Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234362e302f32332d3233203d3e203338373738.roa
File:                     3230322e39332e3234362e302f32332d3233203d3e203338373738.roa (raw, json)
Hash identifier:          IKCMqxnMEwMx7NWBV2VLtK1SYWCkf90ZSGLzksi5uy8=
Subject key identifier:   3A:30:39:80:95:4B:9B:AC:CC:E9:09:AB:92:2A:DE:D9:07:A7:48:F1
Certificate issuer:       /CN=F38DFF094E16843854EAC1403C69FD7F77809D02
Certificate serial:       3B55C4A57B3F9F1211C954742324A61265577DEB
Authority key identifier: F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234362e302f32332d3233203d3e203338373738.roa
Signing time:             Mon 01 Jul 2024 01:03:38 +0000
ROA not before:           Mon 01 Jul 2024 00:58:38 +0000
ROA not after:            Mon 30 Jun 2025 01:03:38 +0000
asID:                     38778
IP address blocks:        202.93.246.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl
                          rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 13:37:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:55:c4:a5:7b:3f:9f:12:11:c9:54:74:23:24:a6:12:65:57:7d:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F38DFF094E16843854EAC1403C69FD7F77809D02
        Validity
            Not Before: Jul  1 00:58:38 2024 GMT
            Not After : Jun 30 01:03:38 2025 GMT
        Subject: CN=3A303980954B9BACCCE909AB922ADED907A748F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:59:d8:da:b3:82:88:a5:aa:3a:47:83:b4:d0:
                    73:b0:69:43:2a:2d:d2:e0:95:d3:7a:58:31:a5:ed:
                    a8:9d:f9:dd:96:9f:65:ec:04:3e:39:dc:f3:53:ab:
                    21:fe:55:31:cf:a3:7e:40:cf:b3:4d:38:7c:81:00:
                    e7:a2:3f:da:89:67:0a:3d:69:2b:40:72:4d:42:c7:
                    21:17:ab:69:b2:6e:9d:6c:a6:07:a3:de:20:20:fe:
                    93:ef:70:cf:d0:fd:de:eb:b3:1d:52:c2:d8:3b:24:
                    21:78:f1:a4:af:40:4d:80:d2:07:5f:5a:3a:92:4a:
                    0b:9b:f2:2d:ba:b2:70:59:2c:dd:96:dc:21:fc:fd:
                    54:89:66:c6:d1:c4:ae:b1:d6:50:4f:e9:c1:8b:b4:
                    27:e9:cb:26:40:ca:1a:ec:6c:46:ba:70:dd:55:94:
                    8c:69:b5:7c:7e:03:f0:d2:a5:ac:83:c9:fa:25:e1:
                    c0:71:81:67:ef:11:23:a1:56:65:a9:be:3a:ba:44:
                    64:74:fa:2d:8d:ea:1b:10:9e:be:57:4d:16:2f:d2:
                    e7:3a:93:ec:bd:65:cf:45:63:d0:d5:cb:81:1b:4f:
                    e2:a9:e0:20:48:a1:6d:76:25:86:a9:6d:13:8e:33:
                    af:bf:18:7d:21:d1:20:71:05:57:0d:cb:91:51:05:
                    84:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:30:39:80:95:4B:9B:AC:CC:E9:09:AB:92:2A:DE:D9:07:A7:48:F1
            X509v3 Authority Key Identifier:
                keyid:F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234362e302f32332d3233203d3e203338373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:98:c5:7a:73:a1:af:97:5d:cc:18:18:fe:22:3d:02:f9:b5:
         30:86:7f:5d:95:f9:15:07:94:54:12:cf:0a:50:a1:0e:46:0b:
         6e:7b:d5:72:ca:a7:ac:1d:a9:90:85:6c:bf:98:74:47:fc:39:
         51:ab:8c:b9:1a:0b:94:82:c6:fa:ec:e8:4a:39:06:a4:72:be:
         c3:b6:a6:d3:f6:6f:13:af:29:2b:30:61:fc:84:f9:69:24:81:
         c4:d4:ff:79:88:7b:68:22:e5:f3:96:be:d5:f4:9d:ef:a9:7a:
         94:20:2f:9d:53:fc:de:14:c3:d7:be:76:24:12:71:3c:a4:ac:
         c2:51:b4:52:d6:87:bc:55:03:28:4c:92:b5:c2:2b:86:30:40:
         9c:b0:9e:f3:06:e3:24:83:81:65:1e:c6:e4:ac:99:65:dc:aa:
         be:d8:87:55:f8:c4:8f:e8:77:1e:a4:47:1d:73:1b:b7:20:ac:
         13:93:15:56:f1:73:54:33:90:14:74:79:c5:1a:5d:dc:42:92:
         57:5c:bc:ed:d1:c6:e7:20:c8:fa:e5:85:90:9a:7e:ba:d2:fd:
         fb:4b:4e:31:7c:7f:16:a1:44:7d:5b:5e:1d:93:93:2f:60:c8:
         08:a5:35:3d:f3:95:7f:ef:23:9e:c0:d2:55:7a:8d:18:9e:03:
         0e:47:02:42
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUO1XEpXs/nxIRyVR0IySmEmVXfeswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM4REZGMDk0RTE2ODQzODU0RUFDMTQwM0M2OUZEN0Y3
NzgwOUQwMjAeFw0yNDA3MDEwMDU4MzhaFw0yNTA2MzAwMTAzMzhaMDMxMTAvBgNV
BAMTKDNBMzAzOTgwOTU0QjlCQUNDQ0U5MDlBQjkyMkFERUQ5MDdBNzQ4RjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdWdjas4KIpao6R4O00HOwaUMq
LdLgldN6WDGl7aid+d2Wn2XsBD453PNTqyH+VTHPo35Az7NNOHyBAOeiP9qJZwo9
aStAck1CxyEXq2mybp1spgej3iAg/pPvcM/Q/d7rsx1Swtg7JCF48aSvQE2A0gdf
WjqSSgub8i26snBZLN2W3CH8/VSJZsbRxK6x1lBP6cGLtCfpyyZAyhrsbEa6cN1V
lIxptXx+A/DSpayDyfol4cBxgWfvESOhVmWpvjq6RGR0+i2N6hsQnr5XTRYv0uc6
k+y9Zc9FY9DVy4EbT+Kp4CBIoW12JYapbROOM6+/GH0h0SBxBVcNy5FRBYRbAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUOjA5gJVLm6zM6Qmrkire2QenSPEwHwYDVR0j
BBgwFoAU843/CU4WhDhU6sFAPGn9f3eAnQIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
YWQ2ZGNjOS0xNzAwLTQ4ZWItOTA5OS02Njc4ZjkxYmY0NGUvMC9GMzhERkYwOTRF
MTY4NDM4NTRFQUMxNDAzQzY5RkQ3Rjc3ODA5RDAyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjM4REZGMDk0RTE2ODQzODU0RUFDMTQwM0M2OUZEN0Y3Nzgw
OUQwMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVhZDZkY2M5LTE3MDAtNDhlYi05
MDk5LTY2NzhmOTFiZjQ0ZS8wLzMyMzAzMjJlMzkzMzJlMzIzNDM2MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzMzODM3MzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcpd9jANBgkqhkiG
9w0BAQsFAAOCAQEAY5jFenOhr5ddzBgY/iI9Avm1MIZ/XZX5FQeUVBLPClChDkYL
bnvVcsqnrB2pkIVsv5h0R/w5UauMuRoLlILG+uzoSjkGpHK+w7am0/ZvE68pKzBh
/IT5aSSBxNT/eYh7aCLl85a+1fSd76l6lCAvnVP83hTD1752JBJxPKSswlG0UtaH
vFUDKEyStcIrhjBAnLCe8wbjJIOBZR7G5KyZZdyqvtiHVfjEj+h3HqRHHXMbtyCs
E5MVVvFzVDOQFHR5xRpd3EKSV1y87dHG5yDI+uWFkJp+utL9+0tOMXx/FqFEfVte
HZOTL2DICKU1PfOVf+8jnsDSVXqNGJ4DDkcCQg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:12 2024 by rpki-client on console-fra.rpki-client.org