Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36302e302f32332d3233203d3e20323031333431.roa
File:                     3230322e35312e36302e302f32332d3233203d3e20323031333431.roa (raw, json)
Hash identifier:          N1py/UmfH5qu4YQZhj2saYLPpWLMYrpOtfBIgfSfLLE=
Subject key identifier:   4D:45:74:62:92:18:93:87:74:6D:FA:D5:58:96:8B:01:B9:4D:F1:CC
Certificate issuer:       /CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
Certificate serial:       3FDB6979A4CF748BF72136EA6E16977406214F37
Authority key identifier: 3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36302e302f32332d3233203d3e20323031333431.roa
Signing time:             Wed 24 Apr 2024 06:00:02 +0000
ROA not before:           Wed 24 Apr 2024 05:55:02 +0000
ROA not after:            Wed 23 Apr 2025 06:00:02 +0000
asID:                     201341
IP address blocks:        202.51.60.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl
                          rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:db:69:79:a4:cf:74:8b:f7:21:36:ea:6e:16:97:74:06:21:4f:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
        Validity
            Not Before: Apr 24 05:55:02 2024 GMT
            Not After : Apr 23 06:00:02 2025 GMT
        Subject: CN=4D45746292189387746DFAD558968B01B94DF1CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:00:a3:c5:be:b7:68:26:6c:81:eb:14:0c:cb:
                    dc:bc:d3:e3:8b:98:15:3d:a1:9f:64:08:46:4c:e4:
                    4b:1b:c3:4d:b6:c7:11:28:e6:d9:2b:bf:62:16:b3:
                    cd:98:2e:e4:35:9f:43:b2:76:ec:97:a7:9c:02:13:
                    83:40:cf:10:5f:ab:87:61:38:e8:f7:cc:aa:58:47:
                    c3:ca:a6:3f:66:bd:13:c1:49:d2:aa:31:00:74:88:
                    91:b1:74:54:5c:20:33:ac:a9:78:d7:3c:d5:47:c1:
                    42:14:45:8b:b3:58:a6:b8:0a:26:eb:c1:8f:c0:9b:
                    98:40:10:0c:89:d1:17:c6:38:55:71:9e:08:73:50:
                    d5:23:7b:67:33:ae:e0:ef:d8:71:2e:16:c1:09:29:
                    a6:2a:28:40:fc:cf:dd:6c:72:66:88:f9:a6:81:39:
                    d2:7d:74:b9:11:bb:e4:2f:fc:a9:d0:2d:64:51:a9:
                    6d:d7:3f:fd:ae:8b:f2:da:68:ff:04:54:22:85:88:
                    42:fb:a7:89:0d:fb:d6:20:55:84:b6:34:cf:07:ad:
                    67:71:0d:19:5f:ba:27:f7:92:07:f6:18:91:3a:9d:
                    d3:71:35:ba:f2:01:a2:fb:b8:a1:17:5d:95:8b:4f:
                    aa:99:70:a7:fb:11:23:3a:bc:01:a9:f9:09:9c:2b:
                    3f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:45:74:62:92:18:93:87:74:6D:FA:D5:58:96:8B:01:B9:4D:F1:CC
            X509v3 Authority Key Identifier:
                keyid:3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36302e302f32332d3233203d3e20323031333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.51.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:19:1d:8a:5d:ac:c3:71:15:09:6f:8b:59:b8:1c:0a:b1:1f:
         94:5f:d3:38:38:fc:f2:80:ad:e8:db:55:b1:ae:a8:6f:0b:b8:
         e7:44:a4:fb:7d:96:4a:08:cb:0e:38:58:c9:b3:c1:be:33:38:
         da:14:4b:8f:96:46:55:4a:a2:aa:12:43:94:88:4e:dd:c6:50:
         49:3e:f0:73:f6:87:99:2a:8b:2d:9f:01:04:99:ca:09:10:d6:
         6d:ff:91:af:7c:44:a0:28:a9:31:0e:11:7a:9e:f0:7f:68:3e:
         22:01:d6:81:20:aa:fe:42:b1:d3:5c:8b:70:16:d2:92:3a:d9:
         46:6a:13:89:c6:f2:5d:f8:75:d2:b9:52:fd:9b:7e:0c:1d:92:
         98:72:65:6f:eb:a6:20:8f:24:2c:72:19:9d:25:e6:90:f0:4b:
         8f:1d:c8:11:95:e3:cc:b9:f3:26:d3:28:49:a7:16:fa:4c:ef:
         7b:0a:26:a9:d1:aa:af:be:5f:53:fa:43:75:5e:6c:27:2b:27:
         6d:bb:6e:3b:6c:db:35:06:1f:87:b1:67:e1:c9:92:3f:bb:c7:
         13:b9:a4:15:c2:05:9c:94:3a:e9:86:7c:47:e1:45:18:a7:24:
         4c:77:1c:1e:2d:ac:0e:78:00:1f:2d:56:48:78:8a:38:ef:84:
         4b:cf:78:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 06:43:22 2024 by rpki-client on console-fra.rpki-client.org