Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230342e302f32332d3233203d3e203538353532.roa
File:                     3230322e37322e3230342e302f32332d3233203d3e203538353532.roa (raw, json)
Hash identifier:          NV2R9tjnAwSLXAm/0nVa4ldIa/N8tbmqV7skLZ2t3Bc=
Subject key identifier:   33:70:98:CC:64:2D:AD:06:1E:93:52:D3:4B:1B:BC:FA:7B:34:0F:E3
Certificate issuer:       /CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
Certificate serial:       7087260D6CAEA4A90A97F93ED24B354B15D74B42
Authority key identifier: 9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230342e302f32332d3233203d3e203538353532.roa
Signing time:             Mon 31 Jul 2023 00:05:47 +0000
ROA not before:           Mon 31 Jul 2023 00:00:47 +0000
ROA not after:            Mon 29 Jul 2024 00:05:47 +0000
asID:                     58552
IP address blocks:        202.72.204.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl
                          rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Apr 2024 23:43:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:87:26:0d:6c:ae:a4:a9:0a:97:f9:3e:d2:4b:35:4b:15:d7:4b:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
        Validity
            Not Before: Jul 31 00:00:47 2023 GMT
            Not After : Jul 29 00:05:47 2024 GMT
        Subject: CN=337098CC642DAD061E9352D34B1BBCFA7B340FE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e1:98:0c:4f:20:c3:23:c2:f0:16:bc:96:d7:
                    f7:9b:c8:58:e2:ae:30:93:73:9a:3e:83:7c:50:fc:
                    09:9d:09:de:8b:4f:3d:05:6a:04:83:04:08:65:f1:
                    99:bf:57:5e:67:90:eb:18:20:47:08:15:a7:f5:6c:
                    f0:6f:a0:86:6b:0e:0b:24:0f:b9:85:c0:54:45:fc:
                    68:4c:48:ae:ca:d3:6b:34:c0:e1:d7:8c:bf:02:38:
                    a9:ac:68:22:19:e9:aa:76:49:98:18:85:d6:96:f0:
                    ec:4e:a5:82:79:f9:67:63:d8:84:0d:da:08:68:65:
                    c3:a9:9f:5b:a7:2c:f9:e8:37:96:f4:c1:52:f5:61:
                    ae:db:f1:65:11:9c:2f:af:b3:aa:ab:64:61:08:bd:
                    6c:12:ee:af:09:14:5d:6d:8a:00:52:f7:71:bf:c7:
                    c0:06:87:0d:00:4b:40:95:8e:f0:ae:50:c1:18:a2:
                    56:1f:f0:b0:cc:a3:10:b3:9b:0b:70:30:2e:b6:82:
                    d4:e4:a5:98:ab:60:a9:28:c0:34:fb:4f:96:72:d1:
                    cb:47:70:83:3c:88:8f:a9:39:a0:32:5a:55:e5:12:
                    f5:e1:fc:d1:41:bf:b5:f9:96:26:55:5a:64:09:9e:
                    dd:87:b4:af:12:cb:cf:3e:b3:87:bb:0c:a5:4b:55:
                    c8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:70:98:CC:64:2D:AD:06:1E:93:52:D3:4B:1B:BC:FA:7B:34:0F:E3
            X509v3 Authority Key Identifier:
                keyid:9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230342e302f32332d3233203d3e203538353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.72.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:9b:38:53:68:e2:57:ff:33:c2:4f:37:64:80:d7:a6:31:f1:
         b2:d7:29:c1:90:e0:ab:c1:69:5a:ea:61:e3:0d:ee:69:74:10:
         84:0c:4c:52:8f:c2:af:8b:03:fe:ef:65:00:53:3e:85:a2:c4:
         92:59:12:1d:06:dd:ce:be:60:14:17:17:b3:60:8c:b1:46:11:
         a2:33:b2:9e:e4:68:10:db:19:39:d4:3d:9f:4f:48:9c:64:f4:
         75:ab:ec:9d:d7:f0:b8:65:f5:de:e4:12:7c:db:d8:f3:f4:94:
         49:ce:8a:be:7d:34:7a:e1:7a:bf:e6:d8:14:64:66:04:86:7a:
         49:08:1b:0f:f5:ba:61:86:c0:68:85:cf:40:eb:10:2d:f9:58:
         b9:d1:78:1b:3f:68:60:be:55:f6:e5:3c:28:6e:00:24:8a:de:
         61:85:cf:57:db:e8:39:8d:e7:9f:75:2b:d9:ad:ba:8f:cf:c0:
         47:cf:1b:34:77:45:0e:28:71:4f:0d:ed:0b:77:7c:1f:10:aa:
         90:6a:83:d0:1b:24:49:aa:02:bb:cc:30:75:c0:9a:70:6a:b0:
         df:29:d8:ba:98:7b:ea:7e:10:c8:d2:ff:32:e0:0e:ce:c1:fb:
         f6:92:4d:ad:c6:97:4e:4f:71:df:08:a3:03:62:f9:5c:e6:fd:
         28:c7:4c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 23:20:10 2024 by rpki-client on console-fra.rpki-client.org