Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e32362e302f32342d3234203d3e203234353238.roa
File:                     3230322e39312e32362e302f32342d3234203d3e203234353238.roa (raw, json)
Hash identifier:          6LTj/EfLo04qgpysgaD80PV6eg40XKfgvN9M6Cg9Ecc=
Subject key identifier:   08:33:20:1C:30:5B:B7:86:D4:32:7D:D8:26:02:17:13:FF:69:41:29
Certificate issuer:       /CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
Certificate serial:       2E549EEAA62CF9ED61FE4DD9AFF98EB7EFFAB34D
Authority key identifier: F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e32362e302f32342d3234203d3e203234353238.roa
Signing time:             Sun 16 Jun 2024 05:00:00 +0000
ROA not before:           Sun 16 Jun 2024 04:55:00 +0000
ROA not after:            Sun 15 Jun 2025 05:00:00 +0000
asID:                     24528
IP address blocks:        202.91.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl
                          rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:54:9e:ea:a6:2c:f9:ed:61:fe:4d:d9:af:f9:8e:b7:ef:fa:b3:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
        Validity
            Not Before: Jun 16 04:55:00 2024 GMT
            Not After : Jun 15 05:00:00 2025 GMT
        Subject: CN=0833201C305BB786D4327DD826021713FF694129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2a:e6:a7:93:0d:03:34:11:23:f3:27:96:11:
                    f4:76:ce:d6:16:d5:28:97:28:22:aa:19:0c:28:53:
                    ed:b5:42:60:b7:2e:2d:9a:4b:07:11:b7:dc:b6:9b:
                    40:c9:e5:56:5b:c6:0c:53:e7:8b:d8:8c:eb:f8:38:
                    48:71:ee:93:d2:11:f3:17:97:01:91:ac:db:f0:cb:
                    b0:cf:28:38:75:1d:6f:13:03:10:e3:b6:b6:c8:a9:
                    b2:ac:2d:75:0d:3b:22:ea:17:b8:1c:74:f6:a2:d8:
                    c3:58:ab:d0:c0:74:09:d5:83:22:1f:67:d3:66:c7:
                    af:a9:fb:86:31:62:7a:1b:0e:9e:fe:63:db:92:a1:
                    54:cd:09:3e:4b:bc:41:6a:30:9f:1d:1f:af:28:15:
                    9e:47:66:fe:91:65:d3:b6:9d:7e:c1:3b:55:c3:5b:
                    1e:2c:75:b9:19:95:8e:69:29:b3:26:f9:40:ac:4d:
                    14:68:be:f4:68:b3:a6:47:24:08:bc:18:49:e6:0e:
                    de:06:07:f8:28:dd:e5:f9:a9:00:69:f1:62:ed:08:
                    c6:fd:25:1e:84:93:b3:b0:98:fd:04:87:32:6c:de:
                    7d:c3:48:26:dc:a5:30:95:f8:15:fe:c2:c3:d5:3d:
                    de:a5:9a:83:d9:47:71:89:c5:18:67:71:96:1b:ab:
                    f0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:33:20:1C:30:5B:B7:86:D4:32:7D:D8:26:02:17:13:FF:69:41:29
            X509v3 Authority Key Identifier:
                keyid:F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e32362e302f32342d3234203d3e203234353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.91.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:cd:e9:e7:c8:f5:4a:3a:fe:b7:be:48:b6:31:ba:97:e0:9a:
         aa:81:d7:0b:b2:ff:8f:34:94:02:11:99:d8:bf:e8:82:d1:46:
         b0:92:be:a6:9f:61:fd:d9:b7:ad:29:fc:63:de:1e:56:ba:cc:
         4c:ec:5f:66:69:63:12:2d:68:b7:63:b7:ad:15:e9:68:01:ed:
         94:8a:36:d9:9c:08:b3:93:b8:3e:fa:04:d3:36:a9:76:1f:30:
         59:db:ab:62:b3:f4:5e:a1:4c:f8:45:3c:5d:69:35:91:75:c1:
         f6:31:99:d6:b4:e2:1d:d5:29:3b:00:a1:b3:12:56:15:44:3d:
         5f:06:dd:ca:c3:ac:2a:a7:db:59:dd:41:81:fd:74:bb:c1:fb:
         73:99:86:fd:3b:e9:05:09:2d:6d:35:2e:26:78:db:fa:40:73:
         fb:2a:88:f5:9a:ad:5b:2a:02:01:e0:e8:51:d5:4c:8d:86:76:
         47:93:c6:8a:d6:35:e2:38:83:30:db:5c:3a:ce:d1:3c:1d:30:
         72:8e:18:10:0b:60:56:e3:b3:5e:ff:9e:c3:36:6a:fe:24:0f:
         56:f5:90:5a:b1:85:5f:4b:0b:87:e0:d7:51:91:50:fe:c5:93:
         c6:4d:ca:e8:6c:87:74:0a:21:eb:b8:c3:f5:28:04:d6:fb:ef:
         92:2d:63:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:16 2024 by rpki-client on console-ams.rpki-client.org