Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3230322e39312e31312e302f32342d3234203d3e203338313530.roa
File:                     3230322e39312e31312e302f32342d3234203d3e203338313530.roa (raw, json)
Hash identifier:          t94nbHda1ZlB5Svw5eATejFXQCzX8y8ZKvAurl4HFgc=
Subject key identifier:   FF:81:2C:34:98:D1:86:82:F1:E5:3E:99:1C:3B:0B:FE:9A:36:F6:1F
Certificate issuer:       /CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
Certificate serial:       2074B0EB2F8E84DEADAAC22D01D64E2E8F596913
Authority key identifier: 2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3230322e39312e31312e302f32342d3234203d3e203338313530.roa
Signing time:             Mon 01 Jul 2024 01:03:28 +0000
ROA not before:           Mon 01 Jul 2024 00:58:28 +0000
ROA not after:            Mon 30 Jun 2025 01:03:28 +0000
asID:                     38150
IP address blocks:        202.91.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl
                          rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 06:22:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:74:b0:eb:2f:8e:84:de:ad:aa:c2:2d:01:d6:4e:2e:8f:59:69:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
        Validity
            Not Before: Jul  1 00:58:28 2024 GMT
            Not After : Jun 30 01:03:28 2025 GMT
        Subject: CN=FF812C3498D18682F1E53E991C3B0BFE9A36F61F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:31:27:5c:76:e7:07:d8:2b:9f:38:e9:3e:3a:
                    89:e5:80:7b:6c:94:07:16:33:b5:6c:51:02:b5:69:
                    0f:b3:32:4e:c5:db:c9:92:fc:71:ab:8f:6d:a8:c2:
                    95:48:d2:3d:eb:fd:67:86:b0:a5:e5:cd:f7:44:6d:
                    5d:27:35:61:78:1b:5e:a1:9e:45:e2:e2:65:e6:b0:
                    9e:3b:f6:a5:91:e2:3c:a2:68:ad:4a:a7:e6:38:28:
                    f1:6c:46:de:a8:d2:b2:9d:d2:33:f8:a2:46:40:78:
                    e8:fd:cf:e8:62:90:8c:ea:7e:e8:08:6c:a5:ad:31:
                    26:68:1b:f0:f5:27:55:06:1a:a6:cb:e8:f0:09:f2:
                    53:c6:50:a9:9f:33:5c:1b:30:27:b0:95:1b:20:57:
                    f7:b7:b5:ca:28:ef:27:b7:f4:21:d8:23:4b:c9:f8:
                    f7:b6:d2:7d:75:7c:9f:cc:42:49:8d:64:aa:6a:2c:
                    db:d1:07:ef:b2:dd:d2:e1:07:57:30:aa:da:ba:2a:
                    d8:9a:05:b1:40:40:f7:83:8b:e6:c9:30:7e:57:d7:
                    dc:24:dc:0f:d1:22:6a:73:ae:fc:97:24:a1:df:2e:
                    86:93:e2:fd:9a:23:b8:a8:5c:36:d4:e8:34:09:48:
                    04:99:e5:91:d6:d5:c8:db:b9:3e:b3:a2:81:7c:f7:
                    12:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:81:2C:34:98:D1:86:82:F1:E5:3E:99:1C:3B:0B:FE:9A:36:F6:1F
            X509v3 Authority Key Identifier:
                keyid:2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3230322e39312e31312e302f32342d3234203d3e203338313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.91.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:b6:26:25:d7:66:36:0e:55:91:20:70:ee:eb:8f:6f:57:4f:
         e7:f3:d0:d5:61:2b:d7:0a:95:1d:98:d9:6a:98:77:f8:4d:c0:
         74:03:bc:9f:c5:a5:52:38:c0:fa:60:a5:d6:42:e1:3b:03:27:
         82:0f:ee:53:42:70:36:c8:3a:1d:d2:06:49:e1:d6:a6:8c:86:
         25:50:60:48:c3:c8:59:d9:24:38:7f:94:da:39:ac:a5:67:74:
         44:77:75:6f:46:ce:0f:9e:99:cd:09:52:9b:47:39:f7:e6:af:
         bb:4f:ae:68:54:c2:aa:11:e0:bd:d9:32:44:30:87:22:b8:52:
         d1:6b:27:75:38:ed:95:4c:2d:ad:87:40:47:89:bc:ad:5a:98:
         67:3c:3c:e9:63:c5:e4:f0:7d:11:5c:bd:af:7a:3c:72:3e:cd:
         38:04:1a:18:2a:d5:d4:63:48:cd:04:81:07:ab:35:79:93:48:
         17:20:29:71:4f:69:2d:a7:0b:42:5c:01:06:7a:fd:c7:8a:1f:
         8a:87:7d:01:0b:c1:93:f5:fc:af:05:15:0f:11:4d:b4:2f:ef:
         06:77:ec:41:c9:a5:54:5e:4a:e6:4c:17:db:bf:8e:f4:97:a1:
         0e:f2:79:f2:8f:a4:ca:83:81:80:ab:c2:1e:8c:50:2a:b7:60:
         83:7b:68:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:59:38 2024 by rpki-client on console-ams.rpki-client.org