Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3230322e37342e3233362e302f32342d3234203d3e20313331373735.roa
File:                     3230322e37342e3233362e302f32342d3234203d3e20313331373735.roa (raw, json)
Hash identifier:          o/v0EEtvoy8x4+MCvgVwINGATYzhBCUmPLvP98hN14I=
Subject key identifier:   A1:21:2F:00:F1:C8:AD:FF:6F:A2:DA:5E:37:A7:FF:0F:B1:54:C3:7B
Certificate issuer:       /CN=49CDCA308C289D688C649C2303BECB3ED76B5054
Certificate serial:       28B251BE6808A391FF298225E1B4955BF9165184
Authority key identifier: 49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3230322e37342e3233362e302f32342d3234203d3e20313331373735.roa
Signing time:             Mon 31 Jul 2023 00:05:39 +0000
ROA not before:           Mon 31 Jul 2023 00:00:39 +0000
ROA not after:            Mon 29 Jul 2024 00:05:39 +0000
asID:                     131775
IP address blocks:        202.74.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl
                          rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:b2:51:be:68:08:a3:91:ff:29:82:25:e1:b4:95:5b:f9:16:51:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49CDCA308C289D688C649C2303BECB3ED76B5054
        Validity
            Not Before: Jul 31 00:00:39 2023 GMT
            Not After : Jul 29 00:05:39 2024 GMT
        Subject: CN=A1212F00F1C8ADFF6FA2DA5E37A7FF0FB154C37B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:28:73:38:24:3d:0a:bb:a1:1f:bb:e0:c0:f0:
                    8d:67:e0:c9:9f:a2:8e:42:9f:84:30:00:9b:6d:c7:
                    25:f9:78:d8:ad:a9:e0:5d:98:3f:aa:0a:45:44:ca:
                    e2:fa:f2:fe:01:dc:50:fd:e0:67:82:a3:fd:f8:f4:
                    e2:64:1b:62:f8:00:c6:b3:d1:01:ff:f3:67:5e:bc:
                    21:fd:8e:45:f3:64:e4:a7:f1:7c:e3:31:f5:95:57:
                    ea:7f:fe:78:ba:72:1c:fa:b5:f1:a6:b9:ba:1a:b8:
                    ca:64:3c:03:85:ab:e2:05:67:0e:20:28:8f:f0:1e:
                    31:21:72:00:41:eb:a5:3d:d7:3e:20:c5:93:5e:1d:
                    76:8e:7a:ff:3a:79:16:01:99:97:5e:c8:5b:29:21:
                    4a:3c:74:2e:7a:3c:04:d2:02:11:70:e5:c4:a7:14:
                    d9:5f:19:41:86:24:eb:61:9f:5d:6a:40:17:73:ba:
                    a1:3b:07:8b:80:09:31:0e:25:9b:ac:f2:3a:47:b6:
                    78:50:44:d6:b1:8a:fd:53:51:e6:57:40:fa:f2:4a:
                    a7:bf:20:ab:82:5d:4c:29:87:54:b9:1a:51:1c:5f:
                    3e:3a:dc:96:c6:c4:0b:00:49:1a:68:7a:1d:da:82:
                    7a:ba:86:6f:24:1f:90:c6:63:d6:10:22:0b:67:83:
                    35:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:21:2F:00:F1:C8:AD:FF:6F:A2:DA:5E:37:A7:FF:0F:B1:54:C3:7B
            X509v3 Authority Key Identifier:
                keyid:49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3230322e37342e3233362e302f32342d3234203d3e20313331373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.74.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:0d:7c:41:01:f6:62:f6:99:87:ab:3d:2d:18:8b:08:20:a6:
         f5:b6:3f:f0:b0:5d:c6:54:db:b7:18:e2:11:d1:d2:19:92:80:
         8b:96:03:c9:5b:92:c3:e7:2d:5a:cd:e8:28:26:af:33:0a:4e:
         bb:34:c2:2b:b5:8d:1a:af:d5:8c:15:ef:7e:3e:d4:44:82:c1:
         29:09:57:95:7b:0f:db:75:2d:7a:5d:cc:d8:79:ea:d8:02:85:
         48:3e:e1:e5:8c:28:30:bb:98:1a:3b:5e:9f:37:a7:68:45:eb:
         3e:18:3b:19:a6:04:6b:f5:78:e3:e7:f9:d7:98:cc:14:a1:20:
         99:94:b5:5d:e8:1d:c7:72:06:ed:02:41:8a:4d:c7:d3:32:b7:
         4a:6a:73:03:fd:c5:e5:6e:d7:da:82:72:82:b6:31:b9:4a:67:
         8b:77:09:52:f8:55:2a:b4:bb:11:b5:5e:6a:65:5a:d7:6c:0a:
         76:41:70:f6:6f:d6:af:99:f2:3e:d0:e9:a7:76:9c:97:d2:05:
         c4:88:db:30:f8:97:52:af:70:49:f5:3d:97:9b:ed:52:72:8f:
         78:7d:4a:09:6b:a8:4f:e6:6a:dd:27:86:2d:16:4a:df:7d:3e:
         0e:bc:97:d0:fd:df:39:73:07:f1:19:2d:5e:ca:ff:db:c2:98:
         4f:54:32:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:17:39 2024 by rpki-client on console-ams.rpki-client.org