Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3138342e302f32342d3234203d3e203338343936.roa
File:                     3230322e38372e3138342e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier:          fRVeff9Zk8O/SsJydsevhVoMqPsxnfoU9aM/IDbyOXg=
Subject key identifier:   F8:CA:7A:5B:AD:9A:00:7A:13:0F:1D:32:F9:77:A9:BF:4F:19:B0:EF
Certificate issuer:       /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial:       56D6C7AA3B6AB441E724363FC31677558757FC84
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3138342e302f32342d3234203d3e203338343936.roa
Signing time:             Sat 06 Apr 2024 05:00:03 +0000
ROA not before:           Sat 06 Apr 2024 04:55:03 +0000
ROA not after:            Sat 05 Apr 2025 05:00:03 +0000
asID:                     38496
IP address blocks:        202.87.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
                          rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:d6:c7:aa:3b:6a:b4:41:e7:24:36:3f:c3:16:77:55:87:57:fc:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
        Validity
            Not Before: Apr  6 04:55:03 2024 GMT
            Not After : Apr  5 05:00:03 2025 GMT
        Subject: CN=F8CA7A5BAD9A007A130F1D32F977A9BF4F19B0EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:73:c7:24:9a:fa:cb:1a:6e:5d:ee:ce:02:54:
                    f9:f1:ae:01:ad:bf:44:66:1d:b5:2d:ab:94:d0:a6:
                    5d:3c:e3:69:ba:03:d5:a2:bf:2a:27:44:5c:78:8b:
                    a5:e3:c1:1d:8a:72:2b:75:48:5f:14:31:97:93:d4:
                    6f:d4:c3:da:4b:73:b7:6e:95:13:f0:49:79:fe:63:
                    d8:e3:b4:fa:34:55:ec:29:cc:c1:cf:51:62:bb:f1:
                    93:05:10:ac:1f:35:ff:e6:63:73:93:72:11:d2:46:
                    25:01:03:c4:f1:d9:cc:24:00:12:0b:79:67:29:99:
                    4f:5d:bf:5c:77:84:a0:0f:17:e9:c3:06:3a:2b:85:
                    dc:a4:bf:5b:44:5b:03:02:ad:d4:63:91:c5:2f:9e:
                    06:b7:08:83:f4:c2:1f:2e:a9:62:3b:6a:5c:94:35:
                    d9:6c:b5:9e:28:c8:27:e0:26:1e:1c:0e:36:1d:9b:
                    27:87:bc:d5:e3:56:a8:65:8b:ac:3e:89:4e:ff:3e:
                    9d:cc:00:53:47:25:21:2c:e2:ac:94:46:39:4c:1e:
                    48:5e:39:47:16:b6:90:b7:9c:a5:08:97:f5:c9:4f:
                    28:b9:00:36:b6:bc:cb:e4:d0:1d:96:ad:0f:7c:94:
                    99:ea:e1:12:df:d2:8d:08:a1:fc:ae:f2:a2:e7:7c:
                    61:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:CA:7A:5B:AD:9A:00:7A:13:0F:1D:32:F9:77:A9:BF:4F:19:B0:EF
            X509v3 Authority Key Identifier:
                keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3138342e302f32342d3234203d3e203338343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.87.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:4f:6f:f1:59:6c:e1:4a:01:1c:74:18:29:8c:21:1b:c7:95:
         cd:c1:f1:1c:29:8d:9b:dd:bf:d4:f1:87:f8:b0:79:a8:ab:99:
         39:b8:f7:78:a7:57:85:3c:cb:57:37:23:13:f1:5a:1b:f5:63:
         cb:05:8f:63:d6:7f:c5:d0:62:27:84:a3:fc:c5:86:2f:aa:dc:
         ca:bd:cb:32:27:a1:c8:b2:b2:3c:77:08:5b:d0:ea:28:87:da:
         49:38:48:f8:8d:9d:e7:6a:0d:2d:18:d9:68:de:8e:a7:26:da:
         66:91:e3:dc:3b:4f:fc:f5:c1:a9:3c:0d:22:01:ef:26:76:78:
         9a:b4:36:a6:a1:77:61:ef:4c:84:16:d5:be:34:ee:63:eb:3b:
         4d:a9:f9:59:9a:ea:1e:0a:f5:94:2b:70:63:f8:b3:9d:70:64:
         db:5a:70:6f:ba:ad:d1:b3:04:4f:85:2a:2b:e1:0b:fb:e8:84:
         3f:fd:f1:2a:7b:95:00:41:1b:ef:92:a4:90:49:f9:78:3c:89:
         c4:8b:77:17:d0:b1:61:67:2f:3a:62:f5:e3:8c:41:31:50:81:
         8d:f7:27:12:d8:97:64:4a:e8:97:ad:67:c5:f6:dc:0d:b8:38:
         67:7b:d6:92:96:27:10:a2:e9:e7:ac:79:6c:b9:5f:08:ff:d2:
         94:2c:db:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:03 2024 by rpki-client on console-fra.rpki-client.org