Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/3230322e362e3232342e302f32302d3234203d3e203233373536.roa
File:                     3230322e362e3232342e302f32302d3234203d3e203233373536.roa (raw, json)
Hash identifier:          yoojfMzQKh4mJ5yJkpKCOee+XIAQV6Uq1iQBpPZ4uAE=
Subject key identifier:   9F:43:A1:B6:71:43:80:97:2D:6F:6E:D7:11:F5:F8:E2:0F:90:70:50
Certificate issuer:       /CN=DBF597EA29EF8A70656446AF75CF33F0618E8282
Certificate serial:       1023B836057583E62EF9C08D1726944C66D1A954
Authority key identifier: DB:F5:97:EA:29:EF:8A:70:65:64:46:AF:75:CF:33:F0:61:8E:82:82
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/3230322e362e3232342e302f32302d3234203d3e203233373536.roa
Signing time:             Mon 01 Jul 2024 01:03:14 +0000
ROA not before:           Mon 01 Jul 2024 00:58:14 +0000
ROA not after:            Mon 30 Jun 2025 01:03:14 +0000
asID:                     23756
IP address blocks:        202.6.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.crl
                          rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:23:b8:36:05:75:83:e6:2e:f9:c0:8d:17:26:94:4c:66:d1:a9:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBF597EA29EF8A70656446AF75CF33F0618E8282
        Validity
            Not Before: Jul  1 00:58:14 2024 GMT
            Not After : Jun 30 01:03:14 2025 GMT
        Subject: CN=9F43A1B6714380972D6F6ED711F5F8E20F907050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:23:a8:db:3d:c4:d9:1b:c0:ff:bd:c4:60:97:
                    1a:a9:32:5d:58:c3:6c:a4:d2:1d:7e:7b:8b:30:63:
                    cd:5b:89:8e:34:52:0e:be:84:8d:ec:fe:08:73:bd:
                    41:df:89:32:d7:0e:df:93:b5:a6:fa:a3:ea:4d:20:
                    3a:6e:0e:8e:ff:fd:e0:4c:0f:99:c2:16:1f:7e:ec:
                    09:31:9e:c1:08:d7:16:25:50:ce:e9:0b:dc:df:82:
                    64:c1:b6:85:38:13:80:24:4b:7d:10:59:ed:1d:1a:
                    44:9d:e1:ea:b1:e9:85:6c:3a:cc:8c:c4:6f:8d:97:
                    a8:13:e0:6b:92:6c:a0:18:ee:16:c2:07:78:9f:c7:
                    b5:c2:38:e7:18:a2:d2:13:4e:54:29:19:6a:ee:b1:
                    8e:f0:fb:8a:c1:58:d7:be:91:76:eb:33:0f:5c:89:
                    3d:60:a0:8a:b7:91:fb:35:80:87:07:58:52:a2:70:
                    c7:f2:f8:7f:ee:58:46:2b:e7:45:c1:d2:82:ef:69:
                    82:9f:d6:ab:35:9a:1a:6f:41:59:e7:ff:ab:d7:fd:
                    66:cf:72:fb:fa:56:ea:31:03:0c:08:09:a2:f2:7a:
                    23:40:fd:ed:1f:10:da:8d:4c:59:7a:43:66:d9:1f:
                    1d:ea:0c:84:09:7e:40:6e:92:f1:02:3f:f2:61:44:
                    d2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:43:A1:B6:71:43:80:97:2D:6F:6E:D7:11:F5:F8:E2:0F:90:70:50
            X509v3 Authority Key Identifier:
                keyid:DB:F5:97:EA:29:EF:8A:70:65:64:46:AF:75:CF:33:F0:61:8E:82:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/3230322e362e3232342e302f32302d3234203d3e203233373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.6.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         36:d7:47:35:b7:c2:eb:8f:c1:82:7b:7b:ec:55:8b:2f:b5:43:
         32:77:e9:b5:07:5d:bd:05:5b:3b:1c:f6:d5:43:a7:58:74:79:
         7d:19:fb:5f:50:56:bf:5b:82:28:c0:56:bc:73:fd:13:9f:d5:
         64:69:56:90:d4:0b:74:6b:4b:b8:3d:cd:65:4a:74:96:9b:bd:
         70:be:4c:32:4f:85:28:7b:95:2f:0f:75:56:15:c3:99:f1:89:
         d4:55:df:3a:e3:f6:b5:92:31:a2:7c:96:ca:cb:8f:64:77:34:
         02:3c:e4:f1:fe:ee:5f:f7:a2:25:48:30:81:92:62:d8:83:da:
         18:3c:6f:b4:0f:56:db:70:64:70:93:66:ea:77:b5:58:05:32:
         bb:f3:1f:dd:a7:b4:32:61:33:7d:de:8b:34:2b:6f:c1:a0:fb:
         a6:c0:4d:a7:fa:68:df:62:22:23:c2:60:a5:7c:98:ac:db:65:
         d6:89:29:23:25:8c:4c:2e:43:7d:22:2e:dc:ad:6f:2d:13:0f:
         49:83:e5:6b:05:68:ff:92:57:1a:24:96:40:76:ac:54:6e:e5:
         12:21:69:c4:74:29:b8:2d:a7:b2:8b:c6:51:c2:21:09:48:3d:
         63:7a:45:bf:a0:05:bd:ea:10:c7:c9:fa:c2:4b:b9:86:2a:c5:
         44:8d:da:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 01:31:57 2024 by rpki-client on console-ams.rpki-client.org