Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3230322e37342e3233382e302f32342d3234203d3e20313331373735.roa
File:                     3230322e37342e3233382e302f32342d3234203d3e20313331373735.roa (raw, json)
Hash identifier:          4oKdwZIlRvxquKnpTP6Rcav/mwPuMxn4cIdXwz7Emuk=
Subject key identifier:   B4:FD:D2:1D:D3:74:A3:6F:6E:E8:7F:FF:D9:E9:27:DD:3D:82:9A:E4
Certificate issuer:       /CN=49CDCA308C289D688C649C2303BECB3ED76B5054
Certificate serial:       33BD8B85A4C8FD4D1EB8002CD5B340003CE54C0D
Authority key identifier: 49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3230322e37342e3233382e302f32342d3234203d3e20313331373735.roa
Signing time:             Mon 31 Jul 2023 00:05:39 +0000
ROA not before:           Mon 31 Jul 2023 00:00:39 +0000
ROA not after:            Mon 29 Jul 2024 00:05:39 +0000
asID:                     131775
IP address blocks:        202.74.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl
                          rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:bd:8b:85:a4:c8:fd:4d:1e:b8:00:2c:d5:b3:40:00:3c:e5:4c:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49CDCA308C289D688C649C2303BECB3ED76B5054
        Validity
            Not Before: Jul 31 00:00:39 2023 GMT
            Not After : Jul 29 00:05:39 2024 GMT
        Subject: CN=B4FDD21DD374A36F6EE87FFFD9E927DD3D829AE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2d:d1:27:9f:3c:69:77:f1:6f:c3:59:f4:03:
                    b3:a6:ae:9a:e0:59:92:5f:d3:f9:8d:87:c1:a4:81:
                    b9:63:24:38:df:2f:73:6c:c2:06:34:9a:8d:19:e4:
                    f2:66:84:a1:e7:73:cc:ad:bb:19:44:ac:9b:66:db:
                    9a:dc:63:ea:77:94:c1:0a:d3:0f:07:5e:67:42:c6:
                    6b:8c:7c:79:c3:41:af:80:fd:2d:cc:ec:53:b6:d7:
                    32:4f:e8:62:30:ca:a2:fd:06:ae:e3:2e:1a:b0:ff:
                    91:cc:12:9c:91:6c:bd:ec:7c:8b:71:23:3e:9f:f2:
                    ae:15:62:ad:c1:26:3d:69:c1:8a:d7:b6:64:e8:4b:
                    98:e0:a5:d9:19:60:89:fb:bf:af:e4:84:1f:ed:9e:
                    58:34:f6:34:03:1d:32:2b:0e:3b:3a:64:3c:4a:13:
                    89:5b:59:79:ed:9b:a6:dc:32:f3:06:2d:c6:76:20:
                    1c:35:cd:38:26:5f:cb:90:37:c9:c4:ca:48:92:50:
                    1b:e9:b5:9d:f6:cc:9e:e1:2f:d1:36:52:7c:b5:45:
                    5c:0f:80:82:ef:1d:99:cf:9f:80:36:ba:bc:45:72:
                    94:af:05:c9:e3:4d:03:5d:e6:2b:fc:e5:1d:73:7f:
                    c3:e7:8d:0a:c3:3f:8a:31:d6:df:7e:f3:ef:30:cc:
                    62:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FD:D2:1D:D3:74:A3:6F:6E:E8:7F:FF:D9:E9:27:DD:3D:82:9A:E4
            X509v3 Authority Key Identifier:
                keyid:49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3230322e37342e3233382e302f32342d3234203d3e20313331373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.74.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:86:5a:5c:ef:8f:e7:29:31:16:26:83:07:29:55:45:bc:40:
         a6:08:9f:e7:0d:c9:48:f7:db:75:d4:bf:a5:6a:fd:16:41:40:
         a6:c8:8c:60:61:c5:11:60:60:de:a6:f1:2b:b4:af:77:e3:4d:
         4f:97:34:eb:df:8e:52:62:b5:5d:6b:7a:3b:98:67:bf:01:8d:
         e0:6c:74:c3:aa:41:ce:30:7f:c0:98:ed:6f:f3:a9:67:c3:54:
         cf:e5:5b:0b:4b:93:a1:02:55:49:4f:65:52:06:d8:00:54:44:
         8d:74:d0:20:4d:1e:b7:93:4a:69:51:6d:7d:00:2b:a6:34:98:
         ed:9b:9b:31:9c:33:68:28:fd:c6:c2:8a:b0:9b:c6:bb:12:64:
         2f:26:78:4d:a7:bc:17:3f:50:94:d7:dd:90:3a:e2:95:58:08:
         c7:db:5c:11:0b:05:e0:63:01:02:b1:a4:51:b1:44:39:37:be:
         af:36:67:76:8b:16:6f:d1:7a:00:03:01:e2:30:34:7f:85:e3:
         99:36:c0:18:69:15:87:8b:58:97:c2:da:53:31:79:6b:f0:87:
         54:5a:8e:af:eb:5c:03:21:62:0c:98:51:e0:f5:ff:8f:f0:22:
         ee:7c:8e:b3:08:26:7b:3b:d8:8b:93:a2:a4:f8:3c:4a:ea:81:
         8d:2d:0e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:17:39 2024 by rpki-client on console-ams.rpki-client.org