Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e36352e302f32342d3234203d3e203233363935.roa
File:                     3230322e3137332e36352e302f32342d3234203d3e203233363935.roa (raw, json)
Hash identifier:          B8z0jkkemFfPnoL5QQRUJXA706dn7mJbJMSKyCA4ySc=
Subject key identifier:   7E:D6:00:DA:AD:AC:FA:41:3E:05:F2:63:52:C5:94:82:79:92:2F:CB
Certificate issuer:       /CN=41E09326F68CE0113635EACAF4E37394AE4E2D8C
Certificate serial:       198DFB9E3D2A518864BDE065293C7F47E3E3DB9A
Authority key identifier: 41:E0:93:26:F6:8C:E0:11:36:35:EA:CA:F4:E3:73:94:AE:4E:2D:8C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e36352e302f32342d3234203d3e203233363935.roa
Signing time:             Tue 10 Oct 2023 03:46:21 +0000
ROA not before:           Tue 10 Oct 2023 03:41:21 +0000
ROA not after:            Tue 08 Oct 2024 03:46:21 +0000
asID:                     23695
IP address blocks:        202.173.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl
                          rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 03:19:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:8d:fb:9e:3d:2a:51:88:64:bd:e0:65:29:3c:7f:47:e3:e3:db:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41E09326F68CE0113635EACAF4E37394AE4E2D8C
        Validity
            Not Before: Oct 10 03:41:21 2023 GMT
            Not After : Oct  8 03:46:21 2024 GMT
        Subject: CN=7ED600DAADACFA413E05F26352C5948279922FCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c0:2d:c3:39:f7:6d:e9:d3:a8:ea:ca:e6:22:
                    05:7c:35:f5:86:c6:c4:98:85:ee:12:ec:a1:bc:56:
                    e7:8c:cd:8b:c9:f2:5b:c0:c8:b8:38:c9:24:aa:e2:
                    17:2e:8d:2d:14:a7:90:86:9b:3c:1e:d1:85:df:db:
                    cb:b4:04:59:88:70:30:56:56:f6:06:73:df:47:df:
                    5e:fd:b4:d2:70:c6:7d:45:b6:64:b6:e7:21:ac:d8:
                    a8:2f:12:41:5d:22:27:07:93:7e:1a:1e:15:57:15:
                    02:a3:91:1f:5c:2f:44:9c:8e:7f:7c:fa:ca:5c:6a:
                    33:f7:d1:31:f9:53:80:7d:13:fb:f6:55:34:b3:99:
                    32:fe:7a:bc:8a:10:fb:4a:1c:8f:fd:60:4d:1d:cc:
                    8c:d1:0b:4c:02:55:d1:c2:7c:83:d2:76:12:66:d1:
                    29:7c:26:18:28:16:c3:59:a7:7e:b1:45:f7:6c:ee:
                    7f:3b:58:40:70:ff:7c:ab:5a:8e:10:3c:f1:c6:18:
                    83:38:81:56:be:f6:e4:8c:9f:00:36:34:d4:fc:9e:
                    43:3c:ad:0b:ec:88:4c:b8:01:cc:bc:8e:65:de:3e:
                    cd:5e:2c:61:1f:6d:f1:87:28:5c:f0:4c:6c:6a:be:
                    2b:f0:9e:21:b9:24:32:d3:6b:de:b6:08:08:f4:ac:
                    c4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D6:00:DA:AD:AC:FA:41:3E:05:F2:63:52:C5:94:82:79:92:2F:CB
            X509v3 Authority Key Identifier:
                keyid:41:E0:93:26:F6:8C:E0:11:36:35:EA:CA:F4:E3:73:94:AE:4E:2D:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e36352e302f32342d3234203d3e203233363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.173.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:66:c5:47:44:80:50:57:a6:66:41:df:0b:1e:79:9f:3f:96:
         cd:17:b5:6c:f1:5d:3d:28:37:e7:e8:aa:7f:17:6d:95:1e:e2:
         bb:e5:8d:ca:9c:16:dc:7e:c2:06:17:f5:fe:91:19:f9:8c:dd:
         34:c7:a3:fc:34:7c:f1:2a:92:29:37:db:b0:21:41:c6:ea:c8:
         75:bd:7b:09:8d:b7:f6:0e:2f:21:84:6d:55:c6:8d:5f:3d:16:
         6d:0a:ca:22:98:e1:41:d0:aa:c6:cd:35:d0:72:ad:2c:80:93:
         95:e0:8f:12:0b:b3:94:4f:5a:1e:f7:e4:2a:30:64:0e:c7:fd:
         42:6e:58:5c:5c:59:40:88:22:f4:56:a7:55:18:10:7a:28:98:
         65:ee:e5:3d:22:4c:48:c6:f7:c3:dc:01:ec:ec:ed:3a:9b:d2:
         4e:32:8d:5c:70:8b:98:27:9c:8a:76:dd:c7:0e:65:61:0e:3c:
         d0:f2:64:dd:84:90:bd:e1:c5:21:4b:c1:3e:46:4b:b9:6c:46:
         22:6c:36:08:f5:55:7c:15:ce:4f:b1:58:60:fb:61:24:4b:69:
         5e:07:ce:e8:78:28:af:94:ec:52:12:1c:62:b0:0c:1d:a8:0a:
         fb:37:4d:c7:99:aa:8b:ec:01:d8:db:8c:30:2f:db:ce:09:52:
         4f:d6:b0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 22:12:28 2024 by rpki-client on console-fra.rpki-client.org