Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133372e302f32342d3234203d3e2034333832.roa
File:                     3230322e39332e3133372e302f32342d3234203d3e2034333832.roa (raw, json)
Hash identifier:          eBBXDD883//fkdXT7+vqrDVGafX/h/37PUuE1MgLIO8=
Subject key identifier:   22:23:DB:D7:9A:6B:B3:80:77:07:C4:A2:4B:3A:A1:70:28:AF:E7:27
Certificate issuer:       /CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
Certificate serial:       3E902F60A2A5F97A8B5EE4CB369050FA9BB5164E
Authority key identifier: 01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133372e302f32342d3234203d3e2034333832.roa
Signing time:             Wed 20 Sep 2023 13:00:15 +0000
ROA not before:           Wed 20 Sep 2023 12:55:15 +0000
ROA not after:            Wed 18 Sep 2024 13:00:15 +0000
asID:                     4382
IP address blocks:        202.93.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl
                          rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Apr 2024 20:55:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:90:2f:60:a2:a5:f9:7a:8b:5e:e4:cb:36:90:50:fa:9b:b5:16:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
        Validity
            Not Before: Sep 20 12:55:15 2023 GMT
            Not After : Sep 18 13:00:15 2024 GMT
        Subject: CN=2223DBD79A6BB3807707C4A24B3AA17028AFE727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a8:78:85:a7:e4:b8:5d:5f:fe:1c:f9:b0:99:
                    9e:e1:16:26:dc:76:b1:31:4e:03:8d:6a:e3:85:36:
                    f6:be:c3:8f:57:e1:ef:78:02:25:88:b6:de:dc:f5:
                    8b:04:7b:37:84:be:c0:59:62:03:9e:86:32:a4:49:
                    23:6c:07:02:70:85:01:87:a8:a9:58:80:12:71:eb:
                    db:73:a6:6b:7b:bd:0c:1f:3b:08:a2:d0:8e:5a:ab:
                    06:b2:73:77:1b:b5:94:b6:98:b3:f7:bc:b0:37:2c:
                    f0:ca:42:eb:bf:09:d7:d3:8c:b6:8d:fe:5a:a9:e3:
                    43:76:91:7c:ec:54:5c:19:b9:34:45:7c:3c:b3:65:
                    de:aa:11:28:c1:d6:8b:08:ee:d1:5b:04:36:f6:ce:
                    d9:d2:e1:3c:e6:8a:09:a0:9b:47:68:28:4e:d6:ae:
                    fc:d2:cc:75:9c:53:c6:7d:44:e9:84:b5:18:d7:e4:
                    9b:64:80:d4:d5:e0:8d:17:fe:36:55:77:ca:6c:a3:
                    2a:a2:97:3f:77:5f:9f:b2:0e:4f:41:62:d7:ab:d3:
                    9c:f8:bc:f5:a2:97:fa:46:8d:bb:97:e2:34:55:dd:
                    3f:89:54:ea:72:34:d7:ec:9e:88:56:2e:03:4e:76:
                    be:2b:d5:e2:a2:33:56:fd:0f:d4:e9:36:66:e9:3b:
                    e9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:23:DB:D7:9A:6B:B3:80:77:07:C4:A2:4B:3A:A1:70:28:AF:E7:27
            X509v3 Authority Key Identifier:
                keyid:01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133372e302f32342d3234203d3e2034333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:f6:bc:c4:d1:d0:03:ba:d8:10:65:63:03:f7:bf:22:b4:2d:
         5a:41:d1:39:ac:5b:85:5c:29:73:6d:65:95:e6:ec:26:5e:2b:
         f7:74:25:05:aa:97:86:00:b2:4c:02:c2:a2:07:d2:37:b1:56:
         76:1d:c1:8f:83:b0:3b:d3:4a:2b:6e:99:ed:95:48:cc:9b:95:
         81:79:08:79:f5:e3:1c:9a:2e:1b:ee:cc:25:75:d9:3d:5c:2c:
         fc:12:50:41:59:62:6b:c4:fe:92:28:6b:34:c7:2d:a5:85:37:
         e0:1c:d7:ef:6c:c7:a8:6d:4c:92:a6:09:0d:a8:8c:a3:66:08:
         95:63:0c:22:59:60:4c:5a:0e:45:38:20:d6:ce:41:63:1b:2c:
         23:37:d2:09:7b:35:e5:47:3e:dc:4f:b9:99:28:05:3a:e6:8f:
         cb:c5:80:09:42:77:e3:34:fe:cf:3b:31:1d:e7:bf:7b:b8:d8:
         fd:10:22:44:b6:d0:23:fa:05:ef:a1:3a:1a:73:2d:2c:30:02:
         9f:8e:ee:c9:3a:64:17:7d:ec:88:98:c5:7e:17:64:de:c4:5b:
         2c:c5:97:f8:4e:39:c5:be:62:e2:ae:e6:7f:f3:eb:82:61:30:
         08:62:1d:10:c9:ba:a4:08:53:52:14:64:0d:41:36:c6:77:93:
         a5:4f:5b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:30:50 2024 by rpki-client on console-fra.rpki-client.org