Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133342e302f32342d3234203d3e2034333832.roa
File:                     3230322e39332e3133342e302f32342d3234203d3e2034333832.roa (raw, json)
Hash identifier:          TBXtS1xzjSC3kwLGqaOfy37h09GiHBH30s0U9pgLaqQ=
Subject key identifier:   E1:20:40:9E:DA:65:D0:E6:30:E5:4A:F0:39:27:D6:46:F6:DD:70:FB
Certificate issuer:       /CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
Certificate serial:       1CD5C2AB50EFE471D883AC27CA7130CA42995EAD
Authority key identifier: 01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133342e302f32342d3234203d3e2034333832.roa
Signing time:             Wed 21 Aug 2024 14:01:42 +0000
ROA not before:           Wed 21 Aug 2024 13:56:42 +0000
ROA not after:            Wed 20 Aug 2025 14:01:42 +0000
asID:                     4382
IP address blocks:        202.93.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl
                          rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:d5:c2:ab:50:ef:e4:71:d8:83:ac:27:ca:71:30:ca:42:99:5e:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
        Validity
            Not Before: Aug 21 13:56:42 2024 GMT
            Not After : Aug 20 14:01:42 2025 GMT
        Subject: CN=E120409EDA65D0E630E54AF03927D646F6DD70FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:13:b0:c3:3d:42:19:69:11:4b:03:e8:4a:71:
                    fc:3b:24:2d:a3:86:80:9a:76:b2:d2:d5:aa:de:47:
                    6c:9b:93:d9:3f:ac:ee:85:f3:10:c8:fc:ac:a9:11:
                    28:76:67:23:23:16:86:1c:3b:fe:e3:fd:d4:bd:ac:
                    b4:42:cb:96:df:2a:1b:67:df:d8:09:04:ed:d4:40:
                    23:38:58:ee:8e:96:3f:1f:cf:0a:07:e3:36:5c:01:
                    d9:d9:8f:d1:cb:71:72:92:1d:3c:5f:d4:dc:85:84:
                    0e:a3:5b:a8:3c:63:26:17:36:6a:06:74:53:9e:f4:
                    7c:fd:a5:5b:44:a2:73:b9:ec:3b:62:fc:64:46:df:
                    af:9b:46:d5:8a:29:36:2f:3d:ee:7a:7f:4b:4f:7b:
                    da:75:b5:ff:ff:d2:e3:31:49:e0:a4:29:3f:74:2c:
                    f9:ce:53:ef:58:3a:2d:90:65:62:c9:40:64:69:9d:
                    7e:b5:72:49:59:8b:ba:9d:b2:df:b4:58:51:60:34:
                    2f:2a:67:ae:87:33:50:4a:ca:42:e8:02:57:36:f7:
                    f5:b4:f1:3b:49:4d:3a:80:6c:22:3d:38:66:db:c7:
                    c9:3e:07:7e:f2:93:5e:99:27:ac:c2:43:8f:9b:7c:
                    c3:52:f4:f2:26:2d:d3:b1:58:9a:c1:14:7f:33:cc:
                    64:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:20:40:9E:DA:65:D0:E6:30:E5:4A:F0:39:27:D6:46:F6:DD:70:FB
            X509v3 Authority Key Identifier:
                keyid:01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133342e302f32342d3234203d3e2034333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:22:89:18:23:01:f3:02:2f:81:15:80:1f:71:f2:22:2d:0c:
         dc:95:6e:ca:04:46:99:35:e4:3c:bf:e8:9e:ff:a7:8a:b4:90:
         a2:ba:70:17:19:4e:b3:3c:5b:85:ad:8f:e6:91:7b:c0:dd:d4:
         60:72:fe:86:71:3c:a0:81:3f:11:54:96:09:32:1e:de:ed:70:
         16:80:68:a2:aa:7c:98:ac:49:47:9e:80:25:9d:0d:98:a2:3c:
         d2:22:21:6a:47:2e:4f:08:f3:26:59:7e:a2:aa:d2:09:a3:a8:
         c6:cf:5d:c5:ef:3b:75:50:65:d4:7a:b5:c1:ef:da:f1:14:d8:
         ff:68:85:bb:71:6f:1b:db:60:f0:69:1d:b9:b8:90:73:be:90:
         c2:be:6d:56:13:45:05:21:c1:c2:e0:82:c9:fc:3a:1c:72:cc:
         d3:31:98:06:c0:c7:b3:5c:8f:b2:6f:70:62:b1:67:97:6e:55:
         fb:1d:4c:9d:fc:c8:81:e2:3a:e4:54:2f:a9:02:36:72:69:d1:
         32:ff:a3:14:5a:ae:54:43:02:ab:3a:e1:21:5e:bd:8a:38:f4:
         7b:43:31:95:47:c7:7e:65:a5:45:c0:4f:a9:96:71:95:ac:78:
         20:05:f3:1d:a1:f3:3f:3d:5b:35:da:b6:ed:10:44:0d:f0:98:
         c4:b8:fd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:03 2024 by rpki-client on console-ams.rpki-client.org