Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/3230322e35322e35302e302f32342d3234203d3e203436303536.roa
File:                     3230322e35322e35302e302f32342d3234203d3e203436303536.roa (raw, json)
Hash identifier:          GtPRtP464WpAY5mEznX+MG2Y26KpfK9+iuhXKPKnbLI=
Subject key identifier:   33:B7:2C:90:16:44:09:9A:5A:4B:A2:EA:BC:FC:88:58:F9:BB:3D:2C
Certificate issuer:       /CN=AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06
Certificate serial:       4BDB7793E47D0EC5986AD94178627493BE9E75EB
Authority key identifier: AB:58:72:11:82:B4:EA:A8:FE:CD:4A:D8:80:8C:EE:F5:CD:DD:1B:06
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/3230322e35322e35302e302f32342d3234203d3e203436303536.roa
Signing time:             Mon 02 Jun 2025 02:04:58 +0000
ROA not before:           Mon 02 Jun 2025 01:59:58 +0000
ROA not after:            Mon 01 Jun 2026 02:04:58 +0000
asID:                     46056
IP address blocks:        202.52.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl
                          rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 03:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:db:77:93:e4:7d:0e:c5:98:6a:d9:41:78:62:74:93:be:9e:75:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06
        Validity
            Not Before: Jun  2 01:59:58 2025 GMT
            Not After : Jun  1 02:04:58 2026 GMT
        Subject: CN=33B72C901644099A5A4BA2EABCFC8858F9BB3D2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9f:38:f8:5b:6e:28:bb:55:9b:ca:57:12:d8:
                    3f:54:6d:6d:7c:e2:b1:c2:8e:a2:de:c7:7d:e6:d0:
                    56:e0:28:e1:d6:b0:87:f2:24:57:1c:a4:0a:a6:c2:
                    3b:20:73:65:2b:50:59:81:8d:2b:2f:59:15:ae:02:
                    71:93:bc:af:f7:2a:ac:74:76:f1:56:48:e3:c2:a7:
                    26:75:c2:0b:4a:2a:bd:f1:1d:6a:bf:ad:a3:01:67:
                    75:31:e1:78:d9:81:c5:af:f5:35:53:da:82:42:52:
                    f1:f9:b7:f7:49:3a:37:75:42:7b:fa:a0:46:a0:b6:
                    68:13:3f:de:3b:f3:99:ae:5e:e6:51:a8:79:e4:ff:
                    65:ab:3f:99:cf:17:01:ae:bd:8a:09:f0:40:9a:96:
                    89:65:6b:f6:4b:e0:8f:69:5f:74:81:1a:77:16:c3:
                    47:06:e8:33:e0:3f:53:e4:40:fd:66:e8:7e:bf:aa:
                    35:c2:c7:f6:cc:29:48:d9:6c:ae:dc:2c:82:b2:82:
                    ce:2d:f5:94:ac:30:24:8f:26:38:d1:a7:76:7d:64:
                    a5:c7:51:bd:e3:ac:24:cb:c3:00:a8:15:99:a9:e6:
                    b6:71:25:66:50:87:29:c0:3c:20:6f:9b:13:bc:68:
                    81:8c:b1:7b:2b:77:1d:ce:28:4b:91:24:e7:bd:59:
                    e9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B7:2C:90:16:44:09:9A:5A:4B:A2:EA:BC:FC:88:58:F9:BB:3D:2C
            X509v3 Authority Key Identifier:
                keyid:AB:58:72:11:82:B4:EA:A8:FE:CD:4A:D8:80:8C:EE:F5:CD:DD:1B:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/3230322e35322e35302e302f32342d3234203d3e203436303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.52.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:09:11:12:96:2a:8b:9f:a6:64:a9:25:41:3c:8a:f1:28:1a:
         8c:5e:69:ee:f8:9b:a3:84:65:8b:94:ad:f3:bd:20:10:e5:c6:
         69:9a:11:a2:51:82:96:10:63:d2:ec:d5:ec:1d:01:77:a5:74:
         7a:88:fa:45:8d:cf:df:bd:55:12:ec:e6:c6:ba:e8:ad:2a:75:
         29:de:48:7b:e5:e6:9c:67:04:79:ff:ef:3f:89:68:6d:52:03:
         d4:b3:72:28:7d:98:92:d5:b8:64:87:8c:56:ea:cc:c6:5e:e7:
         34:49:0e:89:a6:de:6b:ec:1f:5f:cc:63:4f:7e:69:7b:e0:62:
         68:6c:e1:8c:e7:03:77:d5:90:0a:23:e6:8a:91:a4:66:bc:72:
         ce:dd:70:0e:3e:f1:b4:7d:6d:ea:06:71:e5:b6:58:64:45:38:
         a1:86:69:e7:66:82:cd:3a:ae:d5:c4:b7:d1:14:5e:94:ff:27:
         85:61:68:00:98:60:d5:6f:c7:c7:cc:07:c6:d2:54:03:dd:7d:
         04:fc:35:02:cb:e5:f1:c7:88:6f:a2:79:5f:bb:9d:15:e6:7c:
         68:02:fb:ab:33:0b:8a:00:31:fe:fe:7b:02:5f:4a:09:73:01:
         d4:31:a4:42:fe:ff:81:48:e4:30:4d:2f:5c:63:f0:8c:00:a8:
         8e:e3:42:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 19:24:55 2025 by rpki-client