Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e38302e302f32342d3234203d3e203233363935.roa
File:                     3230322e3137332e38302e302f32342d3234203d3e203233363935.roa (raw, json)
Hash identifier:          Of+uC6Rn7FlecrNuXzonBx8A2eH9cSewEV+JQtDDBy0=
Subject key identifier:   C0:62:B7:62:3E:65:80:C8:BD:80:F4:46:47:0C:3D:B0:D3:A7:5D:BE
Certificate issuer:       /CN=41E09326F68CE0113635EACAF4E37394AE4E2D8C
Certificate serial:       1D4F00276EC79884DEEDE944EAD41E6FFB87F5F5
Authority key identifier: 41:E0:93:26:F6:8C:E0:11:36:35:EA:CA:F4:E3:73:94:AE:4E:2D:8C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e38302e302f32342d3234203d3e203233363935.roa
Signing time:             Wed 27 Sep 2023 03:22:51 +0000
ROA not before:           Wed 27 Sep 2023 03:17:51 +0000
ROA not after:            Wed 25 Sep 2024 03:22:51 +0000
asID:                     23695
IP address blocks:        202.173.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl
                          rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 03:19:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:4f:00:27:6e:c7:98:84:de:ed:e9:44:ea:d4:1e:6f:fb:87:f5:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41E09326F68CE0113635EACAF4E37394AE4E2D8C
        Validity
            Not Before: Sep 27 03:17:51 2023 GMT
            Not After : Sep 25 03:22:51 2024 GMT
        Subject: CN=C062B7623E6580C8BD80F446470C3DB0D3A75DBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ff:72:ba:8d:1d:06:ae:89:50:a1:cb:eb:6c:
                    18:54:23:f2:0e:9d:70:fa:aa:03:90:21:f0:b3:b5:
                    b8:5c:6f:a2:99:39:8f:95:52:18:7e:16:06:46:02:
                    5b:22:08:4e:c0:ea:c1:68:ad:46:37:48:0a:8f:87:
                    9d:5f:50:fc:ba:5c:99:3b:71:2d:4d:24:58:e2:e3:
                    f3:8c:8e:19:60:1d:91:0f:88:24:ea:25:4f:ee:af:
                    f8:c1:e6:d7:10:1d:48:54:bd:2e:2c:aa:69:6f:e0:
                    f7:fc:a5:46:f3:de:e1:ac:b0:06:bc:53:c7:62:2f:
                    80:a5:3d:e2:3d:39:9a:16:b5:d6:75:92:57:d8:93:
                    ac:13:c0:11:c0:22:fc:54:fc:de:87:69:9d:ca:3b:
                    8b:78:1e:f0:57:85:9b:53:a7:96:f7:d2:24:04:47:
                    af:5b:f8:a4:54:75:e6:34:7b:20:8b:33:14:49:62:
                    ef:36:02:78:b2:ba:9c:c3:98:87:46:9d:9f:ec:ab:
                    6f:f0:b0:98:18:82:6b:1b:c1:2f:c3:2c:6e:bd:0a:
                    ee:0e:7a:c6:58:f7:c0:6a:58:af:59:d2:e7:1c:c4:
                    b3:41:2b:65:b1:61:e6:55:de:a1:cb:e8:16:8a:39:
                    2e:3e:74:91:04:37:2e:45:85:de:d1:98:f4:cd:29:
                    e8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:62:B7:62:3E:65:80:C8:BD:80:F4:46:47:0C:3D:B0:D3:A7:5D:BE
            X509v3 Authority Key Identifier:
                keyid:41:E0:93:26:F6:8C:E0:11:36:35:EA:CA:F4:E3:73:94:AE:4E:2D:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e38302e302f32342d3234203d3e203233363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.173.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:b7:b3:4e:77:2b:5a:03:c7:e2:50:61:08:b1:a3:68:e1:0a:
         7f:50:f1:9a:9e:00:14:54:2e:ef:a2:cd:5e:5b:9e:1c:14:a6:
         25:ae:d5:53:a7:7b:60:83:58:e3:97:94:ae:41:c9:8c:4f:b2:
         3b:ee:0f:b5:a8:8b:2e:b5:d2:c0:56:00:94:42:e0:1d:81:42:
         8e:be:3c:b3:8c:48:8a:ee:d6:86:ae:84:1d:ea:61:d3:9d:31:
         7c:a5:43:fe:7d:ea:d5:71:10:c0:8c:48:38:87:eb:30:d7:c9:
         29:bb:82:b4:d3:90:21:36:e1:42:2f:df:88:5e:a5:07:87:da:
         7b:5e:75:b8:f9:d6:ff:f1:a6:04:5b:7a:f7:5a:c8:c6:47:27:
         15:d2:b7:ae:08:7e:46:6b:d9:bd:f4:5e:5c:99:b6:a5:62:67:
         b0:e8:52:ae:77:ac:62:63:70:ec:f8:67:16:42:de:99:c2:4a:
         29:ec:ff:ab:c5:21:22:65:1c:ea:16:05:c0:da:ec:5d:07:0f:
         06:66:b3:6f:01:76:7b:65:86:a4:09:3a:ee:2f:82:f9:46:f0:
         e2:11:21:6c:ed:ff:d5:c8:91:f1:79:9d:c1:2f:b1:da:13:7e:
         77:03:ff:33:60:dc:55:a7:08:a8:b1:5c:12:53:3e:04:22:4e:
         02:0e:f9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 22:12:28 2024 by rpki-client on console-fra.rpki-client.org