Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133382e302f32342d3234203d3e2034333832.roa
File:                     3230322e39332e3133382e302f32342d3234203d3e2034333832.roa (raw, json)
Hash identifier:          i7ui1WtpmLliCaq4bvCoJG4OxY2CxEoaQJ7HvITmLDA=
Subject key identifier:   51:D8:A5:E7:49:82:0F:EE:FA:57:DD:F5:BA:04:77:8D:C3:78:E5:78
Certificate issuer:       /CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
Certificate serial:       6D9E543283100E57BFCE8D34D8823F330353F4B8
Authority key identifier: 01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133382e302f32342d3234203d3e2034333832.roa
Signing time:             Wed 21 Aug 2024 14:01:41 +0000
ROA not before:           Wed 21 Aug 2024 13:56:41 +0000
ROA not after:            Wed 20 Aug 2025 14:01:41 +0000
asID:                     4382
IP address blocks:        202.93.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl
                          rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:9e:54:32:83:10:0e:57:bf:ce:8d:34:d8:82:3f:33:03:53:f4:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
        Validity
            Not Before: Aug 21 13:56:41 2024 GMT
            Not After : Aug 20 14:01:41 2025 GMT
        Subject: CN=51D8A5E749820FEEFA57DDF5BA04778DC378E578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0f:42:75:0c:5c:99:98:68:f6:25:d4:de:ea:
                    ba:8a:0c:92:58:f3:06:62:92:2d:89:e0:77:0c:68:
                    f0:83:3b:04:fa:c7:88:6b:fd:cd:81:a7:ab:a3:05:
                    fd:63:6f:6a:5a:7b:1c:34:59:6a:93:dd:f6:d8:68:
                    1d:e9:8d:e7:b7:61:3a:00:f4:5e:7e:8e:49:33:cb:
                    c3:f7:63:bd:30:83:af:dc:f9:95:01:6d:0c:96:fd:
                    5a:76:e0:bc:69:22:71:2f:be:e0:d7:f9:f0:f3:2a:
                    ea:6d:05:bb:78:f6:22:6f:e6:1e:39:5f:76:e8:88:
                    60:05:e1:6a:32:8a:04:95:95:96:ea:41:d7:84:fe:
                    9d:bb:93:a8:4b:56:cb:ef:9a:82:8b:4f:1c:11:6f:
                    67:a2:27:09:40:cb:4c:e7:ab:fe:6b:d6:4c:c3:ba:
                    7b:08:39:2a:93:93:88:ed:cf:ae:5c:fa:3a:86:e3:
                    38:74:ce:89:2c:c0:94:9a:0e:e9:a3:ee:26:f7:d0:
                    e2:88:60:14:31:59:2d:2e:d2:74:1a:ef:1c:63:0d:
                    a9:f3:0a:84:da:37:a5:3b:57:a4:58:5d:84:7b:28:
                    89:a3:c4:f7:c7:c9:89:ec:7d:31:e9:5a:37:4a:44:
                    25:6b:c9:e0:32:ae:35:b0:1f:66:ca:db:3a:4b:1c:
                    18:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D8:A5:E7:49:82:0F:EE:FA:57:DD:F5:BA:04:77:8D:C3:78:E5:78
            X509v3 Authority Key Identifier:
                keyid:01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133382e302f32342d3234203d3e2034333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:78:b7:e4:e1:5d:d9:8f:1b:e5:ff:f6:90:7c:2c:df:e5:ae:
         b3:30:e8:ef:81:4a:e0:9a:84:cd:76:24:61:f1:57:c7:68:67:
         a7:78:aa:dc:e8:75:57:7d:6a:62:e5:4e:78:df:d9:e2:45:41:
         50:48:62:be:e4:56:91:d8:4f:90:68:c8:e3:f5:db:6e:17:a9:
         6b:7b:0d:56:c8:b6:ab:a5:d8:4a:c7:c6:69:db:ab:2a:64:7c:
         96:fc:90:17:4d:c7:30:a5:ab:4a:35:38:63:7a:a0:be:7b:f5:
         e5:28:41:d6:6f:a0:0a:d2:0d:b5:e7:20:34:cc:26:9f:3e:cf:
         f8:8b:02:49:a8:50:d7:e9:4e:68:99:36:3f:b9:9f:f6:e0:34:
         4b:88:2c:3f:bb:1d:83:b0:d1:e1:2d:92:67:df:e0:da:cd:56:
         21:31:64:4f:8a:38:01:41:cf:df:dc:12:94:67:21:4b:d3:af:
         d6:e2:01:49:07:5e:59:da:ce:d2:0d:34:4f:3f:b0:64:5f:d0:
         0a:dd:dd:89:3b:ae:6c:e8:61:de:88:62:ea:54:4e:ee:7d:df:
         7c:ab:4b:4f:b2:4a:60:0b:06:01:d0:46:6d:d6:a7:5a:d3:9c:
         f2:c4:4e:df:17:7c:d8:ce:d4:1e:c0:db:0b:4b:bf:d8:d2:04:
         16:21:df:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:03 2024 by rpki-client on console-ams.rpki-client.org