Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3139392e302f32342d3234203d3e203538353532.roa
File:                     3230322e37322e3139392e302f32342d3234203d3e203538353532.roa (raw, json)
Hash identifier:          0apjzr4EB5B9PS/w/+U6JAnW4cJ/tSr/z/VxAgvm8qA=
Subject key identifier:   F7:F4:05:78:98:AF:A5:B2:70:DF:6A:3A:64:C7:EE:3E:65:AB:C0:B0
Certificate issuer:       /CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
Certificate serial:       35E1432D25DA2CD072006705B030EA892646AFAE
Authority key identifier: 9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3139392e302f32342d3234203d3e203538353532.roa
Signing time:             Thu 27 Jun 2024 05:01:46 +0000
ROA not before:           Thu 27 Jun 2024 04:56:46 +0000
ROA not after:            Thu 26 Jun 2025 05:01:46 +0000
asID:                     58552
IP address blocks:        202.72.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl
                          rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:e1:43:2d:25:da:2c:d0:72:00:67:05:b0:30:ea:89:26:46:af:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
        Validity
            Not Before: Jun 27 04:56:46 2024 GMT
            Not After : Jun 26 05:01:46 2025 GMT
        Subject: CN=F7F4057898AFA5B270DF6A3A64C7EE3E65ABC0B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8a:b2:fe:83:22:01:9d:fa:9d:7d:00:4a:6c:
                    e3:dc:c9:8d:d3:d3:95:fd:22:41:cd:e1:ca:ea:9d:
                    d7:10:b1:16:d5:00:6b:13:04:30:74:de:40:a0:22:
                    b8:3c:35:b9:65:57:6a:b1:7d:7e:89:1b:9e:4f:a9:
                    c5:5c:77:39:b2:0f:e6:4e:7f:b3:ea:41:e2:6e:8b:
                    8a:7a:66:4d:fa:ae:26:31:f7:f0:30:ee:70:04:fe:
                    44:36:19:81:99:e5:aa:7d:70:7e:67:a4:20:a2:8d:
                    b6:88:a5:f2:ed:0b:42:4a:09:5f:a6:ec:03:bc:cf:
                    4d:d5:26:6d:2f:b7:8b:5f:fd:77:e4:74:b9:cc:7d:
                    0e:e3:4c:20:0b:2b:41:6c:98:72:90:94:07:02:b6:
                    e4:10:de:55:60:d6:1e:3f:52:37:d9:7d:e0:5d:d0:
                    be:fb:7f:41:a7:9c:c0:56:43:e7:53:e1:a2:dc:a1:
                    01:a8:10:67:6f:4e:a9:3e:31:27:18:e0:22:49:eb:
                    b3:10:06:5c:b4:23:55:fb:f4:89:84:f3:cf:52:04:
                    81:4e:ed:b8:eb:df:51:8c:cc:5f:80:aa:8b:d8:af:
                    64:60:e6:79:0a:8a:91:94:16:ac:0b:b0:b4:5e:0b:
                    af:73:d9:89:3c:42:37:15:13:1c:e1:de:b4:72:51:
                    41:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F4:05:78:98:AF:A5:B2:70:DF:6A:3A:64:C7:EE:3E:65:AB:C0:B0
            X509v3 Authority Key Identifier:
                keyid:9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3139392e302f32342d3234203d3e203538353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.72.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:e1:a4:05:2e:60:a0:3a:5e:b6:a8:5f:d8:0b:64:6c:e5:52:
         29:2b:28:80:46:f8:6a:c2:2e:cc:11:04:e8:d5:32:b9:d4:37:
         1e:b7:14:a9:06:ba:1b:2e:1e:f7:8a:27:e2:77:9d:34:f9:7d:
         4b:cd:cc:29:21:25:cc:ab:da:07:70:a2:91:e6:9f:c3:68:3c:
         98:27:0d:76:d1:b0:92:c3:96:12:19:92:08:4d:a1:d3:00:bd:
         20:15:e3:b0:b6:bc:76:c0:66:bd:29:ae:97:02:36:f5:31:ae:
         1a:c6:95:6f:fa:ee:79:5c:8b:c8:28:95:53:35:61:f3:55:09:
         8f:03:80:b9:b9:03:c4:31:26:97:e1:67:22:0d:ea:1a:a0:75:
         cf:60:67:b2:f9:65:db:31:4a:29:ba:f2:52:a5:55:01:f8:e9:
         dd:90:c0:88:4e:b2:dc:1c:35:44:75:f2:b4:4d:55:89:89:8f:
         83:c2:23:7e:e0:aa:61:38:9d:d6:b9:c2:b6:d9:36:66:0d:26:
         8d:be:72:87:fb:bb:d1:83:c6:6c:bb:e7:60:62:85:f9:29:84:
         e3:73:66:77:f5:ed:39:c2:b2:17:e0:00:99:8e:1e:23:87:f6:
         b4:4c:54:e1:d4:12:17:b5:6b:98:f4:07:d4:fe:4d:0f:37:dd:
         33:56:6f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:29:57 2024 by rpki-client on console-fra.rpki-client.org