Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133372e302f32342d3234203d3e2034333832.roa
File:                     3230322e39332e3133372e302f32342d3234203d3e2034333832.roa (raw, json)
Hash identifier:          0ryTl1E+hG4VrMvtiBcFjm1rvNGAfZu/R72I7pIXWbw=
Subject key identifier:   A7:56:C8:3A:A2:96:9F:DB:B8:24:D3:FA:EC:CC:09:2A:F5:8E:15:C9
Certificate issuer:       /CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
Certificate serial:       08A64AFBC061A6D838F09DB0688FCCBC9C95B627
Authority key identifier: 01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133372e302f32342d3234203d3e2034333832.roa
Signing time:             Wed 21 Aug 2024 14:01:41 +0000
ROA not before:           Wed 21 Aug 2024 13:56:41 +0000
ROA not after:            Wed 20 Aug 2025 14:01:41 +0000
asID:                     4382
IP address blocks:        202.93.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl
                          rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:a6:4a:fb:c0:61:a6:d8:38:f0:9d:b0:68:8f:cc:bc:9c:95:b6:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
        Validity
            Not Before: Aug 21 13:56:41 2024 GMT
            Not After : Aug 20 14:01:41 2025 GMT
        Subject: CN=A756C83AA2969FDBB824D3FAECCC092AF58E15C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6a:88:d6:91:ba:f8:85:05:59:bd:d8:5e:72:
                    d3:8b:89:1a:e9:81:83:b4:92:93:75:b6:58:57:1e:
                    86:41:08:d7:e6:49:f7:08:35:18:a8:04:be:d8:7d:
                    78:0c:85:03:12:a6:7a:b6:86:f6:d3:35:33:e4:9e:
                    e4:34:2a:d4:ad:0f:1c:b0:1a:24:84:15:d7:f4:8c:
                    8e:4a:7d:cf:1c:93:20:29:27:8c:00:6b:b5:fd:5f:
                    d5:a2:b6:9b:4e:63:81:8a:98:6d:a2:f7:9e:49:53:
                    95:8c:74:39:a2:a3:05:84:4c:98:70:0d:43:c9:1c:
                    71:6b:ac:ef:79:85:1c:9c:c1:12:3c:57:ac:ca:92:
                    86:74:39:bd:39:60:b3:8a:3e:50:1e:23:4a:d2:40:
                    81:91:f5:19:07:62:4f:81:ca:56:3b:71:c6:58:30:
                    e4:f0:de:76:aa:b7:98:1f:c6:53:38:4b:ca:7f:41:
                    70:59:4c:f5:b9:83:ef:a3:52:77:84:0a:d8:fb:7e:
                    a0:83:f5:df:87:a6:13:76:dc:c0:82:5c:a6:8c:c2:
                    12:9a:db:97:fe:4e:b3:af:d0:7a:c7:36:2e:2c:9e:
                    d8:ee:9f:f3:41:bb:65:c2:79:40:8b:2c:0c:53:a1:
                    bd:6c:90:d4:2e:ff:60:f4:a3:48:e8:87:77:ad:c3:
                    6c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:56:C8:3A:A2:96:9F:DB:B8:24:D3:FA:EC:CC:09:2A:F5:8E:15:C9
            X509v3 Authority Key Identifier:
                keyid:01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133372e302f32342d3234203d3e2034333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:ee:c0:50:f6:c2:0e:09:03:fb:4c:bb:9e:81:b1:97:a4:16:
         cb:97:e4:4f:89:19:b0:2e:c2:4a:70:eb:30:5e:df:a7:a1:1c:
         d1:5e:42:5b:a7:39:1a:84:7b:90:60:20:02:ca:b7:54:e2:23:
         cd:0a:39:f4:44:2c:16:23:ed:b6:62:bb:bb:b1:ce:2a:cc:bb:
         a6:b0:38:be:be:1d:5d:b1:f1:64:51:f6:f4:a0:69:12:ea:f0:
         d6:92:00:bb:c9:19:2e:5a:c6:b6:55:5a:05:ff:7b:d2:d7:70:
         7c:13:03:83:bb:c8:9b:36:fd:22:8c:fb:2e:fb:a0:09:a4:c5:
         0d:e2:18:71:fd:c0:37:37:45:dc:0d:24:06:03:44:46:db:0b:
         a2:c6:09:2f:db:30:b1:3c:18:2b:aa:47:79:b5:03:ef:93:0d:
         de:ca:45:0d:a3:e5:05:98:0e:55:08:b7:88:5e:d0:d4:82:0d:
         e7:84:92:fb:e3:fe:6b:0e:84:b3:3b:c6:21:97:63:8a:b7:5e:
         08:14:c8:0e:d8:1a:04:61:c3:78:52:96:ac:9f:48:b2:5e:d0:
         a6:fa:34:42:e8:ce:b7:0e:74:df:9d:27:24:9b:68:a4:c3:6f:
         3f:d0:24:7e:8a:98:d5:f2:b3:43:51:bd:b9:8a:65:ea:6d:9e:
         a5:59:21:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:19 2024 by rpki-client on console-fra.rpki-client.org