Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230362e302f32342d3234203d3e203138313533.roa
File:                     3230322e37322e3230362e302f32342d3234203d3e203138313533.roa (raw, json)
Hash identifier:          NhokA+dkNeyTa0cIuzxjlIODiQueTMP+c1vLStKO2M0=
Subject key identifier:   E4:42:64:84:F5:7B:27:38:5C:65:51:75:7E:31:47:7B:DB:BD:A0:77
Certificate issuer:       /CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
Certificate serial:       6A45559989707509D82D404E58CBB86271C78F64
Authority key identifier: 9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230362e302f32342d3234203d3e203138313533.roa
Signing time:             Mon 01 Jul 2024 01:03:54 +0000
ROA not before:           Mon 01 Jul 2024 00:58:54 +0000
ROA not after:            Mon 30 Jun 2025 01:03:54 +0000
asID:                     18153
IP address blocks:        202.72.206.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl
                          rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:45:55:99:89:70:75:09:d8:2d:40:4e:58:cb:b8:62:71:c7:8f:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
        Validity
            Not Before: Jul  1 00:58:54 2024 GMT
            Not After : Jun 30 01:03:54 2025 GMT
        Subject: CN=E4426484F57B27385C6551757E31477BDBBDA077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8b:a7:f4:fd:c7:df:c6:8e:4c:e8:7b:9d:7f:
                    e9:55:8f:b1:bf:02:82:78:46:4d:b6:ac:94:2c:dc:
                    65:e9:fe:f1:6b:fd:85:fa:92:e9:20:da:f9:a5:0e:
                    c2:96:7f:16:de:4f:80:84:e9:ce:25:62:79:d2:01:
                    77:81:08:11:d0:e9:cb:23:b5:61:0a:66:3d:1a:ac:
                    9b:fd:ee:df:88:ea:3f:d8:4f:c2:b7:58:2f:25:a2:
                    42:d7:a9:b2:34:bf:f2:1f:0d:9c:01:fc:59:13:68:
                    84:30:71:5f:96:a6:d0:83:da:a4:39:f0:a7:50:d1:
                    5a:dc:61:4b:57:94:a5:c7:3f:af:30:59:80:51:f8:
                    a5:03:5a:39:7d:97:d7:62:e2:8e:f7:91:f5:ee:61:
                    2c:47:c4:5e:69:3f:27:aa:77:74:eb:31:8f:56:25:
                    2c:ae:15:3c:7f:74:da:7e:a6:70:0c:e3:53:82:9b:
                    21:38:68:17:91:14:72:07:34:d0:57:11:d2:e1:d3:
                    00:0d:db:c7:d9:bd:31:a2:95:7f:84:ac:c1:0b:f6:
                    3b:2e:9e:35:d1:7a:88:ee:01:14:83:01:aa:c8:4f:
                    14:09:c8:48:0e:3a:1c:5e:ca:c1:60:5a:43:6e:fc:
                    db:40:24:9d:0d:7f:ff:94:ae:2c:18:cc:9c:9b:bc:
                    d1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:42:64:84:F5:7B:27:38:5C:65:51:75:7E:31:47:7B:DB:BD:A0:77
            X509v3 Authority Key Identifier:
                keyid:9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230362e302f32342d3234203d3e203138313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.72.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:4e:b6:99:b9:eb:06:c2:f6:c9:7c:2e:1a:82:78:00:d3:09:
         3a:bb:0b:84:c5:1c:db:bb:c1:f2:19:f9:6e:6d:dd:2f:06:24:
         31:54:67:60:bd:c0:d8:87:43:50:5b:48:f9:5a:5e:ba:01:5e:
         c4:a9:a1:5c:39:0a:84:20:62:bb:6f:5b:aa:ef:23:f2:5b:aa:
         87:97:c1:e7:e3:21:25:57:67:d7:97:17:3e:a0:66:d5:79:e2:
         f4:e5:3b:59:b1:0f:79:8c:fa:4f:dd:9e:0e:63:cf:b4:d8:4f:
         d1:03:78:f6:19:e7:62:f5:cb:f8:18:fc:73:e5:bb:f2:f4:c5:
         7e:66:60:cd:ba:2f:8b:83:6f:2c:2a:21:6f:72:d1:52:0e:a8:
         5f:c7:43:e7:5a:3f:1e:b4:a9:6e:d0:15:e0:b0:05:d6:a1:65:
         0f:30:47:28:0f:29:a2:5f:59:b0:3a:93:7e:ae:9a:60:a8:dc:
         56:15:ab:2f:a3:20:6b:be:11:6e:58:ab:8d:37:47:73:64:1b:
         a6:9f:a1:03:3a:dc:27:ec:b5:eb:30:73:39:ce:05:aa:8e:c0:
         91:de:de:5d:f8:be:23:c3:b4:63:1e:97:a1:6e:0e:50:86:77:
         18:6b:b4:02:a5:fd:dc:26:ff:9d:21:5e:5e:03:27:8d:e7:d1:
         bb:f7:58:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:17 2024 by rpki-client on console-ams.rpki-client.org