Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3139342e302f32342d3234203d3e203538353532.roa
File:                     3230322e37322e3139342e302f32342d3234203d3e203538353532.roa (raw, json)
Hash identifier:          xi/DomC6pZOdnD30a0YCtlxPGCgG/p9Ie+K1F4X8eOA=
Subject key identifier:   5B:8A:D8:C8:98:5B:76:89:EF:79:FF:5B:4C:6A:13:A9:2D:D1:C8:CD
Certificate issuer:       /CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
Certificate serial:       0AE4BE32FC643F31703C33CE20D9877C3F240192
Authority key identifier: 9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3139342e302f32342d3234203d3e203538353532.roa
Signing time:             Mon 01 Jul 2024 01:03:53 +0000
ROA not before:           Mon 01 Jul 2024 00:58:53 +0000
ROA not after:            Mon 30 Jun 2025 01:03:53 +0000
asID:                     58552
IP address blocks:        202.72.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl
                          rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:e4:be:32:fc:64:3f:31:70:3c:33:ce:20:d9:87:7c:3f:24:01:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
        Validity
            Not Before: Jul  1 00:58:53 2024 GMT
            Not After : Jun 30 01:03:53 2025 GMT
        Subject: CN=5B8AD8C8985B7689EF79FF5B4C6A13A92DD1C8CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d1:71:bc:a4:8c:ed:37:c4:a5:7c:f3:b1:ee:
                    46:c6:5a:8f:da:8f:7a:1d:69:4b:98:80:90:36:2a:
                    b6:a7:0a:59:4e:29:5b:18:77:d4:6e:02:4c:73:a4:
                    a6:3c:a7:88:09:9a:46:3d:6a:0a:b1:8a:89:b0:5c:
                    fa:8f:ae:9a:e4:06:7b:19:d5:ef:8e:7e:e5:b6:e9:
                    9a:57:92:b0:53:53:26:0e:8e:6c:99:d3:d7:48:a8:
                    da:18:1c:e4:8f:de:a1:6e:09:64:02:35:fe:09:cf:
                    2a:03:ca:64:c1:19:20:fc:d2:02:f7:e6:b1:f9:b5:
                    a2:ba:8d:30:75:36:7a:0e:6e:cf:66:86:0e:d1:67:
                    b6:b7:a2:9b:e9:87:bd:14:ff:b9:33:13:05:b1:47:
                    2d:fc:b3:b1:d2:73:5d:ff:7a:53:9c:a9:bb:a7:ed:
                    17:a5:b9:3b:4b:3c:93:88:3f:d7:94:81:57:94:fe:
                    c5:46:38:0c:7b:6d:5a:4c:1c:e0:87:0b:09:90:fd:
                    27:ae:a3:e5:a5:c1:76:e0:40:5f:db:b7:d1:4c:17:
                    c5:42:f3:29:66:07:10:1a:35:9f:e5:df:a1:1b:09:
                    32:b1:2e:87:65:86:21:17:38:77:4b:1d:e4:49:50:
                    d8:fb:ef:f3:51:3a:46:90:1d:4e:51:d4:05:32:cd:
                    d7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8A:D8:C8:98:5B:76:89:EF:79:FF:5B:4C:6A:13:A9:2D:D1:C8:CD
            X509v3 Authority Key Identifier:
                keyid:9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3139342e302f32342d3234203d3e203538353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.72.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:15:ef:bc:20:4f:28:6a:90:69:45:0d:3a:7a:86:3f:96:3c:
         f4:7b:74:0b:2a:bd:75:04:7a:13:81:23:af:f2:bb:a5:f8:07:
         a6:86:d2:1e:b9:25:37:d6:83:b6:7c:44:5f:f9:65:66:17:c6:
         58:fe:42:56:53:7b:2c:aa:c9:ad:e4:21:50:d0:9e:80:f9:5a:
         46:95:95:b2:af:51:06:9b:ad:25:c0:ab:0f:60:7c:0b:2a:ec:
         db:c4:79:95:2e:ba:45:e8:64:2a:85:e9:b7:c7:ac:0e:67:53:
         da:97:2b:d0:fd:77:de:40:1c:f3:c3:43:e3:a1:85:df:1b:38:
         31:c1:ee:0f:9f:bd:dd:62:1f:7f:53:52:b1:85:5c:81:78:50:
         11:d2:5b:4c:87:ac:e6:74:19:8d:00:ec:b5:0c:5d:f7:76:b8:
         a7:79:3e:c6:ef:5e:f2:5b:ee:c0:35:53:c1:22:ac:b1:0e:0d:
         03:41:21:9a:da:6a:58:d1:aa:3f:54:07:f5:5b:77:b0:fa:90:
         df:19:ba:d6:fc:38:1b:39:4b:d8:16:83:6d:b6:a3:fe:87:41:
         47:14:15:79:60:98:8e:b4:28:c3:8c:54:72:c6:7a:1c:f7:d5:
         27:d3:a5:dd:73:cb:8a:f2:cc:f4:54:21:c0:5d:33:36:6b:d1:
         11:60:ed:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:17 2024 by rpki-client on console-ams.rpki-client.org