Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e302e302f32342d3234203d3e2039373934.roa
File:                     3230322e3134382e302e302f32342d3234203d3e2039373934.roa (raw, json)
Hash identifier:          0voDgxcCcSWyc90d5Tu0wtCPt0wNnfLSU7EM//4GVzw=
Subject key identifier:   53:30:0C:BA:55:EF:C7:11:2C:25:D9:0F:9A:36:7B:2C:BD:5B:2E:94
Certificate issuer:       /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Certificate serial:       5A3D01654C7293208B50C2119C52158B5F086E52
Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e302e302f32342d3234203d3e2039373934.roa
Signing time:             Mon 31 Jul 2023 00:03:51 +0000
ROA not before:           Sun 30 Jul 2023 23:58:51 +0000
ROA not after:            Mon 29 Jul 2024 00:03:51 +0000
asID:                     9794
IP address blocks:        202.148.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl
                          rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 16:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:3d:01:65:4c:72:93:20:8b:50:c2:11:9c:52:15:8b:5f:08:6e:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
        Validity
            Not Before: Jul 30 23:58:51 2023 GMT
            Not After : Jul 29 00:03:51 2024 GMT
        Subject: CN=53300CBA55EFC7112C25D90F9A367B2CBD5B2E94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:20:f8:87:01:ff:ff:63:ac:61:c0:7a:8d:25:
                    71:56:91:da:df:08:cb:40:66:50:e6:e0:9b:62:7a:
                    d5:bf:c8:e7:f6:a9:9a:5d:87:65:eb:28:e0:a9:f4:
                    93:17:58:b1:ef:1a:9f:84:0b:1d:00:55:17:52:70:
                    7b:d2:74:68:14:81:15:e0:ad:95:f2:4f:98:af:10:
                    3d:15:a0:fd:7f:a3:ae:f1:a3:19:32:d1:14:44:4a:
                    34:86:3a:01:e4:57:c8:b1:c9:86:7f:ac:50:53:4f:
                    dc:c1:c8:e0:85:64:1d:b5:3a:22:f0:4f:67:5d:61:
                    66:5b:59:e2:9d:41:39:a1:0d:89:67:76:40:2d:27:
                    d1:17:be:96:29:2c:f5:be:ea:8a:0a:39:c6:fd:d7:
                    83:54:e7:7d:58:9e:77:d9:17:9a:6f:6c:fa:96:0d:
                    3a:f9:19:ec:70:e3:7c:06:5b:c6:54:73:25:15:e4:
                    b7:d2:15:92:f6:c3:8f:1e:97:9c:85:87:75:73:d8:
                    6f:c2:41:1c:3c:8b:3f:13:57:6e:1c:99:c0:d4:1b:
                    a4:42:af:37:16:8e:4a:3f:7f:a4:21:3c:6c:1f:1a:
                    2b:5d:69:e5:5a:93:77:05:68:c3:27:0f:57:0d:7a:
                    54:b3:41:ed:c2:ee:57:04:5c:78:17:5e:69:9b:ac:
                    88:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:30:0C:BA:55:EF:C7:11:2C:25:D9:0F:9A:36:7B:2C:BD:5B:2E:94
            X509v3 Authority Key Identifier:
                keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e302e302f32342d3234203d3e2039373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.148.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:68:21:b9:e6:59:35:80:0d:e4:b0:00:1c:41:9c:06:ff:a8:
         00:57:e7:5b:e8:8a:02:72:c2:a3:eb:3b:3d:55:f4:3f:f0:46:
         25:75:07:03:70:6a:df:95:8e:b5:9b:bf:1c:06:8c:36:08:3e:
         52:f8:ab:4a:dd:a0:55:93:f4:02:be:b3:a7:2d:12:d1:4c:18:
         c0:a2:4a:9f:fe:af:19:aa:c4:8c:51:c8:69:05:19:6f:2f:16:
         b4:66:ae:d7:64:e5:1a:0f:38:07:01:1c:11:48:55:ef:f2:ae:
         fe:c4:b3:f4:7a:15:73:15:fc:cf:be:d3:7a:80:23:69:0f:a7:
         e1:8b:c3:2a:7b:20:77:17:5c:e6:bd:9e:16:25:53:87:65:77:
         9c:45:29:fd:0a:f3:71:5b:15:cc:5b:6f:10:62:69:b3:c4:6d:
         ee:81:c1:22:14:82:f7:e2:53:6f:80:6b:e5:aa:cb:78:ad:26:
         6b:85:3b:4c:26:c4:c2:aa:ae:94:ef:20:d5:12:f1:ea:18:13:
         f3:f3:b4:70:d5:0e:4a:b9:a5:a6:bd:0c:aa:8e:05:4f:1b:b0:
         02:58:88:3b:bf:c1:71:04:81:84:cf:6f:e0:4a:99:0b:8a:b0:
         a0:a1:34:32:73:aa:3a:be:2d:b3:4b:ee:70:13:95:58:d3:e2:
         a7:ea:05:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 18:54:28 2024 by rpki-client on console-fra.rpki-client.org