Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230332e38332e32362e302f32332d3234203d3e203538333738.roa
File:                     3230332e38332e32362e302f32332d3234203d3e203538333738.roa (raw, json)
Hash identifier:          m3SFMK5sTyp5JRSjSaSerEeKhJKK6aQm3Z3k3tuCZsA=
Subject key identifier:   7A:69:44:0C:EF:76:98:2D:CD:AC:59:E5:83:38:3E:4C:EC:B3:C1:E9
Certificate issuer:       /CN=F33127B2252454B491C5DC9FE3937C56F28F8066
Certificate serial:       6E6E6359BAA7BEDB9BA151F4D263B8AA710C1E50
Authority key identifier: F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230332e38332e32362e302f32332d3234203d3e203538333738.roa
Signing time:             Fri 22 Nov 2024 06:29:27 +0000
ROA not before:           Fri 22 Nov 2024 06:24:27 +0000
ROA not after:            Fri 21 Nov 2025 06:29:27 +0000
asID:                     58378
IP address blocks:        203.83.26.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl
                          rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Mar 2025 14:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:6e:63:59:ba:a7:be:db:9b:a1:51:f4:d2:63:b8:aa:71:0c:1e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F33127B2252454B491C5DC9FE3937C56F28F8066
        Validity
            Not Before: Nov 22 06:24:27 2024 GMT
            Not After : Nov 21 06:29:27 2025 GMT
        Subject: CN=7A69440CEF76982DCDAC59E583383E4CECB3C1E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:40:59:3e:ee:cc:af:11:82:bb:f4:9a:80:76:
                    e4:77:05:27:93:81:5f:80:23:0a:16:be:ba:c6:f8:
                    94:e7:ac:1e:4f:f8:a4:f7:0c:dc:51:b2:91:ce:25:
                    86:a9:c5:6c:01:72:02:64:ef:36:a2:d0:5c:d9:60:
                    dd:89:9e:0e:be:88:2b:af:0f:ee:03:8b:e1:d1:94:
                    85:d0:72:15:c6:a8:9b:1c:0b:6f:57:e5:21:6f:2a:
                    cf:80:b6:ec:c2:3d:c9:75:e8:f9:33:b8:32:6f:7a:
                    2a:8b:5c:f6:6d:bc:b8:62:22:1a:67:ca:73:42:08:
                    2a:a8:15:70:ee:91:ea:59:69:da:db:82:76:8a:65:
                    1b:53:8b:d0:53:11:12:e4:ed:c9:17:18:1d:12:f4:
                    1a:6d:71:b1:7b:87:f9:ec:09:d4:54:89:a4:99:ab:
                    07:77:4c:66:a4:f7:06:6a:37:52:80:11:0a:7f:3c:
                    82:8c:6f:16:94:b4:ea:1f:88:72:35:18:f8:cd:ec:
                    0d:5b:9e:e3:df:02:ea:f3:35:0c:db:5c:7b:1c:18:
                    b5:52:98:48:fc:b6:f8:f0:7d:25:39:26:aa:cb:f7:
                    2e:59:13:d0:69:08:5c:18:b4:c5:d4:01:44:6d:81:
                    51:f2:9c:45:62:dd:29:7b:24:e6:46:ee:93:45:73:
                    07:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:69:44:0C:EF:76:98:2D:CD:AC:59:E5:83:38:3E:4C:EC:B3:C1:E9
            X509v3 Authority Key Identifier:
                keyid:F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230332e38332e32362e302f32332d3234203d3e203538333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.83.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:d2:08:89:af:e0:9b:af:59:36:71:c2:97:6c:74:13:e9:02:
         11:4d:8c:cb:00:89:6e:ee:3d:a8:7a:18:9e:4e:a7:ea:ea:b3:
         25:5d:d2:9e:93:58:88:01:9f:c1:7a:36:7e:3c:55:08:1d:87:
         92:80:8b:46:c9:13:76:c6:1b:75:01:18:a2:c4:55:63:2f:cb:
         49:75:07:7b:7b:52:c3:fa:ff:34:a5:4a:71:46:b6:2a:4b:62:
         13:aa:39:5b:a7:b6:9c:50:83:44:e8:71:02:14:4d:c2:a9:fe:
         0e:7e:c5:ec:9e:02:42:3d:13:b3:36:b1:c8:16:a3:b7:16:48:
         6e:a3:1e:e4:81:d6:33:45:7a:02:48:c9:ed:cd:eb:e6:ef:c6:
         e2:5e:1c:b5:8e:9a:45:4f:ba:ac:ac:72:62:cc:ea:15:9c:dc:
         44:0d:b4:6e:de:45:a6:47:49:f3:dc:e7:2d:ee:c5:3a:6a:07:
         1b:24:59:c7:9e:88:0b:ca:43:01:01:b1:c5:b0:87:6f:23:f3:
         6f:59:43:53:d6:f1:88:0a:a1:01:78:43:3f:37:76:01:db:b4:
         a6:2d:63:ef:d3:34:ac:43:51:4d:ec:bb:1e:7b:20:c3:74:d1:
         69:3f:19:e5:c9:bf:26:bf:e0:6f:62:5c:86:a5:85:03:ec:3f:
         dc:36:7e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:00:39 2025 by rpki-client