Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3134312e302f32342d3234203d3e2034333832.roa
File:                     3230322e39332e3134312e302f32342d3234203d3e2034333832.roa (raw, json)
Hash identifier:          rCTexDQZfGuhX7J3E9pFATMuv4mhiGRbWS6nB4dYREg=
Subject key identifier:   CA:6C:90:8D:0A:7B:0B:E1:FE:59:39:8F:3F:3D:7A:AE:5B:34:14:EC
Certificate issuer:       /CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
Certificate serial:       6589B0B8381B2C74FE08902D37B8B19067C64F7E
Authority key identifier: 01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3134312e302f32342d3234203d3e2034333832.roa
Signing time:             Wed 20 Sep 2023 13:00:14 +0000
ROA not before:           Wed 20 Sep 2023 12:55:14 +0000
ROA not after:            Wed 18 Sep 2024 13:00:14 +0000
asID:                     4382
IP address blocks:        202.93.141.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl
                          rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 15:54:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:89:b0:b8:38:1b:2c:74:fe:08:90:2d:37:b8:b1:90:67:c6:4f:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
        Validity
            Not Before: Sep 20 12:55:14 2023 GMT
            Not After : Sep 18 13:00:14 2024 GMT
        Subject: CN=CA6C908D0A7B0BE1FE59398F3F3D7AAE5B3414EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:11:1a:0c:46:31:1e:25:3e:83:30:96:c6:11:
                    b5:b5:32:8c:f7:7b:1e:31:bd:2b:bc:5d:8d:75:40:
                    97:61:09:af:19:62:2e:e2:4c:97:db:05:10:d3:d5:
                    75:d0:f2:de:29:dd:46:16:71:57:51:1f:ee:a1:8b:
                    5b:9b:0a:09:0d:bf:e0:a3:37:f2:cf:ad:33:cd:19:
                    1d:54:61:13:32:e9:7a:53:d6:49:55:3d:75:fd:72:
                    66:32:3a:24:ef:55:92:a6:9b:5d:fd:b9:aa:81:d5:
                    b1:31:5d:7b:3f:63:15:61:a8:ea:57:e0:fa:a9:f6:
                    3e:5b:20:47:f6:86:bc:b4:74:56:68:45:62:9d:ca:
                    00:a6:8e:7a:78:1f:9f:33:ce:a3:2d:c9:ac:ea:f7:
                    9a:b1:ef:f7:c8:f0:28:13:41:2d:5b:f0:2f:24:84:
                    b9:2c:0a:cc:5c:9a:e3:77:95:7e:f3:2c:9f:7e:96:
                    eb:4c:8c:6a:98:a7:95:90:bb:f6:35:a8:46:7a:d9:
                    70:25:7f:80:8e:df:05:17:3b:b5:14:58:10:81:4a:
                    ad:13:b6:5d:14:5d:bc:3d:71:aa:6c:64:59:90:45:
                    46:18:9f:78:0f:e6:18:97:e8:07:bd:99:a2:2b:b9:
                    e5:c0:28:bd:86:60:d6:14:6d:fd:9a:96:55:a4:b9:
                    08:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:6C:90:8D:0A:7B:0B:E1:FE:59:39:8F:3F:3D:7A:AE:5B:34:14:EC
            X509v3 Authority Key Identifier:
                keyid:01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3134312e302f32342d3234203d3e2034333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:27:df:ce:f8:bd:b1:a1:b5:05:24:75:ba:e5:5d:69:5f:a3:
         6f:48:62:3f:75:71:da:ea:6d:3f:bb:dc:b7:cb:4f:30:10:00:
         64:bb:9e:54:66:89:cf:55:27:a4:10:f0:99:10:03:7c:cb:2c:
         7a:56:a9:96:25:f7:23:fc:10:c9:4e:3b:e0:21:48:02:9e:52:
         ff:5e:0d:0b:92:4f:41:96:70:00:11:5f:6a:76:9a:5d:b6:06:
         c7:ba:a2:03:a0:05:02:24:cc:24:36:7a:12:01:ca:79:b0:8e:
         c4:53:93:18:d7:20:d9:aa:b3:b2:cb:29:ac:56:54:d1:e3:b1:
         9f:71:3a:66:2c:11:26:9f:bc:bc:ff:db:8a:d7:6d:8d:dd:05:
         c3:4f:5a:d3:f4:aa:5c:58:1e:95:b5:33:24:f9:7e:a2:5c:7b:
         7c:bd:0c:c3:8d:e9:8d:40:8a:0d:87:6f:58:37:30:cc:8a:48:
         6a:fd:be:4c:7e:aa:d2:4a:81:c1:5e:9e:e3:a9:9f:71:9e:e8:
         14:8a:24:89:84:af:dd:c4:d2:7e:ba:42:19:aa:a6:0f:8f:66:
         1e:89:c4:eb:0e:03:76:bd:68:21:38:28:bd:55:d2:d0:66:9b:
         0b:31:cb:07:87:fc:ad:07:9d:89:55:05:2d:15:3c:5d:70:2b:
         d7:19:ab:8a
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUZYmwuDgbLHT+CJAtN7ixkGfGT34wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDEyRDJGNTk5MzdGREJFNjUwOTVCOUVCNDk3MUQ5RDMx
RUZEQTkzQzAeFw0yMzA5MjAxMjU1MTRaFw0yNDA5MTgxMzAwMTRaMDMxMTAvBgNV
BAMTKENBNkM5MDhEMEE3QjBCRTFGRTU5Mzk4RjNGM0Q3QUFFNUIzNDE0RUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwERoMRjEeJT6DMJbGEbW1Moz3
ex4xvSu8XY11QJdhCa8ZYi7iTJfbBRDT1XXQ8t4p3UYWcVdRH+6hi1ubCgkNv+Cj
N/LPrTPNGR1UYRMy6XpT1klVPXX9cmYyOiTvVZKmm139uaqB1bExXXs/YxVhqOpX
4Pqp9j5bIEf2hry0dFZoRWKdygCmjnp4H58zzqMtyazq95qx7/fI8CgTQS1b8C8k
hLksCsxcmuN3lX7zLJ9+lutMjGqYp5WQu/Y1qEZ62XAlf4CO3wUXO7UUWBCBSq0T
tl0UXbw9capsZFmQRUYYn3gP5hiX6Ae9maIrueXAKL2GYNYUbf2allWkuQjdAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUymyQjQp7C+H+WTmPPz16rls0FOwwHwYDVR0j
BBgwFoAUAS0vWZN/2+ZQlbnrSXHZ0x79qTwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
ODZiMzg4OS02OTY2LTQ1ZWYtOTA3My1hZDE0MDExYWMzYjIvMC8wMTJEMkY1OTkz
N0ZEQkU2NTA5NUI5RUI0OTcxRDlEMzFFRkRBOTNDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDEyRDJGNTk5MzdGREJFNjUwOTVCOUVCNDk3MUQ5RDMxRUZE
QTkzQy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE4NmIzODg5LTY5NjYtNDVlZi05
MDczLWFkMTQwMTFhYzNiMi8wLzMyMzAzMjJlMzkzMzJlMzEzNDMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzMzM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKXY0wDQYJKoZIhvcN
AQELBQADggEBALQn3874vbGhtQUkdbrlXWlfo29IYj91cdrqbT+73LfLTzAQAGS7
nlRmic9VJ6QQ8JkQA3zLLHpWqZYl9yP8EMlOO+AhSAKeUv9eDQuST0GWcAARX2p2
ml22Bse6ogOgBQIkzCQ2ehIBynmwjsRTkxjXINmqs7LLKaxWVNHjsZ9xOmYsESaf
vLz/24rXbY3dBcNPWtP0qlxYHpW1MyT5fqJce3y9DMON6Y1Aig2Hb1g3MMyKSGr9
vkx+qtJKgcFenuOpn3Ge6BSKJImEr93E0n66Qhmqpg+PZh6JxOsOA3a9aCE4KL1V
0tBmmwsxyweH/K0HnYlVBS0VPF1wK9cZq4o=
-----END CERTIFICATE-----
Generated at Tue Apr 23 18:27:33 2024 by rpki-client on console-fra.rpki-client.org