Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234332e302f32342d3234203d3e203234313938.roa
File:                     3230322e39332e3234332e302f32342d3234203d3e203234313938.roa (raw, json)
Hash identifier:          sxE+C62FubyRYa/N4KULH9HlfD6fKFrC6kOkzr+/0Dg=
Subject key identifier:   61:A4:74:3D:67:9B:DF:C2:08:49:1C:BB:6D:76:8C:6A:77:FF:BB:31
Certificate issuer:       /CN=F38DFF094E16843854EAC1403C69FD7F77809D02
Certificate serial:       6B205EFDA2173522021B751B08D2BA8ED9BCAF5D
Authority key identifier: F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234332e302f32342d3234203d3e203234313938.roa
Signing time:             Mon 31 Jul 2023 00:05:29 +0000
ROA not before:           Mon 31 Jul 2023 00:00:29 +0000
ROA not after:            Mon 29 Jul 2024 00:05:29 +0000
asID:                     24198
IP address blocks:        202.93.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl
                          rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Apr 2024 20:12:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:20:5e:fd:a2:17:35:22:02:1b:75:1b:08:d2:ba:8e:d9:bc:af:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F38DFF094E16843854EAC1403C69FD7F77809D02
        Validity
            Not Before: Jul 31 00:00:29 2023 GMT
            Not After : Jul 29 00:05:29 2024 GMT
        Subject: CN=61A4743D679BDFC208491CBB6D768C6A77FFBB31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:63:36:ef:45:44:69:63:ad:e7:83:e6:25:76:
                    ad:cb:3c:6e:a4:17:fe:6d:5e:0c:71:9f:03:a2:52:
                    4e:26:24:bb:80:cc:3f:21:02:4c:8e:1d:80:fb:51:
                    c2:11:95:1a:20:97:1c:c2:78:8f:02:b9:08:06:2d:
                    62:ef:78:24:63:ae:94:bc:2a:7d:49:b6:91:ed:84:
                    09:ef:e2:6e:46:50:c3:54:dc:20:79:3e:9c:c9:80:
                    b3:ff:32:76:b2:d9:6a:82:4d:cc:e4:68:bc:f1:fd:
                    85:43:a1:d5:cf:8b:31:b2:9d:fa:d3:48:50:b6:99:
                    16:a2:88:f9:0d:fe:39:31:04:47:33:49:3f:09:9e:
                    07:09:7b:63:f4:c7:10:40:b4:e1:52:93:f9:c5:f5:
                    d3:9e:f9:9f:95:10:7c:99:c6:2f:81:75:4e:4b:80:
                    bd:09:87:8a:0e:8c:f3:00:aa:2f:99:92:3e:b0:c5:
                    4e:6a:6f:7c:e0:71:32:77:43:1e:53:bb:19:f9:e7:
                    82:89:c6:b0:e2:f5:4b:8b:a0:71:d0:a3:77:a6:64:
                    49:b9:cd:f9:3b:6d:3f:bf:d2:c1:32:3e:e5:25:76:
                    90:ec:b2:5c:db:ba:15:7a:65:0c:2b:2d:27:33:be:
                    fe:66:77:0e:75:7e:83:ec:3a:04:38:ac:97:08:e7:
                    f0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A4:74:3D:67:9B:DF:C2:08:49:1C:BB:6D:76:8C:6A:77:FF:BB:31
            X509v3 Authority Key Identifier:
                keyid:F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234332e302f32342d3234203d3e203234313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:15:8a:89:c2:a2:d3:ec:14:af:d8:74:a1:d9:21:be:04:e3:
         a2:f6:22:a0:84:1e:c1:23:24:a5:72:57:24:52:0c:18:f6:8e:
         d0:92:28:58:20:c6:8e:f4:5e:db:77:f7:7c:d4:d3:5a:3c:2c:
         15:10:1c:cd:91:1e:e0:37:9c:4d:dd:59:ba:c7:67:2d:fc:50:
         87:93:d8:ae:5b:fe:63:9d:80:8e:26:81:09:d0:2a:ed:6c:af:
         f7:f5:bf:c9:d8:5f:d6:7f:52:96:a6:8c:d3:63:a9:1e:ce:eb:
         0b:ff:11:bd:83:29:fd:12:6d:ea:43:d9:cd:dc:e0:32:c7:e8:
         98:80:cd:54:33:e2:a4:4f:08:31:7d:d0:f9:3f:1d:61:ff:c7:
         39:18:21:10:97:69:03:26:3b:d6:73:3c:bb:a3:02:e3:82:8e:
         be:39:dc:06:49:64:0d:f6:7a:32:84:91:7b:62:43:8f:8b:0b:
         c4:4a:f1:c1:50:49:c4:ba:0d:ae:05:c4:83:3b:f7:78:ad:a7:
         f4:44:4c:f3:a8:6c:1c:68:3f:67:fb:be:fc:12:18:91:aa:17:
         2b:01:72:65:7b:05:8e:6f:51:e7:3e:26:aa:e0:e5:66:32:33:
         8d:ae:b2:65:80:4a:92:c3:42:59:c4:ce:f0:a0:46:38:3e:0a:
         6b:c0:d6:fa
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUayBe/aIXNSICG3UbCNK6jtm8r10wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM4REZGMDk0RTE2ODQzODU0RUFDMTQwM0M2OUZEN0Y3
NzgwOUQwMjAeFw0yMzA3MzEwMDAwMjlaFw0yNDA3MjkwMDA1MjlaMDMxMTAvBgNV
BAMTKDYxQTQ3NDNENjc5QkRGQzIwODQ5MUNCQjZENzY4QzZBNzdGRkJCMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNYzbvRURpY63ng+Yldq3LPG6k
F/5tXgxxnwOiUk4mJLuAzD8hAkyOHYD7UcIRlRoglxzCeI8CuQgGLWLveCRjrpS8
Kn1JtpHthAnv4m5GUMNU3CB5PpzJgLP/Mnay2WqCTczkaLzx/YVDodXPizGynfrT
SFC2mRaiiPkN/jkxBEczST8JngcJe2P0xxBAtOFSk/nF9dOe+Z+VEHyZxi+BdU5L
gL0Jh4oOjPMAqi+Zkj6wxU5qb3zgcTJ3Qx5Tuxn554KJxrDi9UuLoHHQo3emZEm5
zfk7bT+/0sEyPuUldpDsslzbuhV6ZQwrLSczvv5mdw51foPsOgQ4rJcI5/BhAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUYaR0PWeb38IISRy7bXaManf/uzEwHwYDVR0j
BBgwFoAU843/CU4WhDhU6sFAPGn9f3eAnQIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
YWQ2ZGNjOS0xNzAwLTQ4ZWItOTA5OS02Njc4ZjkxYmY0NGUvMC9GMzhERkYwOTRF
MTY4NDM4NTRFQUMxNDAzQzY5RkQ3Rjc3ODA5RDAyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjM4REZGMDk0RTE2ODQzODU0RUFDMTQwM0M2OUZEN0Y3Nzgw
OUQwMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVhZDZkY2M5LTE3MDAtNDhlYi05
MDk5LTY2NzhmOTFiZjQ0ZS8wLzMyMzAzMjJlMzkzMzJlMzIzNDMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzNDMxMzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMpd8zANBgkqhkiG
9w0BAQsFAAOCAQEAChWKicKi0+wUr9h0odkhvgTjovYioIQewSMkpXJXJFIMGPaO
0JIoWCDGjvRe23f3fNTTWjwsFRAczZEe4DecTd1ZusdnLfxQh5PYrlv+Y52AjiaB
CdAq7Wyv9/W/ydhf1n9SlqaM02OpHs7rC/8RvYMp/RJt6kPZzdzgMsfomIDNVDPi
pE8IMX3Q+T8dYf/HORghEJdpAyY71nM8u6MC44KOvjncBklkDfZ6MoSRe2JDj4sL
xErxwVBJxLoNrgXEgzv3eK2n9ERM86hsHGg/Z/u+/BIYkaoXKwFyZXsFjm9R5z4m
quDlZjIzja6yZYBKksNCWcTO8KBGOD4Ka8DW+g==
-----END CERTIFICATE-----
Generated at Wed Apr 17 18:27:00 2024 by rpki-client on console-ams.rpki-client.org