3d:3a:69:91:c3:
                    89:1f:64:07:55:4f:15:29:cc:0a:86:7c:5f:78:19:
                    db:d4:81:15:cc:6a:2d:bc:15:10:73:37:b7:58:dc:
                    0e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:81:EE:4D:9E:BD:6D:B1:7F:FB:CD:DC:0C:DB:40:CE:59:F4:64:94
            X509v3 Authority Key Identifier:
                keyid:2E:55:48:3B:90:62:44:D2:DA:35:7F:01:4F:9A:FA:60:6D:95:C3:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E55483B906244D2DA357F014F9AFA606D95C345.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/3230322e35322e35392e302f32342d3234203d3e203436303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.52.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:51:97:d4:d4:07:6e:ae:a1:29:92:91:72:fb:ea:90:bb:a8:
         c2:fd:46:5a:17:35:ec:a6:db:0d:46:ad:58:69:90:b4:b2:ac:
         00:17:4d:cd:7c:cd:4a:8e:1c:bf:d1:1b:51:b0:86:b9:4e:5e:
         be:0f:bf:a9:74:20:93:d5:88:07:a4:93:ec:18:5c:44:df:db:
         f9:13:57:e7:06:48:41:a0:66:33:41:7f:76:06:72:15:0d:ca:
         bb:f0:89:81:37:24:f5:14:1a:0f:93:8d:af:b2:8c:9b:03:94:
         7c:c8:66:d5:98:1d:f0:35:6c:b4:99:a3:70:e8:82:3f:1c:e4:
         a4:13:96:15:ca:70:f4:5f:c9:00:3d:e3:aa:2b:13:28:ee:f8:
         66:f7:61:ea:ae:0e:0d:fc:73:69:3b:76:e9:58:49:11:0b:2b:
         27:a3:1f:b9:64:29:fe:69:08:f6:fe:cf:15:72:4e:b6:17:b6:
         30:d5:af:b9:e5:d9:72:c5:9f:0d:31:d6:62:59:df:10:bc:1d:
         7b:ef:7d:2b:43:48:e3:96:63:2e:fe:33:ae:49:90:30:69:bd:
         dc:11:e1:2b:8e:7a:f7:f4:14:ae:ba:a1:bd:99:02:66:bc:5f:
         ce:d3:bc:14:80:55:7a:16:35:75:ab:18:1a:d7:85:33:c4:57:
         56:00:6f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:46:15 2024 by rpki-client on console-fra.rpki-client.org