Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3134322e302f32342d3234203d3e2034333832.roa
File:                     3230322e39332e3134322e302f32342d3234203d3e2034333832.roa (raw, json)
Hash identifier:          0i45Q97/D6G84IEDWcqQodmvLXxH/OKEx3btmEhLrxU=
Subject key identifier:   E9:BE:BF:60:20:79:58:ED:91:B6:1D:6A:7C:91:57:C2:74:73:A8:84
Certificate issuer:       /CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
Certificate serial:       5429DF70DB6764246760A4D21E23E9BFE3803AF6
Authority key identifier: 01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3134322e302f32342d3234203d3e2034333832.roa
Signing time:             Wed 21 Aug 2024 12:00:00 +0000
ROA not before:           Wed 21 Aug 2024 11:55:00 +0000
ROA not after:            Wed 20 Aug 2025 12:00:00 +0000
asID:                     4382
IP address blocks:        202.93.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl
                          rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:29:df:70:db:67:64:24:67:60:a4:d2:1e:23:e9:bf:e3:80:3a:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
        Validity
            Not Before: Aug 21 11:55:00 2024 GMT
            Not After : Aug 20 12:00:00 2025 GMT
        Subject: CN=E9BEBF60207958ED91B61D6A7C9157C27473A884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:46:b3:e5:33:4e:d5:2d:34:2b:cf:0e:57:17:
                    9b:41:e5:46:04:ee:9c:c2:e0:29:a4:dc:6d:5d:d0:
                    48:6a:6a:59:b7:36:2e:ef:31:9b:29:59:7e:65:31:
                    39:66:3f:4d:f3:ee:fe:e2:d7:30:c2:5f:f3:d6:04:
                    fc:3b:a1:c5:0f:51:58:7d:10:a3:76:08:95:74:25:
                    d0:78:2d:77:a6:68:b0:1a:87:8a:60:ec:37:c8:96:
                    aa:24:f6:04:c3:f3:3b:d9:54:55:8b:d4:30:bc:58:
                    ef:44:94:7c:a5:29:09:b6:0a:e7:28:70:4a:a1:68:
                    e2:5f:d7:f3:2b:50:fd:ad:c5:fe:b4:c8:8c:5c:fd:
                    88:2c:26:1f:aa:20:a9:70:23:e4:c4:fa:3f:c3:d9:
                    99:9e:3b:b5:3c:78:c5:43:72:0e:fe:69:4f:a5:d5:
                    4c:0e:5f:f7:90:c2:86:85:fc:b7:72:be:3d:47:bb:
                    71:ab:17:d2:35:2e:8f:31:f4:91:1b:d5:f4:38:f9:
                    bd:96:ab:2e:69:d6:f8:90:15:49:78:ed:5e:65:55:
                    d6:76:e4:3d:f8:20:6b:15:b3:03:bd:9a:3a:47:43:
                    39:c9:66:40:88:5f:75:8c:4f:58:1e:a4:5c:27:fb:
                    a5:93:1a:42:7a:e7:5d:86:84:3c:bd:03:74:f0:1f:
                    fc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BE:BF:60:20:79:58:ED:91:B6:1D:6A:7C:91:57:C2:74:73:A8:84
            X509v3 Authority Key Identifier:
                keyid:01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3134322e302f32342d3234203d3e2034333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:01:57:6a:f3:74:8e:4d:cf:01:d5:35:b1:3e:50:69:4e:aa:
         34:6f:3d:77:57:2f:2d:02:b3:6c:af:16:b3:f0:5f:40:8d:51:
         7f:a8:f2:c2:08:1a:2d:df:3e:65:d6:72:69:3b:87:12:4e:72:
         20:60:fc:8b:65:67:63:c4:26:45:04:4e:26:67:1e:f6:17:a6:
         7e:8a:3e:12:24:da:31:5f:ec:eb:69:b5:0e:5a:c8:e1:48:08:
         99:03:88:ed:93:62:f3:cc:e4:27:fa:11:17:a9:83:7c:b7:b0:
         63:a9:c3:13:db:5c:8c:55:74:a0:07:b2:ba:29:ac:f2:30:8f:
         63:91:42:3d:7a:7a:25:10:9a:6c:b0:a5:4f:4b:f8:05:37:ac:
         14:15:e9:09:11:15:77:bd:9e:7d:3d:0a:8a:b6:31:15:d8:1f:
         62:4b:13:cc:17:7b:54:3c:ec:4d:23:e3:fe:35:b7:da:a4:f7:
         0b:6d:55:61:5a:9f:d9:d3:fc:d8:53:eb:a0:65:49:46:be:5d:
         6b:62:fc:d5:6d:7b:42:9b:96:b1:af:eb:a1:29:50:6e:d4:9b:
         b2:24:59:00:68:f4:d3:59:51:9f:9e:28:42:a3:ae:39:91:4f:
         72:66:b9:e4:f3:04:4b:ba:8e:15:63:2b:4c:b9:2b:8f:c6:45:
         83:43:d9:ae
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUVCnfcNtnZCRnYKTSHiPpv+OAOvYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDEyRDJGNTk5MzdGREJFNjUwOTVCOUVCNDk3MUQ5RDMx
RUZEQTkzQzAeFw0yNDA4MjExMTU1MDBaFw0yNTA4MjAxMjAwMDBaMDMxMTAvBgNV
BAMTKEU5QkVCRjYwMjA3OTU4RUQ5MUI2MUQ2QTdDOTE1N0MyNzQ3M0E4ODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLRrPlM07VLTQrzw5XF5tB5UYE
7pzC4Cmk3G1d0Ehqalm3Ni7vMZspWX5lMTlmP03z7v7i1zDCX/PWBPw7ocUPUVh9
EKN2CJV0JdB4LXemaLAah4pg7DfIlqok9gTD8zvZVFWL1DC8WO9ElHylKQm2Cuco
cEqhaOJf1/MrUP2txf60yIxc/YgsJh+qIKlwI+TE+j/D2ZmeO7U8eMVDcg7+aU+l
1UwOX/eQwoaF/Ldyvj1Hu3GrF9I1Lo8x9JEb1fQ4+b2Wqy5p1viQFUl47V5lVdZ2
5D34IGsVswO9mjpHQznJZkCIX3WMT1gepFwn+6WTGkJ6512GhDy9A3TwH/xdAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU6b6/YCB5WO2Rth1qfJFXwnRzqIQwHwYDVR0j
BBgwFoAUAS0vWZN/2+ZQlbnrSXHZ0x79qTwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
ODZiMzg4OS02OTY2LTQ1ZWYtOTA3My1hZDE0MDExYWMzYjIvMC8wMTJEMkY1OTkz
N0ZEQkU2NTA5NUI5RUI0OTcxRDlEMzFFRkRBOTNDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDEyRDJGNTk5MzdGREJFNjUwOTVCOUVCNDk3MUQ5RDMxRUZE
QTkzQy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE4NmIzODg5LTY5NjYtNDVlZi05
MDczLWFkMTQwMTFhYzNiMi8wLzMyMzAzMjJlMzkzMzJlMzEzNDMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzMzM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKXY4wDQYJKoZIhvcN
AQELBQADggEBAGMBV2rzdI5NzwHVNbE+UGlOqjRvPXdXLy0Cs2yvFrPwX0CNUX+o
8sIIGi3fPmXWcmk7hxJOciBg/ItlZ2PEJkUETiZnHvYXpn6KPhIk2jFf7OtptQ5a
yOFICJkDiO2TYvPM5Cf6ERepg3y3sGOpwxPbXIxVdKAHsroprPIwj2ORQj16eiUQ
mmywpU9L+AU3rBQV6QkRFXe9nn09Coq2MRXYH2JLE8wXe1Q87E0j4/41t9qk9wtt
VWFan9nT/NhT66BlSUa+XWti/NVte0KblrGv66EpUG7Um7IkWQBo9NNZUZ+eKEKj
rjmRT3JmueTzBEu6jhVjK0y5K4/GRYND2a4=
-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:19 2024 by rpki-client on console-fra.rpki-client.org