Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3134302e302f32342d3234203d3e2034333832.roa
File:                     3230322e39332e3134302e302f32342d3234203d3e2034333832.roa (raw, json)
Hash identifier:          tyd06R+4HHVBIJKdI6hJNZndkBBBI3S4VRSvra/Gtys=
Subject key identifier:   10:8E:1B:F6:22:1D:68:91:C4:62:53:C0:C4:24:38:42:A9:9A:B6:96
Certificate issuer:       /CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
Certificate serial:       5B1B237EE86D017B2A1A5034233E0E54394F423E
Authority key identifier: 01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3134302e302f32342d3234203d3e2034333832.roa
Signing time:             Wed 21 Aug 2024 13:00:00 +0000
ROA not before:           Wed 21 Aug 2024 12:55:00 +0000
ROA not after:            Wed 20 Aug 2025 13:00:00 +0000
asID:                     4382
IP address blocks:        202.93.140.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl
                          rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:1b:23:7e:e8:6d:01:7b:2a:1a:50:34:23:3e:0e:54:39:4f:42:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
        Validity
            Not Before: Aug 21 12:55:00 2024 GMT
            Not After : Aug 20 13:00:00 2025 GMT
        Subject: CN=108E1BF6221D6891C46253C0C4243842A99AB696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:21:50:e8:9e:fb:08:40:3d:d1:06:29:a2:75:
                    3a:cb:d2:06:be:bc:9b:75:78:a3:e1:8f:3e:c2:eb:
                    2d:c0:18:1e:c2:61:f9:81:45:b0:c8:05:2e:45:ff:
                    a4:11:46:1c:b1:94:cf:68:c6:f3:87:98:52:e2:23:
                    a8:36:64:92:3c:65:52:0b:55:62:59:10:9d:88:38:
                    c7:74:8e:a4:f6:a6:50:fa:15:6f:e8:ea:e7:c9:95:
                    1a:85:a7:ef:1f:3d:b1:53:a7:e5:40:be:67:1b:71:
                    27:63:27:4f:f9:e4:92:61:44:f8:de:a3:20:b6:8f:
                    ab:6b:ec:66:eb:3c:a4:fa:21:f7:36:12:08:3b:f7:
                    19:c4:4e:77:4c:00:6f:78:d5:65:8d:f4:41:f6:35:
                    41:60:5f:c0:66:cc:e4:b6:d7:e3:c4:08:16:3b:af:
                    c1:fe:1f:43:ef:33:47:70:ef:43:38:7e:e2:da:73:
                    6a:c4:7c:18:d5:55:cd:d5:53:2a:ae:c6:f4:0d:81:
                    92:60:c3:a8:6c:5e:38:ee:ed:dc:5a:64:7a:f2:58:
                    4d:47:c2:2b:5e:82:98:95:6e:58:4d:91:76:12:75:
                    fc:ea:b2:6b:7c:cc:04:2b:df:93:51:66:ea:8a:0c:
                    7d:1a:2b:84:0a:86:61:1d:aa:52:ab:1b:c1:84:c5:
                    87:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:8E:1B:F6:22:1D:68:91:C4:62:53:C0:C4:24:38:42:A9:9A:B6:96
            X509v3 Authority Key Identifier:
                keyid:01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3134302e302f32342d3234203d3e2034333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:ec:47:b9:26:2e:39:82:04:f6:2a:bb:f4:69:8c:fa:90:b8:
         5a:d4:37:ca:d0:41:df:4f:c0:e4:ef:3a:f1:89:c9:71:22:bc:
         87:c2:36:c1:c4:48:61:1d:a5:66:7c:8a:f9:ae:70:b3:50:e1:
         32:c4:19:d9:58:36:0a:9e:32:d1:da:42:55:6b:d1:95:86:63:
         18:14:49:00:5e:b9:a5:1a:db:60:17:a8:e2:d6:7d:84:61:f3:
         29:11:e2:37:95:72:7c:0a:d7:e5:29:db:ed:c4:d3:50:b2:71:
         0b:ae:b0:10:31:27:ad:fe:f5:8e:c6:e8:a9:76:5a:ce:b9:c7:
         b9:5e:a8:94:10:5d:74:b7:4b:8c:b3:32:af:d7:58:1c:bb:18:
         d2:70:05:4c:ad:c9:12:7f:05:e3:cd:e6:80:c6:1c:23:1a:61:
         32:52:2c:2c:d8:9f:d2:98:d0:6b:84:19:08:a1:4f:a6:79:60:
         b6:cd:61:83:ef:06:dc:3c:c3:75:9f:c6:f4:29:58:3b:e2:e9:
         81:02:35:d7:d6:73:2c:d5:98:aa:ec:11:16:f7:d9:05:d0:0b:
         99:0c:95:2b:79:76:bb:b9:00:75:07:cc:fc:31:92:b1:36:db:
         36:34:cb:67:ee:3f:8e:48:24:f3:9f:55:7d:31:d9:c1:2a:61:
         6d:3c:e3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:19 2024 by rpki-client on console-fra.rpki-client.org