Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133322e302f32342d3234203d3e2034333832.roa
File:                     3230322e39332e3133322e302f32342d3234203d3e2034333832.roa (raw, json)
Hash identifier:          0+jH9K3LUBFlyBRsB6IA5ZPLYE4tcnOtRBH3UFeDhn0=
Subject key identifier:   9B:6F:5E:A0:4A:59:11:EC:06:F1:D8:EF:13:CF:A9:40:32:00:0A:4A
Certificate issuer:       /CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
Certificate serial:       25B72F1492A19AB235675FC0D573AF4D2D7EA45E
Authority key identifier: 01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133322e302f32342d3234203d3e2034333832.roa
Signing time:             Wed 20 Sep 2023 13:00:14 +0000
ROA not before:           Wed 20 Sep 2023 12:55:14 +0000
ROA not after:            Wed 18 Sep 2024 13:00:14 +0000
asID:                     4382
IP address blocks:        202.93.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl
                          rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Apr 2024 19:36:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:b7:2f:14:92:a1:9a:b2:35:67:5f:c0:d5:73:af:4d:2d:7e:a4:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
        Validity
            Not Before: Sep 20 12:55:14 2023 GMT
            Not After : Sep 18 13:00:14 2024 GMT
        Subject: CN=9B6F5EA04A5911EC06F1D8EF13CFA94032000A4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2c:da:63:f7:71:5b:19:f8:72:05:00:27:66:
                    67:ac:cb:50:86:7f:2b:90:a6:71:fc:0e:10:f6:1c:
                    d2:16:4a:1f:dd:36:ad:20:e3:da:72:d8:ae:95:a4:
                    a2:a8:14:8b:91:ff:ac:cd:fd:a9:2f:1f:f3:75:8d:
                    a0:5c:82:10:f6:b5:cc:dc:34:a2:d1:94:5a:9c:cc:
                    0b:af:33:cf:cc:4d:0a:46:67:5f:19:cd:0f:4b:8f:
                    64:62:4b:4f:ca:1d:30:b8:1e:b9:15:58:81:13:6c:
                    11:47:a9:f6:d9:a9:d9:ad:8f:86:94:d5:32:e5:09:
                    fd:b8:28:42:b1:4b:91:f3:6a:de:f0:bb:f8:47:13:
                    f6:f5:46:43:b5:03:7e:23:a6:93:a3:51:ff:6d:a2:
                    d8:72:01:68:e1:91:a7:c9:e8:99:d6:0a:d1:76:4e:
                    1f:be:85:1c:dc:fb:3d:12:79:dd:6a:f9:05:88:14:
                    8c:d0:78:25:58:17:e6:c0:fa:f3:32:95:9b:49:89:
                    69:cf:56:12:78:98:30:3c:de:11:9d:c3:a6:e0:0a:
                    06:89:13:fa:f9:94:23:c4:4d:b1:1e:2f:2f:f3:a7:
                    eb:f9:c3:ce:06:c1:85:2d:e2:a1:c3:fa:c8:72:4f:
                    29:3e:46:30:21:b9:37:8c:89:fd:90:5e:fe:2b:18:
                    0c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:6F:5E:A0:4A:59:11:EC:06:F1:D8:EF:13:CF:A9:40:32:00:0A:4A
            X509v3 Authority Key Identifier:
                keyid:01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133322e302f32342d3234203d3e2034333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:95:ef:0c:a7:67:02:ac:7a:23:9b:90:9d:42:24:b7:3d:da:
         ce:cf:08:c2:9a:c6:56:ac:98:f0:24:4b:eb:3d:73:71:d9:4f:
         84:df:69:46:4d:e0:49:9b:5e:3f:21:f0:07:56:f0:45:a8:37:
         0a:7a:62:3b:90:3f:8a:fc:29:27:c2:6d:fe:40:01:b6:e2:39:
         55:9f:8e:3a:f2:21:9b:f0:19:4a:47:84:32:7a:a9:31:1b:9b:
         c1:5b:79:5c:2c:79:bd:16:8f:5a:cb:0d:4e:80:bb:b7:0d:80:
         fd:c4:d0:79:b4:c3:d4:6a:c9:95:21:f2:b9:1f:4f:16:51:ed:
         84:61:a9:0e:d2:65:49:18:a7:e7:e1:aa:7d:fe:8e:3f:ea:d4:
         98:77:8b:87:e4:64:99:6b:ed:2c:05:52:05:ab:6d:ac:2a:63:
         84:b3:95:c7:20:e1:8f:37:6b:3c:1c:98:57:87:7d:96:25:c4:
         8e:0b:fb:3b:7e:4b:58:0b:8a:2d:f1:2d:7c:25:ff:1f:76:10:
         af:e1:80:f7:79:48:65:2b:b6:5c:5b:e7:ff:6c:75:32:d0:3b:
         22:59:14:8a:27:d4:f3:d2:7e:66:ae:52:6c:b5:56:0e:68:87:
         86:53:6e:73:5b:41:4c:b2:c2:60:a4:19:37:5e:fb:a8:bb:20:
         90:e8:29:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 18:14:07 2024 by rpki-client on console-fra.rpki-client.org