Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234302e302f32332d3233203d3e203338373738.roa
File:                     3230322e39332e3234302e302f32332d3233203d3e203338373738.roa (raw, json)
Hash identifier:          flGSxQD++NqarnKtTxSlBovOQhcEWH2Yg3wz5JBQPvM=
Subject key identifier:   7E:B3:90:31:A1:4F:6F:F6:B0:92:7E:52:A6:42:F1:16:E6:DC:E8:45
Certificate issuer:       /CN=F38DFF094E16843854EAC1403C69FD7F77809D02
Certificate serial:       4C81286F21BC9188918E528E667F77A4B5E4CBDE
Authority key identifier: F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234302e302f32332d3233203d3e203338373738.roa
Signing time:             Mon 02 Jun 2025 02:02:40 +0000
ROA not before:           Mon 02 Jun 2025 01:57:40 +0000
ROA not after:            Mon 01 Jun 2026 02:02:40 +0000
asID:                     38778
IP address blocks:        202.93.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl
                          rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Jun 2025 02:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:81:28:6f:21:bc:91:88:91:8e:52:8e:66:7f:77:a4:b5:e4:cb:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F38DFF094E16843854EAC1403C69FD7F77809D02
        Validity
            Not Before: Jun  2 01:57:40 2025 GMT
            Not After : Jun  1 02:02:40 2026 GMT
        Subject: CN=7EB39031A14F6FF6B0927E52A642F116E6DCE845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:46:11:16:e1:33:a1:26:f9:16:39:01:f9:ec:
                    ce:6d:4c:92:36:2d:8f:fa:e3:2c:db:50:9d:1b:13:
                    e0:f5:42:ea:c8:d6:94:29:5d:1c:9f:00:6d:36:f0:
                    b3:79:60:e7:7b:85:ee:9c:3b:ff:fe:ea:78:c1:a8:
                    92:6d:e4:ea:8a:b9:ac:fb:95:21:72:8e:3c:bb:6a:
                    39:02:46:a8:ef:4f:63:5c:e4:56:49:f9:00:fa:9e:
                    b8:f0:6f:09:d8:11:f2:a4:7f:04:92:4d:ad:f0:12:
                    7e:fd:4c:dd:3d:bb:e0:87:e0:89:1d:37:3a:46:21:
                    7d:e7:d0:81:63:40:d1:f7:26:80:cd:c3:09:c1:2c:
                    c6:0a:e4:5b:9d:b1:26:b6:04:e2:b9:f7:1c:64:f2:
                    08:d4:94:9f:8e:0a:09:ab:2b:15:2e:74:41:aa:dd:
                    55:60:0a:ca:6c:1f:a5:e2:26:c2:f2:51:93:2f:49:
                    70:33:77:af:b0:49:b8:69:39:23:40:eb:08:c7:3a:
                    72:db:b9:9c:1d:a2:d3:35:77:88:2d:61:5a:d3:16:
                    b0:78:56:7d:8f:b5:ea:d2:01:ec:94:29:d7:b4:e7:
                    81:2c:a2:ea:c7:3f:5a:b6:f0:c1:7e:48:52:3d:74:
                    60:d6:e1:79:eb:42:bb:31:9e:7b:5b:9b:5d:74:00:
                    a1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B3:90:31:A1:4F:6F:F6:B0:92:7E:52:A6:42:F1:16:E6:DC:E8:45
            X509v3 Authority Key Identifier:
                keyid:F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234302e302f32332d3233203d3e203338373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:ca:62:b9:ce:6f:bb:71:ca:9a:e1:5f:77:be:5d:61:45:62:
         10:c6:a3:9d:75:e1:50:60:38:6e:b2:bf:c4:8f:51:b7:11:07:
         92:b8:b2:91:74:52:3c:67:8b:b4:6a:75:c1:8a:05:bd:94:0e:
         57:17:21:f1:f4:18:7c:71:b4:cb:16:9e:25:89:cd:b4:42:71:
         12:3c:4b:93:83:35:de:a9:52:ef:e2:1a:49:39:3b:3d:c6:c6:
         8b:dd:a8:50:09:b0:55:b5:8d:1c:ff:79:80:67:92:e8:fd:f5:
         c9:af:67:58:11:a9:08:79:5a:f9:df:06:10:ab:44:c6:d5:5f:
         83:58:0b:ec:6a:c2:6e:ca:ca:3a:a1:e3:ae:64:49:dd:30:67:
         1c:74:f5:1e:bb:6e:ff:8a:d5:e3:76:69:04:da:39:2d:c9:6b:
         16:e7:47:a0:0f:f4:d8:14:c1:a9:62:f0:69:2f:40:96:db:a4:
         c7:76:2b:94:ce:10:ad:81:d1:1d:ba:d0:96:c0:2f:c4:59:61:
         55:91:54:57:af:27:56:1f:05:fc:34:70:d5:68:24:bd:a6:bb:
         1a:26:2b:bc:4c:d5:3e:5c:ac:44:1b:39:12:50:61:de:a2:83:
         34:23:a1:5e:e5:da:1c:b9:ad:77:e4:5f:8a:da:aa:e9:eb:2e:
         4d:13:39:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 20:45:48 2025 by rpki-client