Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234312e302f32342d3234203d3e203338373738.roa
File:                     3230322e39332e3234312e302f32342d3234203d3e203338373738.roa (raw, json)
Hash identifier:          iGczu7KEorVkI68vI7K5KWJOPmTCIHosmdUzussM+So=
Subject key identifier:   42:66:8A:C1:FF:3B:63:11:93:1A:05:8B:B2:09:55:0C:2D:22:EE:96
Certificate issuer:       /CN=F38DFF094E16843854EAC1403C69FD7F77809D02
Certificate serial:       3CDF22F7BBE00DF75E2ECCFC7875C803A7203996
Authority key identifier: F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234312e302f32342d3234203d3e203338373738.roa
Signing time:             Mon 01 Jul 2024 01:03:37 +0000
ROA not before:           Mon 01 Jul 2024 00:58:37 +0000
ROA not after:            Mon 30 Jun 2025 01:03:37 +0000
asID:                     38778
IP address blocks:        202.93.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl
                          rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 13:37:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:df:22:f7:bb:e0:0d:f7:5e:2e:cc:fc:78:75:c8:03:a7:20:39:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F38DFF094E16843854EAC1403C69FD7F77809D02
        Validity
            Not Before: Jul  1 00:58:37 2024 GMT
            Not After : Jun 30 01:03:37 2025 GMT
        Subject: CN=42668AC1FF3B6311931A058BB209550C2D22EE96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:27:c2:30:ca:bc:36:38:40:99:0c:90:ad:e1:
                    b8:fc:4b:03:2a:35:f1:50:d8:a6:22:c8:8a:05:33:
                    df:84:8c:da:46:0d:fc:5b:06:fb:f4:54:49:0d:70:
                    be:cd:84:c9:a2:0b:0c:47:b9:3d:62:5f:53:8d:1e:
                    b3:cb:1c:10:57:54:96:b9:a3:0c:81:d6:24:dc:a5:
                    25:37:7c:d9:a6:8e:b7:b4:1f:2a:9d:fd:c0:82:d9:
                    77:ea:4c:31:db:d4:87:03:f4:74:83:58:74:47:a8:
                    ef:55:fd:dd:c9:51:52:55:08:46:3f:89:29:97:4f:
                    d5:39:47:bb:47:83:54:c8:29:8b:45:ec:3a:b5:01:
                    22:dc:d6:89:c3:96:fe:5b:38:66:44:db:74:9f:3b:
                    d2:97:d3:f1:38:53:ef:00:fd:9d:89:0c:79:e7:96:
                    dd:3e:89:fe:d9:c4:03:ee:ee:4f:75:45:0f:34:77:
                    4a:47:45:8b:c8:2b:9e:d1:62:e7:57:56:3c:8a:95:
                    84:32:df:0b:71:75:9d:2c:75:61:e3:2e:21:e6:94:
                    db:8b:5f:10:21:f4:15:c4:9d:2e:b8:91:7f:be:f2:
                    88:9a:7f:e5:86:3f:bf:eb:61:a6:08:cf:94:f2:61:
                    96:83:9c:ca:ca:4b:b0:f7:75:6b:2f:8e:2a:86:c5:
                    81:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:66:8A:C1:FF:3B:63:11:93:1A:05:8B:B2:09:55:0C:2D:22:EE:96
            X509v3 Authority Key Identifier:
                keyid:F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234312e302f32342d3234203d3e203338373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:0e:e0:9a:23:e9:33:24:88:b8:fb:67:12:93:20:48:fe:d1:
         dc:01:0f:93:56:6f:b5:c4:52:74:61:d1:e8:5b:a2:a8:bf:e8:
         7e:5b:2b:5f:ef:99:2d:36:1d:b5:b8:b0:44:7a:84:e3:25:f2:
         64:62:43:8c:29:56:72:1b:18:b6:29:aa:d4:d6:23:9b:cb:75:
         6f:32:0b:c5:a8:75:fb:10:a0:78:f3:e1:91:ec:d8:51:00:15:
         68:ee:ce:d1:ac:80:c7:3b:1a:74:34:ec:8b:15:79:69:23:c8:
         88:19:00:c0:dc:eb:a5:dc:0c:77:9f:2b:d3:ec:23:d0:48:79:
         8e:02:8b:41:fe:7a:0b:f3:7e:da:c6:57:3e:84:e6:2f:e6:a7:
         68:40:1f:bc:a5:c2:aa:1e:d2:b8:21:ad:ef:12:f4:54:17:c2:
         d3:c5:36:52:6b:c8:2f:ac:5c:74:ec:23:1e:be:29:6e:5e:26:
         14:90:30:a1:99:e5:d4:40:71:8d:2a:48:94:61:a5:47:41:a1:
         5d:9f:a7:e5:16:d4:54:32:c9:a4:09:dc:60:08:12:fd:eb:d4:
         9d:ab:07:07:42:97:d9:cf:13:a0:db:c9:28:a5:8d:14:4b:25:
         a0:88:42:50:d2:4c:bc:0f:13:1d:ca:38:7a:2b:56:86:f1:c4:
         46:9d:19:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:12 2024 by rpki-client on console-fra.rpki-client.org