Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35392e302f32342d3234203d3e203330383630.roa
File:                     3230322e35312e35392e302f32342d3234203d3e203330383630.roa (raw, json)
Hash identifier:          aZ1nkOt0ZwL5bWsxMWDTHMMRjscg2q9LS9hs3Z383Ew=
Subject key identifier:   2E:4E:EB:4C:C4:DE:A4:F0:44:01:41:A4:BD:31:B2:E3:84:82:C1:52
Certificate issuer:       /CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
Certificate serial:       03A78A0ECF9463ADC8ECD409E66B1EBF43C32703
Authority key identifier: 3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35392e302f32342d3234203d3e203330383630.roa
Signing time:             Mon 23 Dec 2024 13:53:16 +0000
ROA not before:           Mon 23 Dec 2024 13:48:16 +0000
ROA not after:            Mon 22 Dec 2025 13:53:16 +0000
asID:                     30860
IP address blocks:        202.51.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl
                          rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Apr 2025 03:19:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:a7:8a:0e:cf:94:63:ad:c8:ec:d4:09:e6:6b:1e:bf:43:c3:27:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
        Validity
            Not Before: Dec 23 13:48:16 2024 GMT
            Not After : Dec 22 13:53:16 2025 GMT
        Subject: CN=2E4EEB4CC4DEA4F0440141A4BD31B2E38482C152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:94:b8:40:6c:b9:92:1e:e5:35:78:49:bb:a2:
                    e2:95:06:0a:8b:38:57:c7:a9:04:e5:ce:13:a6:42:
                    a0:20:c6:49:89:52:c6:67:f5:00:0a:fa:5b:3c:4c:
                    9f:bd:28:c1:8d:3b:23:45:5a:d8:de:90:5b:2c:4d:
                    e3:91:5d:ac:0a:f4:8b:be:99:93:b4:0a:54:6b:fc:
                    8d:d6:4f:d1:6c:72:f2:23:87:c5:c3:1e:eb:92:bf:
                    df:d7:97:db:53:5f:29:a6:71:2c:f5:9c:86:be:84:
                    a5:22:db:43:3c:b0:e6:0f:9b:8b:d8:57:6d:d0:ef:
                    7f:3d:53:d0:35:19:35:3b:ec:32:5d:eb:c9:34:4c:
                    da:f8:34:56:c7:2a:d8:90:90:98:cf:b2:e0:f7:00:
                    47:35:00:e4:eb:99:e7:0f:c1:6b:11:fe:00:64:b9:
                    1a:2a:68:60:c2:fd:b6:62:a3:2b:fe:77:4b:e7:b1:
                    60:80:52:39:55:91:47:73:d1:0b:2a:bd:39:7f:82:
                    58:d9:3e:ef:dd:34:94:f9:4d:c1:4f:c3:96:47:68:
                    c8:7f:04:32:dd:81:7f:80:7c:57:67:01:d4:27:b2:
                    d3:47:eb:54:42:c8:9c:8f:46:89:9c:e9:ba:1f:18:
                    e7:23:ca:66:83:3c:8a:8c:b9:e4:d4:04:37:36:e6:
                    2f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:4E:EB:4C:C4:DE:A4:F0:44:01:41:A4:BD:31:B2:E3:84:82:C1:52
            X509v3 Authority Key Identifier:
                keyid:3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35392e302f32342d3234203d3e203330383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.51.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:99:07:d3:df:1a:93:b2:e3:80:f1:c5:ef:ca:2c:79:5b:7b:
         98:79:e2:38:e6:66:50:bb:d9:0c:90:53:f5:14:cb:10:fe:50:
         b6:a5:8a:57:b6:55:ca:e3:4e:00:11:5c:21:bd:01:5f:c8:39:
         57:b5:0c:79:07:f4:2a:87:c5:fa:58:7c:36:ec:93:34:0f:d0:
         25:c4:91:3c:eb:68:4c:48:cf:d6:47:bf:98:69:3a:6f:7b:cf:
         7b:d7:b5:84:3c:b1:3c:ff:a4:d8:93:52:a5:c9:3c:2b:d9:a8:
         79:d8:a6:af:35:28:48:d1:17:91:aa:5e:ed:86:8c:dd:30:2d:
         36:f1:b0:64:7b:99:63:b0:0b:55:74:e2:4f:b0:8b:5e:48:af:
         a3:bc:c3:80:3c:5f:df:31:9a:61:b4:b0:96:1f:f7:ac:3a:db:
         13:b0:79:71:e3:23:ce:1c:09:9e:ba:f5:a7:b9:89:5c:b5:84:
         46:a1:63:f4:d8:bf:fd:c2:bd:6c:63:c3:a1:76:9f:ce:e3:78:
         6f:e3:85:31:39:34:04:ef:7c:6e:33:1b:bf:c7:b0:f4:86:b3:
         2e:09:02:c4:cc:2e:e9:bc:f8:8d:5f:96:a4:3e:fc:00:a0:23:
         a6:ef:18:7d:7b:7c:bd:e5:43:80:55:27:a5:7b:0d:97:f6:81:
         ea:39:d4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:57:07 2025 by rpki-client