Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133392e302f32342d3234203d3e2034333832.roa
File:                     3230322e39332e3133392e302f32342d3234203d3e2034333832.roa (raw, json)
Hash identifier:          ndgkYRqkUb1Ua/CNSd6RHtwIAdt+1wL8PAPjL4e5Dv8=
Subject key identifier:   97:B8:6D:37:58:49:8F:D2:E8:2A:61:CD:A2:9F:47:4C:69:AF:35:B3
Certificate issuer:       /CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
Certificate serial:       66CDD89643FF88987F72B283BA2197FEE667E1E4
Authority key identifier: 01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133392e302f32342d3234203d3e2034333832.roa
Signing time:             Wed 21 Aug 2024 13:00:00 +0000
ROA not before:           Wed 21 Aug 2024 12:55:00 +0000
ROA not after:            Wed 20 Aug 2025 13:00:00 +0000
asID:                     4382
IP address blocks:        202.93.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl
                          rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:cd:d8:96:43:ff:88:98:7f:72:b2:83:ba:21:97:fe:e6:67:e1:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
        Validity
            Not Before: Aug 21 12:55:00 2024 GMT
            Not After : Aug 20 13:00:00 2025 GMT
        Subject: CN=97B86D3758498FD2E82A61CDA29F474C69AF35B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:56:dd:d7:27:47:62:18:0c:5d:fd:5e:2e:a6:
                    aa:77:15:f9:86:7b:ec:b9:33:de:62:f8:38:e6:32:
                    0e:73:c5:40:fe:a2:21:bc:20:ca:49:28:92:46:e4:
                    fc:9c:7f:f2:1c:35:31:a4:bf:e7:7f:90:4b:e7:59:
                    fd:57:53:ec:fd:66:8c:3d:d0:dc:65:19:71:b9:25:
                    06:ef:75:b4:ee:f7:92:18:68:1d:ed:f1:e4:3f:e8:
                    5d:af:fa:96:62:b8:8c:f0:10:38:0a:cf:5b:40:a0:
                    13:b5:3e:8c:ec:ed:1c:18:f6:f9:f6:ff:85:34:73:
                    27:39:5a:51:e8:e5:03:bd:3a:5f:15:5d:e8:66:93:
                    d3:3e:49:38:37:f3:a5:2f:54:9b:b6:b8:b6:35:7f:
                    d7:26:a5:9a:73:dd:1a:2c:8e:31:ad:fc:e2:a5:c3:
                    89:df:94:95:7d:6a:fa:b2:ce:0c:ed:5e:80:f0:b3:
                    99:6e:b1:bd:5f:1b:41:22:3b:f0:e3:d2:d9:d5:13:
                    6b:ef:14:69:a6:e1:57:9d:ab:bf:4a:76:81:08:9e:
                    30:88:9c:a8:84:62:2b:e4:f5:d6:6e:f3:e2:1f:48:
                    e7:da:ab:bd:b5:4e:7e:b4:3b:f5:12:ca:d6:6e:29:
                    b6:29:e9:26:bc:dd:48:15:cd:89:0e:79:a9:1d:02:
                    a5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B8:6D:37:58:49:8F:D2:E8:2A:61:CD:A2:9F:47:4C:69:AF:35:B3
            X509v3 Authority Key Identifier:
                keyid:01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133392e302f32342d3234203d3e2034333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:36:6b:c2:fa:81:f1:4b:1e:c1:38:85:94:38:65:4b:71:d1:
         88:16:71:fa:fe:90:fb:c1:2a:a9:49:24:47:dd:4d:5e:98:c2:
         be:79:1f:13:a8:de:ba:10:3a:e6:32:3d:87:00:a1:ff:87:91:
         9c:e0:da:19:35:45:6d:c4:75:83:6f:5c:86:f4:48:f1:d5:c4:
         5c:ea:90:bf:19:aa:b2:45:46:a2:78:64:f4:18:b7:4c:ed:d9:
         a3:02:ad:a0:0c:d9:47:81:a3:cf:90:6c:1b:20:1c:25:2b:18:
         3d:55:96:38:67:4f:63:46:d9:ca:11:18:1d:d4:57:ec:e0:38:
         84:fc:11:90:f6:b6:65:54:c2:1e:6e:17:a0:b7:89:d7:47:a0:
         39:af:5e:39:68:6f:6f:ae:1d:c3:d9:2a:04:58:60:0a:bc:5e:
         8a:6d:a0:c1:ae:4a:ea:59:a0:87:75:dc:cd:b2:73:a2:26:69:
         52:4f:34:44:50:3a:37:23:f1:06:5f:6f:88:08:22:37:b8:d5:
         5d:37:47:d9:a1:90:7a:ec:99:20:4a:15:53:7f:66:8d:85:a8:
         8d:ff:98:9e:34:65:2e:9a:24:d5:d8:a7:27:00:63:4d:96:d8:
         03:8a:6b:e5:06:54:d3:da:f3:ae:3d:c2:24:c7:c1:f8:da:4d:
         1d:2f:30:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:03 2024 by rpki-client on console-ams.rpki-client.org