Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234342e302f32342d3234203d3e203338373738.roa
File:                     3230322e39332e3234342e302f32342d3234203d3e203338373738.roa (raw, json)
Hash identifier:          qo03XHLdsoJ1GTEKjLBEmdW3mK459cDPmNfN/y2DZAQ=
Subject key identifier:   4E:89:65:59:DE:FF:4A:6C:91:87:F7:72:3A:16:7C:F6:2B:BA:3E:A3
Certificate issuer:       /CN=F38DFF094E16843854EAC1403C69FD7F77809D02
Certificate serial:       41362F0EFCDADEC85FC2ECBF90A8F841E90AD5E3
Authority key identifier: F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234342e302f32342d3234203d3e203338373738.roa
Signing time:             Thu 02 May 2024 09:00:00 +0000
ROA not before:           Thu 02 May 2024 08:55:00 +0000
ROA not after:            Thu 01 May 2025 09:00:00 +0000
asID:                     38778
IP address blocks:        202.93.244.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl
                          rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 May 2024 21:20:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:36:2f:0e:fc:da:de:c8:5f:c2:ec:bf:90:a8:f8:41:e9:0a:d5:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F38DFF094E16843854EAC1403C69FD7F77809D02
        Validity
            Not Before: May  2 08:55:00 2024 GMT
            Not After : May  1 09:00:00 2025 GMT
        Subject: CN=4E896559DEFF4A6C9187F7723A167CF62BBA3EA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:91:3b:09:27:41:80:e5:7b:d9:28:03:96:d6:
                    e7:05:fc:2a:f5:e1:fc:81:8e:23:3e:fb:23:75:68:
                    27:d1:5a:28:8d:99:43:04:3d:3f:31:64:86:7f:18:
                    59:51:3d:0e:da:eb:ac:8d:67:96:67:59:62:98:cb:
                    e9:f9:79:c7:5d:0e:59:71:be:63:2b:7c:03:f0:3c:
                    7a:e7:78:46:a9:31:7b:2f:51:71:54:16:b8:27:4e:
                    9d:e4:8c:cf:96:f3:03:03:a7:19:34:d3:3f:c1:01:
                    ca:95:46:e5:93:94:20:35:d0:43:8c:d6:51:ae:cd:
                    81:5e:ed:06:86:0c:55:c0:93:e7:af:e5:ad:a1:da:
                    24:23:29:b0:42:2c:d9:49:d0:a0:98:14:ed:78:1b:
                    ef:e5:2a:90:5f:e1:1a:ea:c8:66:86:0d:c8:ca:d4:
                    9a:f5:6f:af:00:a9:4b:b0:39:e8:c4:ef:d5:42:eb:
                    89:66:33:68:dd:4b:18:3e:65:1c:45:e8:ea:8e:d8:
                    b7:0c:42:69:cd:0c:9f:30:cb:73:d6:1e:59:fd:16:
                    aa:f6:c1:8b:fb:ff:6b:64:76:c1:49:46:51:74:db:
                    4d:04:58:78:cb:89:81:90:c2:36:d1:d8:50:26:1f:
                    90:4f:3e:7f:43:59:7a:49:db:56:bc:f5:b6:84:cd:
                    6a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:89:65:59:DE:FF:4A:6C:91:87:F7:72:3A:16:7C:F6:2B:BA:3E:A3
            X509v3 Authority Key Identifier:
                keyid:F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234342e302f32342d3234203d3e203338373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:82:47:17:84:33:4d:9a:10:22:2c:7a:4c:df:90:e0:27:64:
         d0:5b:b9:33:28:f0:37:4d:88:4c:cd:ec:30:73:f7:95:f2:2d:
         f6:6e:92:ff:38:a0:05:ac:6b:d0:01:f2:1c:d6:4d:6a:41:83:
         9e:12:9d:3a:b2:a0:b4:cd:6e:39:6b:52:95:b3:83:a0:05:1f:
         8c:f9:3b:a4:15:31:b8:66:a9:bd:12:6a:bb:3b:3c:78:90:eb:
         76:68:15:e4:0f:7c:df:a8:fe:69:d1:fb:86:fc:2b:b8:82:90:
         e5:68:61:ce:41:11:58:4c:6d:51:b4:e8:39:d0:df:ff:0b:c7:
         d6:56:e1:34:7f:91:8b:79:86:97:33:46:df:5a:5e:bd:35:fd:
         35:d8:9f:3d:57:70:34:89:1b:8d:85:7c:6d:df:24:9f:8e:88:
         1c:c0:bd:e2:e3:9f:86:ea:08:4d:7b:6c:b4:7a:ef:d9:0c:7c:
         bc:2f:47:6e:14:0c:f2:85:66:d4:20:07:8e:ab:05:bd:8a:71:
         a0:37:6a:7f:6a:5d:0d:c8:83:17:a3:51:fe:d4:4a:2d:8d:68:
         6d:bd:4a:00:05:88:10:64:27:51:87:e6:a5:4d:c3:34:ff:e2:
         35:63:2e:35:f9:ad:21:11:f5:c0:63:cb:73:52:4a:d7:63:8a:
         d0:fb:6d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 21:47:02 2024 by rpki-client on console-ams.rpki-client.org