Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3134332e302f32342d3234203d3e2034333832.roa
File:                     3230322e39332e3134332e302f32342d3234203d3e2034333832.roa (raw, json)
Hash identifier:          SX/KD3zZIHB/GkEQrLuvEp85L2Kw21wNoG1FaG7ZGZg=
Subject key identifier:   E5:A3:EB:D5:86:60:54:1C:A6:FC:EB:0B:04:B1:B4:96:51:A5:BA:2E
Certificate issuer:       /CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
Certificate serial:       5ACB21E0EE62AFBA09AEF899CE4C38A3428C0897
Authority key identifier: 01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3134332e302f32342d3234203d3e2034333832.roa
Signing time:             Wed 21 Aug 2024 14:01:41 +0000
ROA not before:           Wed 21 Aug 2024 13:56:41 +0000
ROA not after:            Wed 20 Aug 2025 14:01:41 +0000
asID:                     4382
IP address blocks:        202.93.143.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl
                          rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:cb:21:e0:ee:62:af:ba:09:ae:f8:99:ce:4c:38:a3:42:8c:08:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
        Validity
            Not Before: Aug 21 13:56:41 2024 GMT
            Not After : Aug 20 14:01:41 2025 GMT
        Subject: CN=E5A3EBD58660541CA6FCEB0B04B1B49651A5BA2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1f:7f:0b:61:80:a0:bb:fd:43:cd:3a:30:0d:
                    6a:6f:b9:d3:45:bd:46:05:21:2f:46:56:0b:98:ef:
                    ed:32:bc:5c:37:93:d6:e0:5a:f2:8c:55:2c:bf:40:
                    eb:07:0f:8c:31:11:7b:62:7b:3a:60:f9:14:ef:96:
                    72:65:7a:43:cf:5a:b7:69:e9:24:12:6e:bf:8d:36:
                    8d:7a:15:4a:be:0a:e8:c5:25:68:40:92:d7:b2:ae:
                    10:2c:db:7f:97:f0:4b:a4:26:85:d0:55:e9:6f:bb:
                    03:80:d2:a5:91:da:f9:f1:7b:85:6d:c2:a9:c8:c5:
                    be:5c:d3:86:b6:d3:35:5f:6d:07:3d:c7:2e:cc:b1:
                    a3:21:74:f1:b1:dc:9e:dd:20:9e:3e:a8:66:62:6c:
                    5e:56:6f:b6:dd:85:ba:39:75:d2:04:ed:07:70:e7:
                    18:aa:75:43:07:a9:28:cc:d8:0e:3f:c7:8d:00:04:
                    ea:e8:94:cb:c8:88:64:a0:4c:74:a1:55:5f:88:8c:
                    96:5c:d1:e6:c0:eb:19:8b:ab:73:0e:bb:81:d3:22:
                    ee:4f:02:de:33:4d:9b:3a:71:90:a0:d3:c1:42:a5:
                    09:bd:25:1c:11:fb:77:b2:d5:0f:d9:60:c6:78:9f:
                    3c:3d:3c:a3:24:ad:c7:6c:54:cd:04:61:d9:8d:1a:
                    48:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A3:EB:D5:86:60:54:1C:A6:FC:EB:0B:04:B1:B4:96:51:A5:BA:2E
            X509v3 Authority Key Identifier:
                keyid:01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3134332e302f32342d3234203d3e2034333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:ad:37:3d:ce:18:5e:08:26:bd:ac:32:4f:41:44:e4:35:c1:
         58:b2:0f:e2:98:a5:95:1d:bf:90:29:14:35:9a:02:97:5d:6c:
         f0:74:e5:dc:b5:fa:23:af:e8:50:29:14:99:70:6c:71:72:e8:
         32:de:cb:57:e9:9c:0f:f4:ce:01:b8:46:a7:db:52:f1:11:42:
         a3:5d:c2:71:e6:3b:0e:2d:cd:97:31:07:6b:33:06:bd:88:31:
         e8:45:b1:77:84:d0:18:c2:7f:ef:94:08:a5:75:22:18:19:41:
         48:42:83:1c:a7:89:09:bc:56:6b:29:11:42:ca:0c:e4:38:ea:
         8e:5c:bf:94:9b:20:09:86:ce:a4:a9:20:77:aa:82:a3:e4:12:
         66:c2:c1:3d:c2:ec:42:52:f5:47:0c:93:dd:8a:27:47:5c:f0:
         a2:7a:38:c5:8f:30:35:78:05:76:7f:b0:db:97:82:e3:61:8e:
         42:9d:3a:cd:1d:c3:77:7e:d1:66:83:26:4f:4b:ec:0e:c7:28:
         05:34:9b:32:f2:b5:f2:e0:05:9c:fd:7b:d9:20:68:65:f4:de:
         78:fd:5a:46:0a:4e:13:eb:9e:48:3b:58:ff:bd:ac:70:c6:35:
         38:a2:2d:b2:cf:8d:01:72:b7:07:40:36:c9:b3:6e:ac:13:f4:
         ac:3b:9d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:03 2024 by rpki-client on console-ams.rpki-client.org