Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3230322e37342e3233362e302f32322d3232203d3e20313331373735.roa
File:                     3230322e37342e3233362e302f32322d3232203d3e20313331373735.roa (raw, json)
Hash identifier:          qiOB0hJIIHDg7X0KLVd+UBEVcvNnRyRUWk3XpDAV9cg=
Subject key identifier:   86:F3:13:C0:0A:97:E7:B5:F9:30:6F:1F:86:17:A6:4E:D0:67:5B:39
Certificate issuer:       /CN=49CDCA308C289D688C649C2303BECB3ED76B5054
Certificate serial:       674C55137BE8FC971ECB3825B0CD0C7599CF79C1
Authority key identifier: 49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3230322e37342e3233362e302f32322d3232203d3e20313331373735.roa
Signing time:             Sat 09 Sep 2023 14:00:01 +0000
ROA not before:           Sat 09 Sep 2023 13:55:01 +0000
ROA not after:            Sat 07 Sep 2024 14:00:01 +0000
asID:                     131775
IP address blocks:        202.74.236.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl
                          rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:4c:55:13:7b:e8:fc:97:1e:cb:38:25:b0:cd:0c:75:99:cf:79:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49CDCA308C289D688C649C2303BECB3ED76B5054
        Validity
            Not Before: Sep  9 13:55:01 2023 GMT
            Not After : Sep  7 14:00:01 2024 GMT
        Subject: CN=86F313C00A97E7B5F9306F1F8617A64ED0675B39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0a:9f:c9:19:57:34:d6:d1:b1:71:dc:17:84:
                    36:82:c4:8a:d6:ab:74:ff:c8:89:f4:b0:0f:73:56:
                    a5:bf:f0:41:1a:da:e3:c5:11:3c:06:37:96:b4:f5:
                    b5:8c:74:8d:97:67:89:fa:09:4a:e1:12:36:2b:c7:
                    a5:42:6d:fe:55:fa:66:5a:84:38:7c:95:60:5b:14:
                    9e:75:71:05:f6:20:53:0f:f6:a9:4e:f2:5b:77:f9:
                    5c:af:81:c9:7d:f3:63:bd:f2:f7:b9:aa:53:c4:86:
                    09:73:79:95:44:0b:73:de:d9:1b:ae:ae:70:6b:b2:
                    ea:0a:71:51:fe:01:b3:c8:ce:a3:f2:4e:62:fa:37:
                    d3:2a:0a:8c:48:51:b8:f5:f5:0e:97:1d:19:e6:70:
                    5b:c3:9d:27:89:f3:35:6b:1a:49:64:b2:c3:9b:bb:
                    f7:98:60:2c:59:08:03:39:87:d0:a3:1a:d4:a0:96:
                    74:d7:79:ad:c6:e0:0f:a8:11:62:8a:fb:4f:81:7f:
                    6f:db:dc:b3:26:5a:47:46:db:11:6c:76:8b:fa:f9:
                    24:43:e4:8c:cf:80:dd:bd:e5:48:eb:3a:35:66:2e:
                    7f:c7:b5:7b:93:38:0d:08:83:5b:63:2b:54:21:4a:
                    a1:bb:06:c6:20:da:94:f8:51:91:24:ae:19:68:a2:
                    4f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F3:13:C0:0A:97:E7:B5:F9:30:6F:1F:86:17:A6:4E:D0:67:5B:39
            X509v3 Authority Key Identifier:
                keyid:49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3230322e37342e3233362e302f32322d3232203d3e20313331373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.74.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:c3:55:0d:92:6b:b6:9c:f9:37:3e:5b:ee:37:b8:35:a8:18:
         23:83:c4:9f:4a:64:69:02:43:7b:cd:41:9b:eb:f4:9f:b5:1a:
         86:7f:4b:44:1e:c0:9d:7e:c6:44:10:5a:1e:55:81:79:10:92:
         9f:d6:69:a0:3c:13:c7:ac:43:ea:c8:cf:b7:a3:86:66:6f:fa:
         9f:c6:24:46:1c:c7:77:b9:8b:67:0f:0b:ab:e0:ad:7e:1b:a7:
         1f:01:6a:76:73:81:e6:de:55:29:60:5b:48:61:fa:4c:ed:2f:
         17:a4:a6:c4:30:9b:ba:37:c2:b5:8d:7d:94:82:9e:01:b5:ca:
         99:14:7a:cb:dd:75:a2:23:6f:32:f6:58:2e:66:6a:ca:a1:14:
         22:99:d0:05:a5:15:96:7d:0a:b0:c4:20:74:cd:03:db:7e:59:
         56:15:c7:cb:9c:44:79:71:77:83:1f:14:26:80:9e:d8:31:46:
         e7:cf:3f:74:42:d7:b4:03:9c:e0:84:e0:3d:02:06:19:56:6a:
         ed:f2:9d:6e:01:65:8c:13:8d:3a:10:17:5c:15:c6:8e:2b:7e:
         ae:14:10:ad:ac:4e:8e:41:bd:f1:b8:e1:e1:d0:c0:cc:18:d1:
         a4:3c:43:8e:27:b9:20:62:d2:db:5e:7b:de:f0:9d:d5:01:d2:
         aa:3a:ad:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:17:39 2024 by rpki-client on console-ams.rpki-client.org