Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234302e302f32332d3233203d3e203338373738.roa
File:                     3230322e39332e3234302e302f32332d3233203d3e203338373738.roa (raw, json)
Hash identifier:          FvMqPTk723fFiT9kQC4nzpez+O4mqMSvc+wik4E1yOU=
Subject key identifier:   2F:7B:E0:A1:6F:E2:F4:6D:5F:40:96:B5:B6:E3:F0:FF:50:44:FC:B0
Certificate issuer:       /CN=F38DFF094E16843854EAC1403C69FD7F77809D02
Certificate serial:       3565F4F6D3C881721BF0F0707549BB9BA628F10B
Authority key identifier: F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234302e302f32332d3233203d3e203338373738.roa
Signing time:             Mon 01 Jul 2024 01:03:37 +0000
ROA not before:           Mon 01 Jul 2024 00:58:37 +0000
ROA not after:            Mon 30 Jun 2025 01:03:37 +0000
asID:                     38778
IP address blocks:        202.93.240.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl
                          rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 13:37:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:65:f4:f6:d3:c8:81:72:1b:f0:f0:70:75:49:bb:9b:a6:28:f1:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F38DFF094E16843854EAC1403C69FD7F77809D02
        Validity
            Not Before: Jul  1 00:58:37 2024 GMT
            Not After : Jun 30 01:03:37 2025 GMT
        Subject: CN=2F7BE0A16FE2F46D5F4096B5B6E3F0FF5044FCB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0c:ef:30:97:da:d0:b7:d5:9f:62:30:e7:03:
                    35:01:3a:09:53:70:e4:b8:07:59:a7:e5:e3:de:a0:
                    a7:0b:03:94:67:41:6d:d1:a9:51:74:55:4a:c0:3c:
                    12:39:6d:51:5b:f3:12:32:22:98:b0:80:2c:3f:37:
                    59:87:03:fb:33:d1:0b:6a:94:52:9c:d1:4e:c5:c7:
                    11:01:cd:24:86:38:44:03:26:c0:56:71:ea:7d:51:
                    1e:93:80:42:02:c0:83:6e:a7:ab:a9:42:e0:bf:18:
                    5e:77:99:12:f4:df:d9:9d:7a:94:9f:03:80:90:89:
                    4e:32:ee:f4:e9:b6:b9:18:9a:ba:ef:3d:06:75:ac:
                    b5:03:29:e9:b4:c2:ef:2e:14:a3:df:f1:5a:27:0e:
                    dd:41:47:9e:60:39:dd:08:f4:50:cb:cb:f8:24:c3:
                    8d:aa:92:f1:cb:1a:b6:4d:10:de:de:f5:43:56:8f:
                    8b:a1:ef:ec:ab:76:5a:15:a9:4e:1f:dc:b6:08:44:
                    5f:26:76:3f:e9:34:a1:36:ca:98:5c:e5:11:6f:c0:
                    b4:a6:bb:97:9c:59:bc:05:7f:6b:0b:86:06:ec:e2:
                    7f:67:2e:4e:a9:22:c0:fd:b4:18:28:fe:b8:b4:4a:
                    95:5a:b5:21:10:53:b3:5d:5e:b1:d6:dd:7e:e7:00:
                    57:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:7B:E0:A1:6F:E2:F4:6D:5F:40:96:B5:B6:E3:F0:FF:50:44:FC:B0
            X509v3 Authority Key Identifier:
                keyid:F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234302e302f32332d3233203d3e203338373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:bf:41:b0:57:79:fd:5b:f3:39:c3:aa:79:0e:ab:38:1f:52:
         e3:46:e2:96:6c:42:8c:ea:07:1b:38:46:4e:d2:94:ea:13:ec:
         b9:2f:53:9e:3b:e6:e6:09:07:c9:77:e8:d4:62:c7:d2:7a:27:
         89:d3:d6:7e:45:d1:70:cc:56:64:96:82:ec:7d:fe:df:70:66:
         4a:e0:6d:5f:3a:54:82:db:80:47:95:5d:b3:86:18:08:08:b1:
         65:93:60:6d:3a:ed:3a:c5:8e:1c:17:a3:4a:03:63:48:1b:06:
         6a:e7:d6:0b:0b:62:19:23:b3:46:32:05:0a:53:27:f1:29:0f:
         e4:93:4e:c9:66:89:34:31:02:5d:3d:05:01:f3:ef:42:55:2f:
         b3:dc:a6:be:34:ca:f8:c4:8e:42:ef:59:06:d2:0c:86:5c:46:
         97:30:51:d1:2c:f8:cd:7b:00:16:97:24:c9:ae:f4:d2:75:78:
         02:41:fe:74:70:48:f3:a9:d7:fe:0e:f6:29:2b:3c:18:4c:81:
         66:02:bf:86:86:47:b3:45:66:60:63:d6:10:4e:98:d8:aa:18:
         11:ab:14:c1:c5:e5:e2:9f:3d:0a:08:2a:9c:a1:c3:b5:e3:a0:
         93:e8:64:99:52:f9:15:e3:7c:46:cb:da:49:cf:4e:c0:36:c4:
         69:70:8b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:38 2024 by rpki-client on console-ams.rpki-client.org