Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234362e302f32342d3234203d3e203338373738.roa
File:                     3230322e39332e3234362e302f32342d3234203d3e203338373738.roa (raw, json)
Hash identifier:          nP5ghc/w9D/B5ENDC9cSkfzoaC33TZbwzsOf4OkDm5Q=
Subject key identifier:   8F:DB:9A:DD:10:83:B6:82:9C:CD:7B:93:F0:75:8D:D9:AD:FE:34:B6
Certificate issuer:       /CN=F38DFF094E16843854EAC1403C69FD7F77809D02
Certificate serial:       45F1630145B6B99A099411C2AA165AB2058E12DC
Authority key identifier: F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234362e302f32342d3234203d3e203338373738.roa
Signing time:             Mon 02 Jun 2025 02:02:41 +0000
ROA not before:           Mon 02 Jun 2025 01:57:41 +0000
ROA not after:            Mon 01 Jun 2026 02:02:41 +0000
asID:                     38778
IP address blocks:        202.93.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl
                          rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 12:46:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:f1:63:01:45:b6:b9:9a:09:94:11:c2:aa:16:5a:b2:05:8e:12:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F38DFF094E16843854EAC1403C69FD7F77809D02
        Validity
            Not Before: Jun  2 01:57:41 2025 GMT
            Not After : Jun  1 02:02:41 2026 GMT
        Subject: CN=8FDB9ADD1083B6829CCD7B93F0758DD9ADFE34B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:5c:55:a2:46:bb:1c:89:25:14:46:c0:e1:b0:
                    db:84:8f:69:06:37:1d:ad:22:a7:9f:3d:3f:ef:e4:
                    a5:90:9b:3f:11:8b:36:70:96:b9:10:8a:ed:8c:2e:
                    b5:99:dd:4c:b9:c4:89:95:b3:b5:eb:81:ac:5e:93:
                    57:4e:c4:81:23:4c:d3:ad:0f:40:28:2e:4f:26:0a:
                    3f:c3:9f:73:da:10:ac:45:a5:b8:63:c1:87:08:cd:
                    44:55:39:bc:32:b9:4a:12:36:2d:7f:f4:39:2a:c2:
                    e8:91:14:44:a1:a2:03:a4:71:94:2e:0a:7d:6c:4e:
                    61:fe:30:63:5a:fa:3b:b3:81:45:7e:0a:2a:d2:4a:
                    63:a5:84:fe:04:f3:90:96:d9:a1:a6:7b:72:61:02:
                    5d:4f:7d:19:33:83:dd:06:75:75:3c:9b:ff:5b:b4:
                    f5:5e:79:9e:a2:24:69:1e:dc:a5:f4:3c:9c:15:7b:
                    5a:8f:91:9a:cb:84:57:5d:da:2c:22:9e:25:81:02:
                    f6:c7:dd:fe:c6:69:a7:b4:12:40:b5:21:d6:05:99:
                    59:b9:a4:fe:be:5c:92:0a:03:30:26:63:62:d6:09:
                    96:63:02:90:77:f3:39:ec:61:57:56:eb:da:02:3d:
                    4f:81:80:41:b6:45:69:a6:60:48:84:27:e3:85:2c:
                    41:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:DB:9A:DD:10:83:B6:82:9C:CD:7B:93:F0:75:8D:D9:AD:FE:34:B6
            X509v3 Authority Key Identifier:
                keyid:F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234362e302f32342d3234203d3e203338373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:fe:78:26:e4:89:57:19:43:c0:e2:84:8d:98:af:ec:6d:35:
         db:db:fd:48:00:f7:3f:29:61:86:ca:82:6e:7c:6f:0c:72:b9:
         b3:e2:63:4a:fc:49:e0:35:2e:95:fe:f0:16:6c:a2:69:11:a3:
         8e:97:d9:ee:0d:8a:91:1d:f3:c4:78:3c:3a:8f:93:d2:21:9c:
         26:e6:78:e0:fe:b3:3c:26:8f:70:ea:dd:0c:1e:18:ba:87:20:
         41:be:8d:4d:44:0a:e9:fb:b9:c7:a9:40:11:97:6e:a5:e4:c9:
         6a:c3:24:ef:8e:be:6f:9f:d1:28:ea:6a:88:fe:c5:a1:c5:38:
         e3:30:7b:3e:74:f3:a5:92:7b:2a:e4:9d:0f:15:e1:ec:7e:23:
         a8:46:df:2e:97:55:53:5b:d6:be:1c:29:6f:65:fa:f9:93:16:
         b9:f3:4f:27:38:80:b0:70:0a:a2:26:9e:0a:78:ed:4f:b4:33:
         b1:c5:82:32:94:3d:48:2a:47:b4:19:d0:26:e3:4b:3b:d6:30:
         b8:74:fb:62:c4:1a:48:37:86:94:f9:e4:98:52:7b:d1:26:89:
         cb:0b:f7:e9:20:49:d8:f9:07:18:f6:b8:91:8a:ae:b4:ea:df:
         1d:52:3f:a7:fa:fe:e3:b6:b2:a5:62:16:35:7a:db:b8:5d:8f:
         fb:3a:8c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:25:51 2025 by rpki-client