Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230362e302f32342d3234203d3e203138313533.roa
File:                     3230322e37322e3230362e302f32342d3234203d3e203138313533.roa (raw, json)
Hash identifier:          g4X6JhQ3/zH9bBTs1xEnxTNuPx54wyKhTu43h7vR2xo=
Subject key identifier:   E9:FE:00:FD:C3:BD:69:A3:38:56:A8:4A:8A:45:60:7B:B1:52:B2:84
Certificate issuer:       /CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
Certificate serial:       56FF8F156011BC21A3503BB0BF9026A491D73DBB
Authority key identifier: 9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230362e302f32342d3234203d3e203138313533.roa
Signing time:             Mon 31 Jul 2023 00:05:45 +0000
ROA not before:           Mon 31 Jul 2023 00:00:45 +0000
ROA not after:            Mon 29 Jul 2024 00:05:45 +0000
asID:                     18153
IP address blocks:        202.72.206.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl
                          rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Apr 2024 23:43:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ff:8f:15:60:11:bc:21:a3:50:3b:b0:bf:90:26:a4:91:d7:3d:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
        Validity
            Not Before: Jul 31 00:00:45 2023 GMT
            Not After : Jul 29 00:05:45 2024 GMT
        Subject: CN=E9FE00FDC3BD69A33856A84A8A45607BB152B284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5f:a8:17:7b:4d:52:fd:be:ac:e2:9e:cd:9b:
                    13:b5:ea:8e:7b:3c:db:bc:28:d8:8e:24:41:f3:5a:
                    3f:0c:90:34:6b:c5:db:7e:cc:6d:39:a1:25:68:53:
                    2a:75:26:8b:45:37:0c:99:ce:1a:3c:99:fd:28:07:
                    5d:a3:a7:f7:39:72:cd:09:8f:81:6f:31:8e:cb:b9:
                    1e:e0:20:63:69:d4:2e:15:68:e9:5a:da:38:a8:b9:
                    be:94:5c:75:28:0d:d6:78:dc:c3:cc:28:ee:ab:bd:
                    df:20:f5:98:3f:e5:d7:ba:4a:db:2f:35:21:6f:b6:
                    4a:a4:2b:24:f5:93:8b:f6:a1:b3:92:7f:3a:10:88:
                    eb:3c:67:98:6f:da:eb:f0:0b:9a:2e:1f:0d:4f:f8:
                    bf:33:7a:ef:72:09:bc:7b:03:32:52:81:3f:03:b8:
                    80:47:1c:0c:5a:bc:e9:93:79:de:c7:5f:45:74:b8:
                    1f:d5:49:dc:d7:69:9a:0f:3a:9c:68:9d:a2:75:e8:
                    45:9d:14:1a:f3:6e:b8:12:7e:aa:49:26:4e:3f:5c:
                    35:37:0e:76:81:a1:e7:12:b9:4c:d2:10:89:09:06:
                    35:d9:af:52:8e:f3:2e:71:01:04:c1:62:be:c5:5f:
                    2f:44:77:20:d2:46:3f:be:6b:fc:b4:35:a9:fc:fb:
                    5f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:FE:00:FD:C3:BD:69:A3:38:56:A8:4A:8A:45:60:7B:B1:52:B2:84
            X509v3 Authority Key Identifier:
                keyid:9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230362e302f32342d3234203d3e203138313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.72.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:2c:47:c4:d4:92:34:e2:68:34:79:d8:71:0b:67:2e:ac:a0:
         2a:65:c9:2b:d2:7b:fd:f9:5e:21:ce:61:99:5f:7f:f6:91:22:
         cd:47:2e:22:37:36:0d:7c:a8:74:89:8b:75:7e:27:61:99:28:
         ed:be:a3:46:99:5f:85:e0:d0:29:f0:9d:cd:ab:55:72:fa:72:
         f9:d7:1e:0a:ba:7d:fe:81:fd:76:e4:ab:3f:57:0d:4e:4e:af:
         18:1e:5a:ab:a6:ae:36:22:e7:dc:39:65:eb:4c:9b:0b:95:94:
         8e:09:c1:e0:96:c5:83:58:83:81:4f:fe:a0:e4:89:3e:30:ce:
         81:35:36:5c:5e:ce:7b:6d:ea:0d:b4:39:bd:35:c3:f5:17:7d:
         0e:03:3d:d4:47:49:6d:76:20:ca:0f:75:79:88:f8:25:c3:3f:
         e4:f6:34:43:6b:05:7a:c3:96:0d:33:4e:bc:2b:72:25:22:d6:
         72:ec:49:f9:fa:78:b2:64:bd:9e:e8:5f:43:31:0d:14:38:59:
         87:b7:38:5a:8b:52:3a:b1:48:8a:b8:cd:13:4c:1d:76:b4:87:
         07:4c:a5:c3:3f:e7:27:df:e2:ff:d9:39:03:47:08:55:c2:51:
         cb:ef:66:4a:f6:0b:fa:23:85:6d:3a:ab:9f:24:dc:d6:4e:06:
         6c:92:62:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 23:20:10 2024 by rpki-client on console-fra.rpki-client.org