Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3230322e37342e3233362e302f32332d3233203d3e20313331373735.roa
File:                     3230322e37342e3233362e302f32332d3233203d3e20313331373735.roa (raw, json)
Hash identifier:          hhBshcm+EKul/rgjGB0vKGzYcVlcsuOhqTD6zWl1raQ=
Subject key identifier:   B0:B4:93:41:4C:24:52:8B:7D:4F:47:E0:90:A9:3B:EA:AB:7A:CE:E9
Certificate issuer:       /CN=49CDCA308C289D688C649C2303BECB3ED76B5054
Certificate serial:       34296B3D459D3D5B6E445901CD255E92DC1289EE
Authority key identifier: 49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3230322e37342e3233362e302f32332d3233203d3e20313331373735.roa
Signing time:             Sat 10 Aug 2024 15:00:01 +0000
ROA not before:           Sat 10 Aug 2024 14:55:01 +0000
ROA not after:            Sat 09 Aug 2025 15:00:01 +0000
asID:                     131775
IP address blocks:        202.74.236.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl
                          rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 08:05:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:29:6b:3d:45:9d:3d:5b:6e:44:59:01:cd:25:5e:92:dc:12:89:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49CDCA308C289D688C649C2303BECB3ED76B5054
        Validity
            Not Before: Aug 10 14:55:01 2024 GMT
            Not After : Aug  9 15:00:01 2025 GMT
        Subject: CN=B0B493414C24528B7D4F47E090A93BEAAB7ACEE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0f:ee:15:dd:7a:66:0a:55:49:4e:6a:7f:2f:
                    d3:c8:0f:72:4f:65:76:fe:5b:4a:f5:3e:04:9b:65:
                    f7:96:cd:ee:9d:ef:16:d8:f0:03:30:76:aa:24:30:
                    a0:53:ea:82:26:99:20:f4:78:29:29:45:97:9b:08:
                    9b:46:93:ee:c9:02:db:94:a4:ed:59:69:36:c5:11:
                    e6:1d:38:3f:d6:ad:f4:c1:fd:97:d1:48:65:f2:1c:
                    f2:79:e5:4b:4a:9e:5c:f5:a9:3c:17:28:c7:2b:79:
                    f2:98:aa:4a:24:41:a5:15:ac:fd:26:d0:24:53:71:
                    e6:bb:6b:17:8e:99:7f:10:f2:6c:b7:4d:d6:7e:09:
                    32:f3:db:74:83:cb:bd:58:ea:a5:81:ff:9e:df:04:
                    b5:1d:98:88:fe:f8:bc:62:05:79:24:e8:2c:ca:5c:
                    ba:96:6e:06:c7:ff:f5:1d:30:14:68:fa:86:ce:fb:
                    05:b4:48:e1:ec:f2:cc:f1:0f:0d:28:20:1c:db:ff:
                    2f:bc:f4:81:f2:15:c6:2e:c6:63:cd:e5:83:18:0f:
                    16:92:e4:9c:8e:d7:b1:d4:d3:f3:4c:d5:24:10:ba:
                    b9:b9:04:e2:5f:2c:54:04:ab:ae:13:ce:52:a4:7e:
                    30:b1:71:b2:b6:5a:fd:b2:89:57:ee:dd:ed:f6:14:
                    7d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B4:93:41:4C:24:52:8B:7D:4F:47:E0:90:A9:3B:EA:AB:7A:CE:E9
            X509v3 Authority Key Identifier:
                keyid:49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3230322e37342e3233362e302f32332d3233203d3e20313331373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.74.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:5e:b3:8d:b2:9f:5c:d7:a9:d0:fd:c1:98:82:de:5b:30:c2:
         b8:74:53:44:07:6d:b6:43:0b:24:3d:a5:d8:74:00:f7:97:a1:
         b8:9f:d8:cf:64:d7:3e:48:1f:db:58:31:09:96:3d:a0:77:0b:
         e2:de:91:d5:b1:08:7b:e3:ec:22:66:c7:ca:54:cc:ad:61:a8:
         70:ec:d2:dd:d4:0b:cb:76:73:9f:f1:f4:f5:4e:6f:41:7e:f3:
         fd:e9:12:da:0b:cd:2b:b6:bf:a5:8d:38:fb:49:0e:94:4d:02:
         38:d8:f6:e4:75:e2:43:cc:4e:22:38:73:b5:eb:df:41:e4:94:
         96:9e:14:8e:62:b0:a5:63:6f:3f:c5:a5:79:3f:37:ad:8e:26:
         af:bc:b3:fb:af:21:78:92:38:0d:11:5f:24:4c:ba:20:7b:b2:
         f1:f0:e5:e0:f2:44:32:97:e3:01:27:ca:f2:32:65:64:17:37:
         5d:ab:92:64:be:ad:7c:f4:22:cd:af:6d:97:b8:d3:56:8b:7b:
         98:3b:53:f1:cb:29:7f:c4:26:50:0e:50:bf:84:1e:84:2f:7c:
         90:8c:86:63:70:a3:8a:29:8e:ec:03:47:4f:cb:e2:02:96:95:
         ed:62:65:f6:5f:71:11:d1:f2:79:79:fb:b5:7d:75:25:00:e9:
         48:f8:d8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:40 2024 by rpki-client on console-fra.rpki-client.org