Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36312e302f32342d3234203d3e20323031333431.roa
File:                     3230322e35312e36312e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier:          bYBSmiXHENZ5+D4aLwRMCseg/Jz198HvpjZSlRQRk/A=
Subject key identifier:   C8:82:30:6A:53:3A:2E:37:83:5B:CA:FE:89:94:7F:33:4F:3D:7A:59
Certificate issuer:       /CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
Certificate serial:       554BF8010327AE25395E4C73A66055EADAD998F2
Authority key identifier: 3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36312e302f32342d3234203d3e20323031333431.roa
Signing time:             Wed 24 Apr 2024 06:00:02 +0000
ROA not before:           Wed 24 Apr 2024 05:55:02 +0000
ROA not after:            Wed 23 Apr 2025 06:00:02 +0000
asID:                     201341
IP address blocks:        202.51.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl
                          rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:4b:f8:01:03:27:ae:25:39:5e:4c:73:a6:60:55:ea:da:d9:98:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
        Validity
            Not Before: Apr 24 05:55:02 2024 GMT
            Not After : Apr 23 06:00:02 2025 GMT
        Subject: CN=C882306A533A2E37835BCAFE89947F334F3D7A59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:91:cc:19:7a:f3:aa:02:6b:de:5f:74:ab:60:
                    a9:3c:55:2c:4c:6a:f0:5e:b5:93:d1:2e:f3:22:3d:
                    e2:eb:dc:02:a3:74:73:de:a1:ad:f2:92:b9:65:fe:
                    f2:ff:5e:db:4e:c1:0c:b8:ab:e6:58:cd:7d:b1:a3:
                    79:ae:aa:49:91:1d:75:21:60:e1:ca:c3:93:87:ef:
                    33:51:de:d0:46:ec:12:aa:b4:0c:72:0f:aa:b8:3d:
                    5c:5a:b1:bb:bd:4d:ef:24:d0:d1:a4:2e:57:e2:56:
                    c1:1b:37:ed:ea:0e:22:3b:76:82:86:86:60:c8:d6:
                    a1:cd:82:6a:5e:79:f4:01:03:34:fa:8a:f9:71:b1:
                    92:39:8c:46:72:7a:bf:8c:17:c7:95:62:13:af:e8:
                    35:5f:a9:6d:78:f2:d8:89:96:a8:fa:34:52:40:d5:
                    dc:9d:e4:66:59:ef:29:83:5f:3e:5d:00:6c:f4:ea:
                    06:f1:f0:1c:da:6b:61:dd:e7:40:be:81:8e:2f:d6:
                    ce:f9:66:62:28:f4:66:d5:4a:d6:23:3e:e8:de:9b:
                    27:d3:07:ed:59:70:7c:a9:4c:e2:51:e9:ab:b0:18:
                    7b:e5:58:8e:f0:ca:ec:aa:46:0f:e3:17:40:6c:40:
                    eb:aa:05:75:0c:79:1f:ea:be:c4:a5:74:ac:b0:aa:
                    a6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:82:30:6A:53:3A:2E:37:83:5B:CA:FE:89:94:7F:33:4F:3D:7A:59
            X509v3 Authority Key Identifier:
                keyid:3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36312e302f32342d3234203d3e20323031333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.51.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:8c:94:cb:f5:da:56:ac:78:4e:86:df:c8:4d:12:9c:fa:1a:
         e1:c4:8a:30:56:cf:2f:dd:61:ff:8d:6a:f6:6c:33:5a:64:03:
         c3:27:c0:b1:3e:18:95:0c:15:63:2e:8f:f1:e5:a8:94:4f:6d:
         16:f9:9b:6c:2d:8d:ba:6c:33:d5:77:31:83:6c:6e:7a:b3:26:
         03:ae:37:3b:cb:f2:b3:96:9d:a7:df:55:d6:83:62:55:0a:74:
         88:bc:5e:65:49:fa:15:a4:c7:5f:4b:c1:d0:7b:4b:d7:9a:71:
         08:fb:47:0d:f7:63:c7:d4:16:7c:54:8b:50:c2:ec:cb:b7:e1:
         9d:c4:db:ee:d9:95:30:f3:fe:d7:65:f9:d6:02:6c:75:3b:41:
         79:49:28:31:4e:5f:c4:93:6d:e6:d8:4d:50:87:59:f1:fd:be:
         d2:43:e2:bc:4c:dc:11:11:08:de:54:63:36:52:9d:3f:05:6a:
         56:78:46:44:73:62:6d:56:b5:6b:71:0f:4b:ce:9a:3e:d3:7a:
         88:e9:e7:6d:2a:39:14:51:0f:a9:67:47:47:06:28:c1:d0:0f:
         54:44:09:42:cd:d0:82:d9:9c:e8:b8:12:0d:ba:ff:07:47:db:
         97:76:51:8f:f1:dc:16:cd:65:92:5d:cc:02:af:68:10:fb:00:
         bf:03:e3:59
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUVUv4AQMnriU5XkxzpmBV6trZmPIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0U2QjVBRjIzMUZEODA5RkJDOEU1OTkyMTVCMTREMzU3
QUM2NkE4QzAeFw0yNDA0MjQwNTU1MDJaFw0yNTA0MjMwNjAwMDJaMDMxMTAvBgNV
BAMTKEM4ODIzMDZBNTMzQTJFMzc4MzVCQ0FGRTg5OTQ3RjMzNEYzRDdBNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhkcwZevOqAmveX3SrYKk8VSxM
avBetZPRLvMiPeLr3AKjdHPeoa3ykrll/vL/XttOwQy4q+ZYzX2xo3muqkmRHXUh
YOHKw5OH7zNR3tBG7BKqtAxyD6q4PVxasbu9Te8k0NGkLlfiVsEbN+3qDiI7doKG
hmDI1qHNgmpeefQBAzT6ivlxsZI5jEZyer+MF8eVYhOv6DVfqW148tiJlqj6NFJA
1dyd5GZZ7ymDXz5dAGz06gbx8Bzaa2Hd50C+gY4v1s75ZmIo9GbVStYjPujemyfT
B+1ZcHypTOJR6auwGHvlWI7wyuyqRg/jF0BsQOuqBXUMeR/qvsSldKywqqbnAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUyIIwalM6LjeDW8r+iZR/M089elkwHwYDVR0j
BBgwFoAUPmta8jH9gJ+8jlmSFbFNNXrGaowwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
ZTU0MDE2NC0zZDQ2LTQ3OTQtYmY1NS1iNmIxMzRkOWFiMTMvMC8zRTZCNUFGMjMx
RkQ4MDlGQkM4RTU5OTIxNUIxNEQzNTdBQzY2QThDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0U2QjVBRjIzMUZEODA5RkJDOEU1OTkyMTVCMTREMzU3QUM2
NkE4Qy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JlNTQwMTY0LTNkNDYtNDc5NC1i
ZjU1LWI2YjEzNGQ5YWIxMy8wLzMyMzAzMjJlMzUzMTJlMzYzMTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMyMzAzMTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMozPTANBgkqhkiG
9w0BAQsFAAOCAQEAuIyUy/XaVqx4TobfyE0SnPoa4cSKMFbPL91h/41q9mwzWmQD
wyfAsT4YlQwVYy6P8eWolE9tFvmbbC2Numwz1Xcxg2xuerMmA643O8vys5adp99V
1oNiVQp0iLxeZUn6FaTHX0vB0HtL15pxCPtHDfdjx9QWfFSLUMLsy7fhncTb7tmV
MPP+12X51gJsdTtBeUkoMU5fxJNt5thNUIdZ8f2+0kPivEzcEREI3lRjNlKdPwVq
VnhGRHNibVa1a3EPS86aPtN6iOnnbSo5FFEPqWdHRwYowdAPVEQJQs3Qgtmc6LgS
Dbr/B0fbl3ZRj/HcFs1lkl3MAq9oEPsAvwPjWQ==
-----END CERTIFICATE-----
Generated at Sun Nov 24 05:18:50 2024 by rpki-client on console-ams.rpki-client.org