Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234342e302f32332d3233203d3e203338373738.roa
File:                     3230322e39332e3234342e302f32332d3233203d3e203338373738.roa (raw, json)
Hash identifier:          Ohky3Thlr2FDAX+o1+gxd0SqHS9uqlPNErObucNZRIk=
Subject key identifier:   C4:B5:47:91:AD:76:13:6C:C4:8B:49:70:73:82:DE:11:3B:D0:0E:31
Certificate issuer:       /CN=F38DFF094E16843854EAC1403C69FD7F77809D02
Certificate serial:       593A17AFB021CBB080461CFBC88C8565FB362514
Authority key identifier: F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234342e302f32332d3233203d3e203338373738.roa
Signing time:             Fri 03 May 2024 03:00:01 +0000
ROA not before:           Fri 03 May 2024 02:55:01 +0000
ROA not after:            Fri 02 May 2025 03:00:01 +0000
asID:                     38778
IP address blocks:        202.93.244.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl
                          rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 13:37:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:3a:17:af:b0:21:cb:b0:80:46:1c:fb:c8:8c:85:65:fb:36:25:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F38DFF094E16843854EAC1403C69FD7F77809D02
        Validity
            Not Before: May  3 02:55:01 2024 GMT
            Not After : May  2 03:00:01 2025 GMT
        Subject: CN=C4B54791AD76136CC48B49707382DE113BD00E31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8a:5a:38:7b:d5:90:c6:7c:f3:ff:ba:2d:b7:
                    d5:83:7c:ef:e1:66:86:51:1d:e3:4b:95:71:d1:ab:
                    d8:0d:13:46:a4:79:8e:79:f5:54:94:3d:bc:27:fb:
                    e9:ab:0e:8a:c0:82:73:b7:1a:f3:a6:fc:21:50:24:
                    bf:16:43:e5:1b:9b:54:9e:86:9e:38:62:bb:54:c4:
                    56:6b:3f:86:1b:8e:4c:d8:ec:75:55:f3:2e:e2:5a:
                    75:0c:28:be:27:1e:d7:45:ee:4b:33:db:be:7e:2c:
                    77:d3:8a:e2:ca:0a:6a:b2:db:fa:bf:38:0a:59:80:
                    5e:45:09:76:2b:b9:79:20:76:6e:8e:40:ba:62:e3:
                    07:0c:7f:b2:e6:70:ac:ce:67:34:40:75:33:4b:97:
                    4c:3c:d4:dc:8d:6d:8a:71:4d:91:cb:d9:e0:87:00:
                    d1:d6:57:6a:e6:e8:91:14:00:2d:fe:94:03:d8:5f:
                    64:b8:95:45:6a:00:f6:fa:2c:65:7d:ac:21:3f:22:
                    0a:02:f4:6e:52:4d:8a:40:e3:e1:64:36:71:ad:30:
                    20:ef:57:56:ab:f7:29:91:4a:c1:c3:9d:bc:bd:44:
                    f2:cb:7f:07:09:00:f4:e3:4b:d8:c9:fc:4f:92:8d:
                    1a:1b:6e:9a:12:79:1f:c3:fb:5f:fc:ec:4b:56:da:
                    eb:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B5:47:91:AD:76:13:6C:C4:8B:49:70:73:82:DE:11:3B:D0:0E:31
            X509v3 Authority Key Identifier:
                keyid:F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234342e302f32332d3233203d3e203338373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:a0:8a:fb:f4:21:21:a9:7e:1e:e2:16:15:65:1b:77:73:c1:
         1c:26:c5:df:2a:ed:c2:e5:ba:b3:78:e5:4b:60:49:b1:b9:35:
         3b:91:7b:a5:6a:87:b2:ff:9e:b7:60:84:f8:1b:c6:9e:2f:0a:
         89:19:5e:6d:3a:02:9d:fa:f9:15:22:f6:e9:34:d9:2d:80:55:
         74:41:40:99:9d:ab:0b:66:86:87:d7:2b:e8:77:4b:58:b0:97:
         ce:bc:01:01:e9:a9:72:8c:65:77:92:ef:9a:37:a2:94:cc:fe:
         1f:11:ab:65:c8:0d:6f:28:ca:1f:bb:b8:e2:c3:ea:b0:86:b1:
         79:a6:b7:50:3a:a0:58:1d:3c:59:48:ec:65:40:d6:e0:b5:ef:
         67:69:ca:1d:ba:f8:e5:8e:92:6b:27:00:c9:37:2f:92:4e:38:
         3b:59:1a:73:3c:83:f8:5a:5c:07:da:ba:7a:0f:c5:0c:81:75:
         8f:53:ee:8b:62:1b:59:67:ec:d1:93:bc:7b:86:3d:7c:dc:4d:
         10:af:1e:3a:b8:77:ba:0d:ea:f0:81:07:2f:a0:b8:d6:9c:a1:
         4d:50:46:01:2b:d5:d8:28:7a:de:51:a4:cd:70:39:cf:70:d5:
         1e:95:31:9f:46:69:5f:89:35:3b:70:9f:14:cf:20:9b:e7:10:
         e2:50:6c:aa
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUWToXr7Ahy7CARhz7yIyFZfs2JRQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM4REZGMDk0RTE2ODQzODU0RUFDMTQwM0M2OUZEN0Y3
NzgwOUQwMjAeFw0yNDA1MDMwMjU1MDFaFw0yNTA1MDIwMzAwMDFaMDMxMTAvBgNV
BAMTKEM0QjU0NzkxQUQ3NjEzNkNDNDhCNDk3MDczODJERTExM0JEMDBFMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWilo4e9WQxnzz/7ott9WDfO/h
ZoZRHeNLlXHRq9gNE0akeY559VSUPbwn++mrDorAgnO3GvOm/CFQJL8WQ+Ubm1Se
hp44YrtUxFZrP4YbjkzY7HVV8y7iWnUMKL4nHtdF7ksz275+LHfTiuLKCmqy2/q/
OApZgF5FCXYruXkgdm6OQLpi4wcMf7LmcKzOZzRAdTNLl0w81NyNbYpxTZHL2eCH
ANHWV2rm6JEUAC3+lAPYX2S4lUVqAPb6LGV9rCE/IgoC9G5STYpA4+FkNnGtMCDv
V1ar9ymRSsHDnby9RPLLfwcJAPTjS9jJ/E+SjRobbpoSeR/D+1/87EtW2uv1AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUxLVHka12E2zEi0lwc4LeETvQDjEwHwYDVR0j
BBgwFoAU843/CU4WhDhU6sFAPGn9f3eAnQIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
YWQ2ZGNjOS0xNzAwLTQ4ZWItOTA5OS02Njc4ZjkxYmY0NGUvMC9GMzhERkYwOTRF
MTY4NDM4NTRFQUMxNDAzQzY5RkQ3Rjc3ODA5RDAyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjM4REZGMDk0RTE2ODQzODU0RUFDMTQwM0M2OUZEN0Y3Nzgw
OUQwMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVhZDZkY2M5LTE3MDAtNDhlYi05
MDk5LTY2NzhmOTFiZjQ0ZS8wLzMyMzAzMjJlMzkzMzJlMzIzNDM0MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzMzODM3MzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcpd9DANBgkqhkiG
9w0BAQsFAAOCAQEAJaCK+/QhIal+HuIWFWUbd3PBHCbF3yrtwuW6s3jlS2BJsbk1
O5F7pWqHsv+et2CE+BvGni8KiRlebToCnfr5FSL26TTZLYBVdEFAmZ2rC2aGh9cr
6HdLWLCXzrwBAempcoxld5LvmjeilMz+HxGrZcgNbyjKH7u44sPqsIaxeaa3UDqg
WB08WUjsZUDW4LXvZ2nKHbr45Y6SaycAyTcvkk44O1kaczyD+FpcB9q6eg/FDIF1
j1Pui2IbWWfs0ZO8e4Y9fNxNEK8eOrh3ug3q8IEHL6C41pyhTVBGASvV2Ch63lGk
zXA5z3DVHpUxn0ZpX4k1O3CfFM8gm+cQ4lBsqg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:38 2024 by rpki-client on console-ams.rpki-client.org