Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3134302e302f32342d3234203d3e2034333832.roa
File:                     3230322e39332e3134302e302f32342d3234203d3e2034333832.roa (raw, json)
Hash identifier:          RQHR2MoiUdBFZqWzyrktBdAp9UGa41mnw14DHXZWSBk=
Subject key identifier:   3C:9E:C9:2C:CD:65:F2:96:C5:4A:CA:FD:BD:85:38:79:FF:E2:B9:29
Certificate issuer:       /CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
Certificate serial:       111EFA5A406E143F0A3F4E5BF3A83F2E5E98DF72
Authority key identifier: 01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3134302e302f32342d3234203d3e2034333832.roa
Signing time:             Wed 20 Sep 2023 12:00:00 +0000
ROA not before:           Wed 20 Sep 2023 11:55:00 +0000
ROA not after:            Wed 18 Sep 2024 12:00:00 +0000
asID:                     4382
IP address blocks:        202.93.140.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl
                          rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 15:54:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:1e:fa:5a:40:6e:14:3f:0a:3f:4e:5b:f3:a8:3f:2e:5e:98:df:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
        Validity
            Not Before: Sep 20 11:55:00 2023 GMT
            Not After : Sep 18 12:00:00 2024 GMT
        Subject: CN=3C9EC92CCD65F296C54ACAFDBD853879FFE2B929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:67:a8:7d:39:d6:55:7a:bf:db:34:6e:85:74:
                    3b:00:bc:ed:5f:0c:3c:27:63:6a:34:8d:c6:fd:24:
                    8e:2c:de:a0:01:43:98:79:53:3c:93:18:e6:3c:66:
                    c3:09:52:03:79:e9:6d:6d:f3:a4:86:fa:4b:35:4d:
                    20:11:cc:07:7e:54:45:f4:57:f1:28:d2:fa:f4:7c:
                    c0:24:6c:78:30:b2:c7:b8:6a:cd:d7:66:84:28:78:
                    53:d9:51:ea:55:7f:41:7b:56:db:55:a9:1d:7d:53:
                    19:89:6e:03:4a:b5:eb:95:6e:2e:d9:80:3b:a8:bc:
                    71:c7:81:e3:43:16:e6:b2:61:b3:67:7b:92:1c:45:
                    ec:72:96:a1:ea:ea:53:92:d1:02:e7:29:2d:82:62:
                    72:bc:12:e7:88:f5:82:7d:6b:5f:04:32:0f:ea:e8:
                    fc:c0:71:8c:83:b8:c1:31:03:38:2f:10:e5:b6:b7:
                    d9:31:4b:3a:df:4a:f1:ac:e5:95:63:bb:74:46:1a:
                    fb:ce:3d:fe:32:be:4e:7f:5b:71:e8:b3:77:e4:73:
                    52:55:09:9c:bc:0d:b4:b5:e4:5f:bd:df:c8:ab:2a:
                    6e:89:0f:03:67:22:9c:f4:7f:d7:61:d1:3d:5d:b1:
                    2b:aa:6b:24:ed:6c:b0:a1:78:be:4f:0a:e0:cb:40:
                    83:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:9E:C9:2C:CD:65:F2:96:C5:4A:CA:FD:BD:85:38:79:FF:E2:B9:29
            X509v3 Authority Key Identifier:
                keyid:01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3134302e302f32342d3234203d3e2034333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:60:38:ab:b3:73:f5:ce:12:4f:56:bc:cd:0c:2a:42:38:fc:
         03:43:0e:66:41:ba:11:44:d6:b4:a2:47:b9:49:7b:96:14:97:
         9e:ec:23:89:4a:45:f8:cf:45:15:ad:22:35:bc:3a:b3:d8:b4:
         60:da:f9:83:41:5e:27:67:90:4c:24:dc:4d:a1:65:99:56:6c:
         5d:6b:c7:0f:06:98:f8:e4:6e:18:3d:c2:42:11:ec:52:af:70:
         ef:b7:64:fd:d2:72:43:10:71:4a:57:f2:ff:4f:73:cd:92:61:
         e5:fe:5b:5b:86:60:de:71:9b:b5:1a:c4:d4:f9:a2:b2:d8:ee:
         4c:d9:bc:1b:e6:e9:91:4b:44:7c:da:0d:4f:45:e6:02:43:69:
         ee:f7:66:e1:1e:dc:44:e0:5a:0b:40:0e:14:b6:52:d6:e9:f4:
         e7:12:25:47:c6:66:67:42:2e:2e:45:b7:79:26:1d:b5:43:ae:
         f0:39:e4:42:5f:97:98:1e:1a:1a:05:a2:8a:80:fe:f1:8c:4d:
         fc:4d:cc:ad:b3:8f:f9:be:20:06:3d:01:c4:3d:40:e4:49:fe:
         51:3c:42:51:f9:f7:36:c2:90:36:f7:19:4d:79:3b:57:05:f6:
         d2:54:7e:c0:90:6f:df:ee:bd:30:be:2a:fa:81:d4:9d:0a:82:
         37:eb:1e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:35:50 2024 by rpki-client on console-ams.rpki-client.org