Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234362e302f32332d3233203d3e203338373738.roa
File:                     3230322e39332e3234362e302f32332d3233203d3e203338373738.roa (raw, json)
Hash identifier:          yny4n8n1rYjn3ZILS+ERkwyoGJm0YQrNG87QKfOiYTM=
Subject key identifier:   6C:11:68:DE:BC:8C:E1:F9:77:07:15:64:61:33:59:E7:C7:3B:C6:9D
Certificate issuer:       /CN=F38DFF094E16843854EAC1403C69FD7F77809D02
Certificate serial:       1CE07ADD96AA3A1FE0D0E55B7C9D6FB2B4ACE15E
Authority key identifier: F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234362e302f32332d3233203d3e203338373738.roa
Signing time:             Mon 31 Jul 2023 00:05:30 +0000
ROA not before:           Mon 31 Jul 2023 00:00:30 +0000
ROA not after:            Mon 29 Jul 2024 00:05:30 +0000
asID:                     38778
IP address blocks:        202.93.246.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl
                          rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Apr 2024 20:12:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:e0:7a:dd:96:aa:3a:1f:e0:d0:e5:5b:7c:9d:6f:b2:b4:ac:e1:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F38DFF094E16843854EAC1403C69FD7F77809D02
        Validity
            Not Before: Jul 31 00:00:30 2023 GMT
            Not After : Jul 29 00:05:30 2024 GMT
        Subject: CN=6C1168DEBC8CE1F977071564613359E7C73BC69D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:06:6f:f9:cb:a4:06:33:39:06:90:18:62:b8:
                    10:4e:e9:90:e5:ac:bf:13:12:e7:b8:af:0e:51:10:
                    ad:fe:ea:cc:f7:e1:e7:5e:3f:76:2e:0f:59:e4:02:
                    12:7e:9b:47:8c:ec:bb:60:65:53:3a:9c:88:f2:02:
                    ad:09:9c:f1:28:c0:d2:bc:61:49:26:12:b3:eb:c8:
                    23:07:29:20:85:b5:4f:83:47:e6:ec:43:43:98:d0:
                    d2:fb:35:e7:55:99:45:1c:21:0e:c7:0b:dd:71:a5:
                    7d:be:db:ee:fe:85:49:cd:c8:f8:25:04:88:46:86:
                    78:13:6e:1e:ad:0a:07:4e:76:2a:ff:1a:20:b6:76:
                    e5:68:4b:99:0b:58:48:4f:39:31:05:68:e5:76:7a:
                    c6:35:eb:78:b5:ea:42:b5:c6:db:07:7a:33:5d:a0:
                    65:ad:f8:d0:58:ba:99:27:6e:f0:1d:91:7f:55:28:
                    19:bd:47:66:ee:6d:ee:a3:c3:35:05:a0:0c:c3:de:
                    80:e4:c9:ae:9a:10:06:3d:c4:61:d0:c7:8d:6a:de:
                    a9:40:28:e5:37:0f:5e:e3:c1:e0:9a:df:fd:95:e8:
                    b4:ed:10:3d:9f:a8:f4:f3:ad:41:d5:7d:2a:d6:a7:
                    3e:96:5b:b9:55:a4:0d:3a:e1:48:7d:48:15:24:bc:
                    e0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:11:68:DE:BC:8C:E1:F9:77:07:15:64:61:33:59:E7:C7:3B:C6:9D
            X509v3 Authority Key Identifier:
                keyid:F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234362e302f32332d3233203d3e203338373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:bd:c1:a5:2f:b2:cd:46:44:65:fc:34:b1:a3:00:cc:d0:f0:
         63:b2:f0:c8:69:bf:f7:cd:f9:75:61:bf:94:3d:47:3c:8b:06:
         e0:6a:69:3f:cb:26:7d:d6:10:03:6f:93:dd:8f:02:f6:68:ab:
         af:10:38:25:d4:c4:9f:1b:bb:97:a5:81:19:55:cf:2d:8c:b4:
         90:18:fb:53:a3:94:dd:b4:bb:b7:5f:c6:ef:99:eb:fc:39:94:
         83:d5:42:9c:3e:19:e8:a8:19:24:6f:e2:7e:de:95:18:6f:eb:
         f4:6a:cf:cf:d2:c4:8c:dc:01:66:28:3c:a3:ee:55:a4:06:a9:
         24:34:8f:6c:73:1f:bc:47:05:d4:fa:20:95:e5:1a:3a:83:10:
         13:b7:39:95:80:b2:ce:d8:99:eb:12:fd:11:f0:c5:d0:53:76:
         43:07:f8:9d:9b:fb:98:61:03:80:fd:d4:2a:f9:32:34:50:cd:
         3e:4a:26:a2:19:54:c8:ef:7b:07:d2:0f:ea:db:75:45:68:95:
         8c:43:89:63:6e:af:79:f0:61:78:9f:cc:2a:d0:68:13:41:3f:
         dd:39:ff:c8:a4:4a:63:a3:06:9f:0f:c7:8b:fd:02:12:ab:59:
         ec:f4:e2:a8:4a:a7:54:8e:28:44:eb:7f:fa:53:f2:bd:d2:d8:
         c4:14:7d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 19:27:57 2024 by rpki-client on console-fra.rpki-client.org