Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3230322e37332e31382e302f32342d3234203d3e203538383136.roa
File:                     3230322e37332e31382e302f32342d3234203d3e203538383136.roa (raw, json)
Hash identifier:          Fas3+WUDV1JekXFnK+JFMPTcVQYtvX89MBNaToE37Vg=
Subject key identifier:   1E:1A:F7:34:B1:03:A4:35:17:E3:B6:03:68:A0:B0:16:7C:D3:52:F4
Certificate issuer:       /CN=2042008AEC80152F373D2A04DFD3893EE2F92166
Certificate serial:       7B13C54D8E5ECE24D85B9104A541A3BBA265D44E
Authority key identifier: 20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3230322e37332e31382e302f32342d3234203d3e203538383136.roa
Signing time:             Thu 11 Apr 2024 11:00:01 +0000
ROA not before:           Thu 11 Apr 2024 10:55:01 +0000
ROA not after:            Thu 10 Apr 2025 11:00:01 +0000
asID:                     58816
IP address blocks:        202.73.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl
                          rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 03:58:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:13:c5:4d:8e:5e:ce:24:d8:5b:91:04:a5:41:a3:bb:a2:65:d4:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2042008AEC80152F373D2A04DFD3893EE2F92166
        Validity
            Not Before: Apr 11 10:55:01 2024 GMT
            Not After : Apr 10 11:00:01 2025 GMT
        Subject: CN=1E1AF734B103A43517E3B60368A0B0167CD352F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d5:ba:06:2f:42:7e:15:f9:0a:57:b2:d7:68:
                    36:f2:fc:ce:47:5d:8a:29:b9:32:87:15:89:5a:ea:
                    59:9b:6a:38:23:40:ee:ea:37:bd:84:64:92:47:ab:
                    5b:a3:51:be:b7:a5:9a:b1:21:de:68:42:3d:84:74:
                    85:17:2a:05:36:94:d3:6a:ae:76:8a:f2:f2:b5:b5:
                    7f:9f:71:b5:9e:8a:fb:32:2f:1f:78:31:f1:03:bd:
                    77:7f:22:56:be:c2:3e:a6:97:2a:54:fb:42:3f:8c:
                    48:dc:f4:fd:e0:25:34:e3:87:ea:f7:0c:09:aa:78:
                    75:91:73:13:20:0b:65:a5:e8:11:be:30:e2:38:c9:
                    d0:97:4c:b6:32:98:74:c6:a8:08:55:77:15:4f:56:
                    5f:46:80:70:76:03:9d:5d:03:f1:e2:fb:43:8e:a6:
                    9b:93:7f:f1:9b:b0:8a:48:00:a3:15:7d:c7:b9:f3:
                    5d:f8:e6:ba:bf:46:c2:80:a5:89:7e:18:26:7e:90:
                    fe:25:8f:f3:bf:cc:1b:e8:23:00:c7:4e:8b:7b:96:
                    28:19:14:d8:be:fa:22:d6:a9:74:c8:67:06:a8:33:
                    14:2d:4d:11:3a:8e:7c:ff:c7:50:2e:52:b1:12:a4:
                    1a:69:4a:a3:82:83:90:8e:2e:60:de:70:09:ee:0e:
                    ad:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:1A:F7:34:B1:03:A4:35:17:E3:B6:03:68:A0:B0:16:7C:D3:52:F4
            X509v3 Authority Key Identifier:
                keyid:20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3230322e37332e31382e302f32342d3234203d3e203538383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.73.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:2f:fc:62:23:47:bc:8e:53:3d:77:e3:0a:d7:87:61:8e:04:
         9c:64:be:4d:15:f2:d8:29:76:9d:b2:6e:e1:e3:c2:43:66:2f:
         88:bf:3c:2d:db:1e:3b:b3:3f:93:56:f7:92:19:77:54:99:53:
         1f:46:d0:40:ac:04:2c:3a:cf:a8:17:ef:4c:5b:c4:2e:23:f6:
         23:d9:b2:3d:67:56:0b:cb:cf:7b:34:38:8f:90:a5:d7:74:a8:
         a0:37:2d:76:8c:a3:d5:7f:ac:71:53:1b:07:33:b0:52:e5:af:
         92:76:af:2d:e4:e2:8d:45:17:6c:4e:95:f3:0d:2c:a7:36:b6:
         f6:42:c4:3a:95:5f:bf:29:7c:9a:9b:5c:07:e0:3a:b3:47:af:
         e0:b6:80:dd:09:c5:9b:97:72:97:a0:0c:e4:28:40:f5:d3:cc:
         ce:69:aa:fd:9a:7f:c4:5d:9a:fc:05:a3:16:3c:a8:77:36:32:
         8f:e0:af:17:08:6e:82:8a:df:0d:db:9c:c9:3b:b3:34:7e:e3:
         59:1c:40:4d:6b:74:ca:19:06:fc:a9:c1:9c:ac:96:98:0c:12:
         f8:f8:50:64:c4:0a:cc:04:49:81:3c:fe:e0:7b:d4:cd:50:db:
         35:e1:8c:2d:f1:bd:c5:bd:50:9d:87:63:25:ac:5e:0e:a4:8d:
         42:83:fb:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 04:59:48 2024 by rpki-client on console-fra.rpki-client.org