Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3230322e37342e3233362e302f32332d3233203d3e20313331373735.roa
File:                     3230322e37342e3233362e302f32332d3233203d3e20313331373735.roa (raw, json)
Hash identifier:          4uMamX0asJNHfmB+VEIpPAkZtIHOL88Oi0PZyRYxa9c=
Subject key identifier:   C6:F5:D7:34:F9:41:CC:88:07:F0:99:1F:E3:79:98:EF:D5:27:B2:66
Certificate issuer:       /CN=49CDCA308C289D688C649C2303BECB3ED76B5054
Certificate serial:       51DD26600F3FFF0933F9B84C53C8F1D9A5B100F3
Authority key identifier: 49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3230322e37342e3233362e302f32332d3233203d3e20313331373735.roa
Signing time:             Sat 09 Sep 2023 14:00:01 +0000
ROA not before:           Sat 09 Sep 2023 13:55:01 +0000
ROA not after:            Sat 07 Sep 2024 14:00:01 +0000
asID:                     131775
IP address blocks:        202.74.236.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl
                          rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 05:49:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:dd:26:60:0f:3f:ff:09:33:f9:b8:4c:53:c8:f1:d9:a5:b1:00:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49CDCA308C289D688C649C2303BECB3ED76B5054
        Validity
            Not Before: Sep  9 13:55:01 2023 GMT
            Not After : Sep  7 14:00:01 2024 GMT
        Subject: CN=C6F5D734F941CC8807F0991FE37998EFD527B266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:41:46:f3:80:f0:5b:d5:ce:34:62:48:12:bf:
                    60:8e:c8:17:d0:35:8c:15:3b:f5:0d:9f:80:4a:b8:
                    ac:c9:79:88:f4:a3:df:91:a6:cf:23:07:2c:7b:be:
                    57:72:89:bc:94:d5:56:6c:66:7b:c3:b2:82:c4:98:
                    e4:cc:87:c2:b1:71:e3:bf:de:48:54:76:05:9d:05:
                    a3:fe:bb:49:60:9c:f6:1d:d5:a1:52:91:2f:9e:8e:
                    a8:e1:13:d8:89:3d:0b:e0:76:9d:89:d4:0c:2d:83:
                    71:13:92:01:89:ca:f9:64:01:10:e2:d1:b9:68:f1:
                    10:05:59:3a:24:30:7c:af:26:83:f1:89:8e:77:d0:
                    99:78:17:3d:ab:a5:ce:7d:5a:61:77:15:41:f1:12:
                    25:86:a6:ff:4c:04:89:35:ec:4f:39:32:34:84:a4:
                    0b:13:b8:96:cb:d1:28:e7:b0:39:e2:f9:fa:5b:7d:
                    47:45:56:b4:8e:c8:f1:1d:dc:c3:d2:ef:47:af:30:
                    ee:9b:1f:2d:4a:89:f6:65:e6:0c:1f:4c:af:df:9a:
                    94:16:5d:36:ed:db:b4:91:b0:61:1e:de:32:ef:1e:
                    d2:1f:bc:9b:17:0b:81:f8:02:7c:76:ff:30:1a:9b:
                    80:83:ba:18:48:a1:41:b0:7b:1e:1a:fb:f5:3d:36:
                    31:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F5:D7:34:F9:41:CC:88:07:F0:99:1F:E3:79:98:EF:D5:27:B2:66
            X509v3 Authority Key Identifier:
                keyid:49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3230322e37342e3233362e302f32332d3233203d3e20313331373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.74.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:61:05:7e:de:90:e9:b7:af:a3:d1:60:41:fb:a2:3c:b6:ad:
         85:8b:fe:60:45:dc:ad:94:10:8e:f3:f3:d9:c4:52:ce:22:59:
         cf:43:95:a0:c2:9d:ae:07:80:b0:e3:c8:bb:43:cc:82:52:51:
         1b:2d:77:f6:be:5a:35:51:1e:2d:27:43:bd:68:a9:f2:a0:f7:
         1f:df:4d:ce:ac:90:ef:b1:c7:88:9e:aa:49:1c:ac:e1:d5:e9:
         18:bc:6a:14:f6:36:53:25:a8:a4:9e:34:77:fc:6c:aa:04:e5:
         43:3f:9a:e5:28:d3:17:e5:60:df:cd:9c:cb:2e:0e:2b:d5:7f:
         d4:01:15:9d:9e:92:b7:e4:0c:0d:3e:69:07:13:50:e0:ff:34:
         92:31:5c:ad:c4:64:a8:e4:9e:6a:c6:78:24:64:29:c3:45:b1:
         66:14:83:9c:ae:6d:30:45:95:b3:93:69:20:e5:4d:2c:e1:b8:
         cc:f1:28:0f:88:91:71:a1:b8:81:5d:f0:d0:26:2a:97:63:e2:
         88:af:9a:02:14:f1:cc:1e:03:bb:a8:f9:76:26:fc:d3:31:c1:
         34:8b:3c:15:e5:33:a4:cb:4e:4d:6d:28:bf:9e:26:ba:3e:4d:
         13:85:7d:19:76:e9:48:01:f2:cb:cf:1a:f2:c2:14:d5:5a:17:
         6e:85:2b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 05:54:35 2024 by rpki-client on console-ams.rpki-client.org