Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3139352e302f32342d3234203d3e203138313533.roa
File:                     3230322e37322e3139352e302f32342d3234203d3e203138313533.roa (raw, json)
Hash identifier:          ZDHJLQjR2EcKfELrR30PqEprpb2M1nxEOVJUfwH1Deo=
Subject key identifier:   19:5C:A0:4D:20:DC:8A:DB:C9:54:9C:C2:3C:3B:03:F3:58:2C:1B:8F
Certificate issuer:       /CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
Certificate serial:       1CED6CFBC737EF7EEED030FABE7F4121BA6D9BC7
Authority key identifier: 9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3139352e302f32342d3234203d3e203138313533.roa
Signing time:             Mon 01 Jul 2024 01:03:54 +0000
ROA not before:           Mon 01 Jul 2024 00:58:54 +0000
ROA not after:            Mon 30 Jun 2025 01:03:54 +0000
asID:                     18153
IP address blocks:        202.72.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl
                          rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ed:6c:fb:c7:37:ef:7e:ee:d0:30:fa:be:7f:41:21:ba:6d:9b:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
        Validity
            Not Before: Jul  1 00:58:54 2024 GMT
            Not After : Jun 30 01:03:54 2025 GMT
        Subject: CN=195CA04D20DC8ADBC9549CC23C3B03F3582C1B8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1a:e2:46:11:1f:f0:1e:f9:52:91:e3:5e:2c:
                    61:66:76:64:83:89:20:79:07:7f:ee:2f:77:58:76:
                    d4:47:87:3e:8d:5a:13:78:ad:82:e7:a6:71:d3:17:
                    19:cb:55:20:3f:39:0c:32:f3:97:a4:64:d0:3d:bd:
                    55:9f:fb:2b:b9:2a:9a:03:bf:b1:7e:88:66:ca:e7:
                    6d:5c:44:46:b7:5e:f5:d1:2e:de:19:84:dc:5f:e0:
                    87:75:d5:e8:0d:4f:32:ef:04:09:cc:27:6e:53:ad:
                    b9:64:f5:63:35:27:d8:2c:2d:00:a2:23:5c:e8:54:
                    d6:21:28:f7:f9:ae:64:94:df:af:de:3c:8d:24:74:
                    00:0f:26:75:f5:ff:75:60:7a:b2:72:a6:fa:f4:26:
                    a7:d7:9b:59:4e:e3:31:ba:ae:d8:d0:c8:1b:72:8e:
                    a1:23:13:ae:23:f4:d7:dd:6f:0e:a9:35:af:b6:fd:
                    c7:71:ee:75:04:79:3a:30:77:aa:ad:e7:53:9f:16:
                    47:21:3d:c2:57:48:cb:8e:76:de:7b:15:4b:b9:70:
                    4d:e7:bb:b8:eb:90:e8:1c:80:45:ec:d5:2a:05:0f:
                    47:7e:a2:90:74:5b:05:c8:cf:5c:7b:f4:37:89:dd:
                    20:44:97:a8:b3:66:ee:29:68:03:bb:ee:97:bf:9b:
                    8e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:5C:A0:4D:20:DC:8A:DB:C9:54:9C:C2:3C:3B:03:F3:58:2C:1B:8F
            X509v3 Authority Key Identifier:
                keyid:9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3139352e302f32342d3234203d3e203138313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.72.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:e7:0b:80:07:40:50:e0:59:66:f0:f5:13:cb:8d:a1:3e:66:
         01:fd:a7:8a:34:11:d6:33:99:c5:49:c2:0f:2c:36:cd:e0:5f:
         45:09:3c:95:91:f0:50:29:88:14:3f:93:4e:dc:e0:3f:9b:a2:
         b4:d7:24:7b:ff:02:c1:be:05:75:8d:ce:e6:0c:d7:bd:43:43:
         f8:58:83:e3:b1:7c:46:66:d3:4e:46:56:60:00:ee:ca:71:5c:
         60:7f:ee:3c:76:18:f2:44:33:70:fd:61:8f:8c:0b:38:c9:dc:
         43:c8:bd:7f:d6:1f:b9:7b:ec:f4:20:03:54:3f:e3:b4:65:f9:
         2f:50:4e:5d:d3:3c:3d:9b:7c:18:00:f2:88:e0:13:a9:02:c4:
         d6:90:55:66:43:60:9e:90:25:89:85:4a:c5:a5:37:18:ce:04:
         da:45:a5:cb:4b:52:62:a0:eb:d4:e5:f9:e7:fd:50:4b:66:5e:
         80:28:35:d0:f8:eb:e9:9f:06:c8:56:52:4e:d2:cb:57:42:80:
         91:aa:10:3c:6b:ba:0f:e0:85:fe:7e:d2:80:b6:c2:fe:68:c5:
         64:c4:60:be:3d:e0:44:10:20:3c:4e:95:c0:c3:ff:63:06:a9:
         ac:ac:ac:21:88:0c:c0:e3:12:e9:70:a7:d9:cd:66:94:c4:fa:
         c3:2e:d7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:29:57 2024 by rpki-client on console-fra.rpki-client.org