Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234302e302f32332d3233203d3e203338373738.roa
File:                     3230322e39332e3234302e302f32332d3233203d3e203338373738.roa (raw, json)
Hash identifier:          Bvc/Y1AH5MXOE/f+v2ryElkCn66PX98FEt8wdHqvoOQ=
Subject key identifier:   4F:86:B6:BC:23:37:CA:1A:99:E9:F1:C4:EC:30:58:75:7D:7D:25:7F
Certificate issuer:       /CN=F38DFF094E16843854EAC1403C69FD7F77809D02
Certificate serial:       24048EEF79B5A2F443E09998C79F33EA5FD98EC2
Authority key identifier: F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234302e302f32332d3233203d3e203338373738.roa
Signing time:             Mon 31 Jul 2023 00:05:30 +0000
ROA not before:           Mon 31 Jul 2023 00:00:30 +0000
ROA not after:            Mon 29 Jul 2024 00:05:30 +0000
asID:                     38778
IP address blocks:        202.93.240.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl
                          rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 15:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:04:8e:ef:79:b5:a2:f4:43:e0:99:98:c7:9f:33:ea:5f:d9:8e:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F38DFF094E16843854EAC1403C69FD7F77809D02
        Validity
            Not Before: Jul 31 00:00:30 2023 GMT
            Not After : Jul 29 00:05:30 2024 GMT
        Subject: CN=4F86B6BC2337CA1A99E9F1C4EC3058757D7D257F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2f:d2:aa:23:0d:87:11:91:67:92:ee:e2:c0:
                    f1:a8:f6:6d:fb:8f:49:dc:20:84:cd:f5:40:46:a6:
                    2d:24:eb:85:b2:95:c6:0e:b5:8b:43:70:71:3d:c3:
                    65:a3:17:c0:f5:e5:3c:d0:b9:84:13:16:5e:10:7e:
                    00:49:2f:7d:eb:0f:8b:63:c8:f1:30:d9:9f:14:56:
                    21:8f:7d:43:4e:35:19:cc:74:e6:84:05:af:c8:21:
                    b3:03:05:3b:a1:8b:fb:03:4e:be:b6:62:90:6e:c7:
                    f1:12:17:5e:4b:69:ca:2c:7c:8f:ae:43:af:a2:f5:
                    96:c9:77:ba:b4:b2:e9:c1:bf:84:30:f5:b9:2b:2f:
                    1e:46:17:cb:ec:6a:f9:2c:fd:46:a3:40:55:e3:7a:
                    8d:54:fd:c1:46:cc:5e:db:f8:3b:2d:4d:65:90:03:
                    59:dd:7c:92:54:ae:75:e8:f3:73:b1:f4:20:d2:cd:
                    3b:d9:d7:d4:05:0b:09:5c:6d:6a:2a:0f:ec:18:5d:
                    7e:99:44:a1:bd:bc:51:31:97:62:cd:a9:a7:e5:98:
                    70:5b:9d:cf:ad:63:e4:4e:5b:b4:8b:03:65:8d:1d:
                    37:5b:54:b9:dc:54:0e:5c:79:5d:0f:12:a4:14:1c:
                    12:8d:27:07:c5:ca:65:5c:6f:1f:a9:f6:b8:c8:68:
                    5e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:86:B6:BC:23:37:CA:1A:99:E9:F1:C4:EC:30:58:75:7D:7D:25:7F
            X509v3 Authority Key Identifier:
                keyid:F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234302e302f32332d3233203d3e203338373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:7b:84:23:7e:f4:b9:d3:af:6b:ee:55:5b:1d:02:b4:7c:08:
         ba:6a:b4:2c:4e:ae:9f:01:25:6c:f0:42:65:3d:c6:27:7f:5b:
         16:bf:4b:63:15:e6:00:fe:9b:17:77:cf:55:5d:30:85:69:f9:
         d2:52:cf:b0:6a:63:9c:a5:a3:b7:82:c5:62:f2:46:9f:52:af:
         19:7d:76:20:78:f1:36:8e:f8:1d:b5:71:5b:28:08:ce:0e:a1:
         10:9f:54:b4:3f:99:f9:a4:26:13:5a:0a:72:fc:6e:b3:46:50:
         53:ff:43:7c:8c:de:5b:c3:0d:bf:f1:af:53:7c:d7:c4:c4:42:
         10:a8:17:63:99:93:c9:b1:15:ca:81:26:43:7e:fc:64:a6:da:
         57:ac:2c:b1:fe:71:3c:5d:ea:24:35:f3:3d:12:82:35:49:4d:
         18:17:c6:24:d9:93:c9:eb:14:ba:f0:33:29:53:81:d2:ab:6b:
         4a:00:8d:40:80:cd:5a:7d:81:c1:d1:4f:f0:77:d0:1b:13:04:
         73:ef:30:0c:9a:04:e4:63:c3:ff:73:44:33:4c:11:06:cf:6d:
         cb:ba:55:e1:01:df:ee:0f:1a:46:c5:c9:c3:78:32:5b:54:07:
         ac:06:18:ed:bb:90:c9:92:89:50:81:4e:6e:bb:5f:f2:6a:04:
         96:0f:78:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 16:34:07 2024 by rpki-client on console-fra.rpki-client.org