Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234342e302f32342d3234203d3e203338373738.roa
File:                     3230322e39332e3234342e302f32342d3234203d3e203338373738.roa (raw, json)
Hash identifier:          KWqNCP23Av7I5KZzN9unrr0dQ84AuQNXdG0Zngd6CZw=
Subject key identifier:   B0:7F:5C:A6:61:0A:52:7B:24:10:F0:91:90:B2:30:D9:43:F7:E6:E5
Certificate issuer:       /CN=F38DFF094E16843854EAC1403C69FD7F77809D02
Certificate serial:       6901E63113534ACBBEBC37A10752A8E95860533F
Authority key identifier: F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234342e302f32342d3234203d3e203338373738.roa
Signing time:             Thu 01 Jun 2023 09:00:00 +0000
ROA not before:           Thu 01 Jun 2023 08:55:00 +0000
ROA not after:            Thu 30 May 2024 09:00:00 +0000
asID:                     38778
IP address blocks:        202.93.244.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl
                          rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Apr 2024 15:04:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:01:e6:31:13:53:4a:cb:be:bc:37:a1:07:52:a8:e9:58:60:53:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F38DFF094E16843854EAC1403C69FD7F77809D02
        Validity
            Not Before: Jun  1 08:55:00 2023 GMT
            Not After : May 30 09:00:00 2024 GMT
        Subject: CN=B07F5CA6610A527B2410F09190B230D943F7E6E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:94:6f:ad:4f:8d:4c:58:e2:56:5f:9a:d5:4a:
                    1d:93:c6:81:a8:62:82:89:c2:94:4f:40:08:14:ca:
                    c8:eb:2f:42:e5:f4:2d:3b:85:cf:a4:f5:42:1d:32:
                    72:cb:a2:9f:f3:7a:69:d1:2e:ca:34:c2:01:75:6d:
                    33:38:f2:2a:5f:a3:1e:7b:ca:ba:18:58:b8:60:05:
                    1d:0e:9b:b8:a9:0b:c6:7e:30:2e:d6:36:a0:c9:d3:
                    0e:bb:38:2c:eb:46:9e:c2:1d:d3:e0:a3:32:6a:63:
                    9f:3f:b9:f8:51:83:7e:db:7c:54:23:81:bd:73:12:
                    cd:ec:9a:39:ac:e7:55:9d:c8:e7:a5:76:7f:b3:97:
                    09:2f:51:f6:a8:c4:4d:28:4e:69:25:fd:59:b3:8c:
                    ca:e5:34:2c:cb:32:62:3e:0a:4e:10:22:05:92:b9:
                    ed:3c:22:b9:b5:b4:54:4b:10:ce:c9:ef:fa:a8:16:
                    05:03:35:1a:67:69:45:63:1d:45:ec:bf:37:6a:a8:
                    04:21:40:41:76:9a:6d:d5:4f:e2:27:45:49:90:6b:
                    22:b3:3f:c5:e8:a7:25:52:65:bf:8c:12:61:28:16:
                    6d:bf:5c:98:1c:3f:79:90:e4:33:5e:c8:fb:01:fd:
                    4d:0a:b8:94:e1:f7:b3:57:d9:e5:7d:00:25:82:a7:
                    05:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:7F:5C:A6:61:0A:52:7B:24:10:F0:91:90:B2:30:D9:43:F7:E6:E5
            X509v3 Authority Key Identifier:
                keyid:F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234342e302f32342d3234203d3e203338373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:88:16:00:be:4e:2c:4b:65:a2:3b:5a:41:8f:5b:1b:9b:bb:
         a9:a1:ae:8e:f1:b3:f0:35:0b:fa:2a:74:a2:4c:3d:d6:f1:d6:
         79:07:98:1b:13:44:28:27:b1:57:4a:ba:78:4d:52:e7:c1:dd:
         4d:32:28:82:62:48:d1:1b:12:7b:93:21:6f:5f:59:d9:93:de:
         aa:ca:00:77:77:71:c5:43:a7:46:0f:df:4d:17:e9:87:01:26:
         d7:1a:7c:3d:0c:8c:90:ff:49:ee:fa:08:0a:2b:63:d3:d3:64:
         95:b4:47:de:c2:a6:37:73:94:4b:ce:73:8c:fb:04:d8:23:5b:
         96:68:a5:1c:35:a8:1b:c8:92:2d:c5:79:3b:7b:07:cf:b4:78:
         61:df:c7:61:bc:44:f3:b6:8d:26:29:6f:d0:06:3b:08:08:4f:
         34:64:ca:41:4c:f8:3f:b0:67:00:0b:17:2e:81:2f:0e:5f:26:
         15:2c:ec:a6:99:fa:8d:03:0b:d5:3a:f8:f6:46:f7:b3:83:2b:
         a5:bb:fc:9e:25:60:a3:29:97:ba:23:d8:4d:65:13:97:bf:27:
         34:ae:6e:47:03:62:9f:40:1a:14:f6:1b:e2:1b:62:b4:3f:00:
         80:44:21:59:5d:50:f2:ec:81:77:57:70:f8:e4:a2:16:ef:cb:
         5a:e6:34:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:36:01 2024 by rpki-client on console-ams.rpki-client.org