Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36322e302f32332d3233203d3e20323031333431.roa
File:                     3230322e35312e36322e302f32332d3233203d3e20323031333431.roa (raw, json)
Hash identifier:          9JhEsf7Rfj1/1sGwyn9vXBFLhDThBdCundD/yJmVoGk=
Subject key identifier:   A6:6B:70:6D:18:F7:AA:A0:D1:68:1F:E9:5C:49:0C:70:5F:A8:15:EA
Certificate issuer:       /CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
Certificate serial:       600364F9C6DDFA0154FB416B549B338C54E98BC3
Authority key identifier: 3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36322e302f32332d3233203d3e20323031333431.roa
Signing time:             Wed 24 Apr 2024 06:00:02 +0000
ROA not before:           Wed 24 Apr 2024 05:55:02 +0000
ROA not after:            Wed 23 Apr 2025 06:00:02 +0000
asID:                     201341
IP address blocks:        202.51.62.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl
                          rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:03:64:f9:c6:dd:fa:01:54:fb:41:6b:54:9b:33:8c:54:e9:8b:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
        Validity
            Not Before: Apr 24 05:55:02 2024 GMT
            Not After : Apr 23 06:00:02 2025 GMT
        Subject: CN=A66B706D18F7AAA0D1681FE95C490C705FA815EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8f:ea:82:5e:58:84:42:84:23:e2:93:c6:54:
                    0c:44:70:a6:10:7b:71:be:e9:94:06:2a:85:70:c9:
                    b3:a0:23:a3:06:b1:36:af:21:5b:f3:64:8f:e8:86:
                    85:31:89:cc:55:da:88:5a:0c:18:9d:63:e8:58:cd:
                    01:a4:6b:d1:84:50:a5:f3:4c:3f:4c:1c:15:98:fc:
                    3a:3a:a4:6a:73:02:9f:e8:1a:bf:48:a6:22:e7:8b:
                    dc:29:a3:7f:55:9a:55:f4:2d:aa:b7:d8:f0:c9:c8:
                    0e:3e:5f:74:aa:ac:d0:d6:81:c3:5e:61:3d:8d:07:
                    c2:77:51:db:18:f7:ad:59:8e:5e:83:ff:7f:06:5a:
                    4b:8a:9f:70:40:ef:b5:00:85:99:20:65:f6:4a:cf:
                    81:b4:87:d9:d2:87:0c:43:d6:cc:21:1a:36:a8:73:
                    c2:38:0c:6d:f4:ed:c0:fd:fa:69:78:0f:8e:30:14:
                    5e:54:d9:e5:87:a5:f9:d5:5a:f4:db:d7:0a:74:57:
                    04:97:cb:ff:4f:45:0f:05:79:d6:9e:eb:8c:fd:1f:
                    17:71:35:e0:3e:46:e8:a5:90:46:ed:c6:e9:7e:51:
                    6e:ca:06:32:f1:71:a7:ca:b7:f1:04:4e:fe:18:d3:
                    b7:1d:81:7e:b1:e6:e7:18:d9:d6:3f:d6:ce:5a:fa:
                    17:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:6B:70:6D:18:F7:AA:A0:D1:68:1F:E9:5C:49:0C:70:5F:A8:15:EA
            X509v3 Authority Key Identifier:
                keyid:3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36322e302f32332d3233203d3e20323031333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.51.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:88:1a:19:6e:e3:de:eb:fc:c9:52:19:1d:9a:36:7c:8e:eb:
         72:70:55:f0:97:cf:90:ad:1c:19:6d:19:63:ef:50:0e:b1:a6:
         05:47:71:a0:57:2e:0a:c8:f5:3e:a7:ca:70:e9:9a:e1:b5:1a:
         07:73:45:c8:2b:a4:ca:62:aa:fb:63:60:2a:38:a6:ed:47:34:
         c0:94:f3:7d:c1:86:91:9c:c0:ad:8d:91:cf:2b:a9:4c:de:36:
         a5:84:b9:29:90:ae:cb:63:ac:7d:33:f3:f9:e1:81:f4:87:99:
         c6:02:c4:54:03:d4:af:08:2d:16:d5:d8:01:7b:a6:38:ea:4d:
         f6:63:fb:03:18:c8:49:ef:d6:d2:e4:ef:00:bb:a8:28:10:d1:
         2c:17:4b:6f:f2:1b:54:7b:46:b7:c0:1e:30:ee:be:c7:e3:21:
         ec:52:d5:af:a2:53:75:dc:ab:f5:0d:63:a7:d8:d8:19:a5:6b:
         3e:99:76:e3:3d:0d:a5:a2:2a:60:d4:c9:5f:71:b7:63:e0:f0:
         c3:fc:ef:48:83:0b:b7:bf:f3:26:f7:a2:52:aa:57:72:12:07:
         e8:af:06:95:bf:ff:4a:ee:35:f6:e3:53:fe:cb:dd:12:4c:0b:
         7b:bd:ad:c8:2e:a5:eb:23:c5:c4:eb:69:52:cc:2f:fd:d9:da:
         0e:76:7d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 05:18:50 2024 by rpki-client on console-ams.rpki-client.org