Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e36382e302f32342d3234203d3e203233363935.roa
File:                     3230322e3137332e36382e302f32342d3234203d3e203233363935.roa (raw, json)
Hash identifier:          pM4KoVee+o5dteKGKycDf6CyDdLLV2OhlUAjtGPpp+E=
Subject key identifier:   8A:35:AE:2F:DB:1D:16:6D:E3:47:2E:DA:C5:2B:40:73:07:29:EA:5F
Certificate issuer:       /CN=41E09326F68CE0113635EACAF4E37394AE4E2D8C
Certificate serial:       380B85FC4BBCFA8BF1E22CE5CC52348FA5948C53
Authority key identifier: 41:E0:93:26:F6:8C:E0:11:36:35:EA:CA:F4:E3:73:94:AE:4E:2D:8C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e36382e302f32342d3234203d3e203233363935.roa
Signing time:             Tue 10 Oct 2023 03:45:39 +0000
ROA not before:           Tue 10 Oct 2023 03:40:39 +0000
ROA not after:            Tue 08 Oct 2024 03:45:39 +0000
asID:                     23695
IP address blocks:        202.173.68.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl
                          rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 04:53:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:0b:85:fc:4b:bc:fa:8b:f1:e2:2c:e5:cc:52:34:8f:a5:94:8c:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41E09326F68CE0113635EACAF4E37394AE4E2D8C
        Validity
            Not Before: Oct 10 03:40:39 2023 GMT
            Not After : Oct  8 03:45:39 2024 GMT
        Subject: CN=8A35AE2FDB1D166DE3472EDAC52B40730729EA5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d2:5f:d2:66:14:76:ee:b2:5d:82:32:79:19:
                    9e:90:a3:46:74:e5:57:4f:58:e4:9a:d6:c1:50:74:
                    2e:19:88:35:b6:25:04:58:79:89:83:87:de:e4:be:
                    61:8a:4b:ae:cc:75:2a:e7:d0:50:68:2a:43:6a:12:
                    de:63:69:d2:4b:72:3d:2c:9c:c2:1a:05:59:02:65:
                    57:3e:53:08:e9:ba:03:0b:0c:f2:3b:df:f0:0c:26:
                    89:33:12:c2:39:ce:51:86:f7:7c:cb:7a:52:21:f3:
                    3e:63:27:e0:9b:af:e5:99:ac:1c:6a:ff:77:ca:41:
                    76:bb:01:78:86:d5:11:39:a0:38:e0:c6:4f:12:c3:
                    51:db:dc:0d:3f:b8:77:4a:4d:d6:19:af:24:e3:d1:
                    70:8b:e6:b8:13:8f:a5:97:07:54:15:b3:62:48:ec:
                    ea:08:d6:ba:f5:d4:0d:40:f0:1b:d3:12:7d:d8:87:
                    fd:82:9f:c2:94:46:74:27:20:4b:5f:b6:69:cb:35:
                    2e:4a:97:f8:9b:f5:66:25:e7:b1:bc:5f:8d:30:04:
                    9a:75:93:7d:62:93:3a:4c:43:6a:fd:8b:4b:15:3a:
                    3b:01:1a:bc:8b:eb:a9:bf:08:ec:3b:75:76:f3:b8:
                    d3:09:51:eb:8c:93:57:9a:22:0b:e2:54:c8:54:41:
                    49:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:35:AE:2F:DB:1D:16:6D:E3:47:2E:DA:C5:2B:40:73:07:29:EA:5F
            X509v3 Authority Key Identifier:
                keyid:41:E0:93:26:F6:8C:E0:11:36:35:EA:CA:F4:E3:73:94:AE:4E:2D:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e36382e302f32342d3234203d3e203233363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.173.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:49:b1:1d:60:11:48:68:b9:49:b5:70:a8:7a:d2:20:c8:2e:
         ff:25:6d:d3:2b:42:2f:4b:99:d1:b8:b9:69:5a:11:56:52:3d:
         6f:27:6a:17:e5:42:04:57:7e:ed:aa:ad:18:3a:26:ac:31:d4:
         62:d4:2d:b3:66:c8:18:2e:00:19:51:0a:8b:da:a9:bd:58:1e:
         cd:4a:67:43:4a:18:2a:1d:5d:77:c4:eb:90:d4:7c:d9:05:68:
         65:00:f7:05:fc:61:36:39:0e:c0:c7:42:5b:1c:b3:cf:e3:43:
         4e:d7:22:3b:35:75:4a:c4:eb:16:08:96:d5:b6:0b:24:80:e1:
         9f:ef:b0:89:51:bc:4f:ee:44:38:46:e0:65:5f:fd:4d:30:31:
         13:38:ec:51:55:1f:92:9d:36:ce:0f:d5:53:37:89:33:7b:9a:
         dd:7f:03:21:db:3b:39:08:2d:48:6a:e2:4e:b2:4c:e9:04:bf:
         63:65:21:50:7f:89:d7:8c:6d:10:ba:83:70:dc:07:8a:c1:65:
         a1:31:94:78:04:00:5d:be:f1:f4:a4:4a:14:e4:0c:5c:74:78:
         66:09:e2:a9:49:10:6f:6f:b0:5e:c0:3d:f9:84:27:f8:12:aa:
         79:74:f4:85:a3:d2:c1:b0:96:23:8b:64:41:ce:12:c6:15:b2:
         9d:85:e7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 00:11:41 2024 by rpki-client on console-ams.rpki-client.org