Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234302e302f32342d3234203d3e203338373738.roa
File:                     3230322e39332e3234302e302f32342d3234203d3e203338373738.roa (raw, json)
Hash identifier:          h8u7SrJg5ku6Yo95VNwdkXmyCuJqQtraeAvM3Te6q9c=
Subject key identifier:   D8:06:91:B1:A9:71:EF:FD:4E:0C:EA:36:24:A3:41:17:09:2C:65:B1
Certificate issuer:       /CN=F38DFF094E16843854EAC1403C69FD7F77809D02
Certificate serial:       71956D7960AB703BF8CB756D7965A375968036EE
Authority key identifier: F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234302e302f32342d3234203d3e203338373738.roa
Signing time:             Mon 02 Jun 2025 02:02:40 +0000
ROA not before:           Mon 02 Jun 2025 01:57:40 +0000
ROA not after:            Mon 01 Jun 2026 02:02:40 +0000
asID:                     38778
IP address blocks:        202.93.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl
                          rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 11:38:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:95:6d:79:60:ab:70:3b:f8:cb:75:6d:79:65:a3:75:96:80:36:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F38DFF094E16843854EAC1403C69FD7F77809D02
        Validity
            Not Before: Jun  2 01:57:40 2025 GMT
            Not After : Jun  1 02:02:40 2026 GMT
        Subject: CN=D80691B1A971EFFD4E0CEA3624A34117092C65B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5d:53:14:39:e4:51:32:70:dc:6c:90:6e:40:
                    0a:bc:12:e3:82:c3:1e:fe:80:b3:41:f4:8e:06:c3:
                    53:ae:ea:e8:d1:95:23:8d:24:82:6a:fe:68:e7:28:
                    97:54:44:c9:cb:f9:c3:52:6d:4d:82:5f:e4:5f:fb:
                    9d:be:da:27:a7:b0:15:d7:01:e4:15:7e:cd:04:2f:
                    4a:7d:c8:6d:1b:e1:cf:e3:fe:4c:3b:22:70:bb:c3:
                    0b:fd:45:c9:c9:5a:cf:20:1d:9c:7e:18:f5:09:09:
                    3a:b1:5c:bf:f7:9c:3d:dc:f7:a2:f7:fe:94:56:fd:
                    19:8d:b1:eb:79:94:d8:e2:6f:08:7b:e7:b7:b5:ca:
                    85:07:c3:e6:dd:af:f7:07:91:76:59:1d:fa:26:86:
                    70:11:10:be:3a:1d:af:b4:5c:51:51:f1:c8:9b:70:
                    32:d9:e7:3f:50:cc:5a:c2:78:24:2f:94:3c:3a:dd:
                    a2:6a:63:5d:52:0e:9c:02:d1:ec:48:b3:9a:d2:f2:
                    72:41:31:65:ff:0f:de:6a:b9:7b:df:43:00:90:25:
                    fb:9e:21:af:be:e5:1d:01:b8:3a:7a:28:68:3e:6e:
                    b9:cd:f8:e9:4f:4b:f4:3e:f8:fe:3f:6e:dc:e3:40:
                    b3:6d:67:4d:0d:8b:15:52:81:c4:8d:45:16:4e:07:
                    9a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:06:91:B1:A9:71:EF:FD:4E:0C:EA:36:24:A3:41:17:09:2C:65:B1
            X509v3 Authority Key Identifier:
                keyid:F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234302e302f32342d3234203d3e203338373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:f5:b4:7c:50:e8:cf:5a:8c:da:5c:79:cc:33:49:59:7d:c6:
         76:3d:c1:d1:78:c4:74:90:fa:e0:5d:16:2d:36:7b:00:47:cb:
         c5:71:dd:ac:3e:19:d5:d2:90:93:e0:35:58:43:f0:ae:8d:09:
         e0:a6:59:4a:c3:45:50:d8:26:0e:45:10:c3:47:6f:e1:d0:77:
         79:cb:55:d6:13:6a:3d:55:82:3d:0d:e4:94:1b:73:ec:3e:79:
         75:08:e2:f9:05:56:a0:4f:e7:bc:bd:0e:c6:85:79:a8:28:f4:
         07:aa:6e:43:b5:1d:f7:96:f0:bb:a5:b2:30:9f:4b:e3:74:69:
         77:7a:a8:6d:5e:03:09:81:d4:7c:51:d3:f9:f6:27:2d:5a:a9:
         3f:f6:76:51:20:20:a4:e8:bd:27:68:ba:f6:e3:44:30:da:22:
         d5:f2:ae:a1:aa:9d:fd:01:7b:fa:d5:9f:14:db:ce:c8:07:14:
         7e:7c:d6:47:a5:85:63:bf:a5:4c:02:89:b8:13:86:d8:2f:ee:
         6e:f1:96:96:d7:b1:0d:c6:ce:36:9d:9b:5e:90:4d:74:44:e1:
         2e:45:68:63:76:0e:8d:f0:d4:cf:d0:e3:bd:bb:d8:e3:1a:84:
         16:9c:ba:5c:63:0c:4b:5e:12:31:55:55:6d:3f:74:88:02:53:
         10:19:95:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:12:15 2025 by rpki-client