Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133392e302f32342d3234203d3e2034333832.roa
File:                     3230322e39332e3133392e302f32342d3234203d3e2034333832.roa (raw, json)
Hash identifier:          zcqzLbHabsEm4N30pevq2gk3xw1Hw37BzX9k6SHSLKQ=
Subject key identifier:   58:15:90:6E:F4:AB:2E:69:E5:24:F4:23:CC:95:CB:18:19:B2:2A:0D
Certificate issuer:       /CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
Certificate serial:       555B53C29052D329B7116B67E30785DB2EAF2B53
Authority key identifier: 01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133392e302f32342d3234203d3e2034333832.roa
Signing time:             Wed 20 Sep 2023 12:00:00 +0000
ROA not before:           Wed 20 Sep 2023 11:55:00 +0000
ROA not after:            Wed 18 Sep 2024 12:00:00 +0000
asID:                     4382
IP address blocks:        202.93.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl
                          rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Apr 2024 20:55:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:5b:53:c2:90:52:d3:29:b7:11:6b:67:e3:07:85:db:2e:af:2b:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
        Validity
            Not Before: Sep 20 11:55:00 2023 GMT
            Not After : Sep 18 12:00:00 2024 GMT
        Subject: CN=5815906EF4AB2E69E524F423CC95CB1819B22A0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:99:8a:dd:42:5f:70:e7:cd:fc:59:6b:69:0e:
                    fd:a4:b1:b2:c4:9c:02:58:60:45:cd:e6:ec:90:05:
                    ae:8d:dd:53:c5:3e:43:b8:d5:f4:f0:d6:cc:78:be:
                    2f:c2:fd:e0:3c:3f:2a:98:3f:c4:d6:16:b2:09:09:
                    29:9c:1b:b1:d5:58:7e:f1:a0:de:9b:5b:ca:29:d9:
                    d0:3a:2e:1a:c4:85:cc:31:f2:d9:11:12:aa:90:13:
                    10:8b:cf:af:45:95:3f:c4:c6:0f:c9:4a:43:04:fe:
                    60:3e:e6:9e:67:94:00:52:55:92:bc:78:dd:2e:e4:
                    c4:f4:d8:d8:77:e5:f3:25:0d:6d:88:29:c9:01:18:
                    d4:c8:a1:1a:86:c5:b8:d7:fe:2d:5c:5c:b3:56:55:
                    0a:8a:71:42:9b:5f:02:3e:f0:84:91:75:74:db:0b:
                    b4:3e:3a:87:af:6e:55:08:83:46:65:bd:2e:6b:51:
                    e4:04:d3:79:bd:e0:a1:49:dd:65:0c:bf:f0:03:72:
                    c2:92:dc:5d:2e:d9:e9:98:f5:73:a5:85:c2:f9:03:
                    98:0e:b7:e6:97:fa:12:3a:b0:99:4f:2f:8b:55:29:
                    de:11:c0:3a:52:20:2b:12:39:eb:54:0b:63:eb:35:
                    34:84:78:d5:bd:33:06:1a:04:58:e8:1f:f3:e6:72:
                    ed:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:15:90:6E:F4:AB:2E:69:E5:24:F4:23:CC:95:CB:18:19:B2:2A:0D
            X509v3 Authority Key Identifier:
                keyid:01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133392e302f32342d3234203d3e2034333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:6e:eb:2d:53:9b:81:31:3e:af:ed:cc:e7:57:10:be:c7:8f:
         27:ba:a6:6a:f3:82:47:6e:97:84:e1:2f:f5:59:4a:ee:32:aa:
         b1:7a:fa:37:dc:11:2a:e8:45:af:fd:7c:ae:ea:4c:ba:a4:6e:
         8a:c7:32:ad:e1:9e:f1:52:1c:d2:b2:f9:26:ad:8f:4b:4c:26:
         88:93:f5:3a:92:06:73:f9:ab:1c:58:9f:7a:e0:8f:08:bb:38:
         d0:1d:34:69:35:97:ef:21:ef:19:c2:41:8a:4d:7e:31:68:7a:
         e6:46:46:b1:e6:a7:f4:b2:c1:53:ac:95:b1:39:b4:07:40:5b:
         8a:ab:77:73:2c:f9:79:81:75:27:0e:6b:a4:f4:35:59:a4:80:
         d2:3a:ca:c3:f4:20:ee:63:73:7a:57:53:6c:de:95:3a:58:f8:
         15:5f:a3:d3:6d:36:ce:a7:22:a6:11:ef:67:55:ad:c0:56:75:
         b9:06:15:c6:a2:89:f1:34:69:41:7f:46:a1:1a:8c:8d:03:32:
         f5:d6:41:17:48:6b:e1:51:8c:1b:a2:dd:66:dd:e9:5c:53:30:
         e7:8e:45:c8:ae:51:9c:e9:ab:65:80:1c:b8:17:04:bb:1b:dc:
         ec:8d:bb:0c:3d:b2:52:91:d9:80:14:83:7f:7d:e1:be:4b:7a:
         65:09:a2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 16:38:54 2024 by rpki-client on console-ams.rpki-client.org