Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31312e302f32342d3234203d3e203338373738.roa
File:                     3230322e3134382e31312e302f32342d3234203d3e203338373738.roa (raw, json)
Hash identifier:          kXzKDq58UEQlFcjobGQSyNl5vThFboajXLVKULdcPRg=
Subject key identifier:   CB:08:A5:AA:30:4F:ED:48:A8:E1:D2:E6:B3:5D:08:63:62:25:59:0E
Certificate issuer:       /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Certificate serial:       66E4CD0A710AA6FC7567A7D947B76B476D2CEC5C
Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31312e302f32342d3234203d3e203338373738.roa
Signing time:             Mon 31 Jul 2023 00:03:48 +0000
ROA not before:           Sun 30 Jul 2023 23:58:48 +0000
ROA not after:            Mon 29 Jul 2024 00:03:48 +0000
asID:                     38778
IP address blocks:        202.148.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl
                          rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Apr 2024 21:56:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:e4:cd:0a:71:0a:a6:fc:75:67:a7:d9:47:b7:6b:47:6d:2c:ec:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
        Validity
            Not Before: Jul 30 23:58:48 2023 GMT
            Not After : Jul 29 00:03:48 2024 GMT
        Subject: CN=CB08A5AA304FED48A8E1D2E6B35D08636225590E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6e:3a:97:15:13:bd:db:66:44:4a:c7:ce:77:
                    5e:4d:14:43:91:df:e1:8b:dd:68:ab:4e:c6:d8:03:
                    71:a2:32:d6:68:67:b6:9b:f6:56:e2:db:fe:ea:72:
                    17:ff:25:f6:cc:c6:96:bc:40:70:c0:50:d0:16:34:
                    1e:7e:de:e1:7a:db:9d:cc:16:36:df:03:c8:23:5e:
                    83:c0:e8:a8:51:24:2b:b9:ef:9e:83:ec:02:0b:1c:
                    3a:e8:36:b4:7e:f7:4e:57:ce:b1:67:b6:ce:1c:ac:
                    51:f8:c3:78:7a:47:28:41:21:30:39:fa:75:cc:a1:
                    56:c1:3b:1f:05:cf:27:e2:86:df:a2:f4:c6:23:ad:
                    1e:60:00:54:56:75:52:92:15:3f:a2:57:7a:26:e9:
                    e8:3e:f1:87:e1:2f:21:c7:05:59:1e:e2:56:c4:57:
                    11:70:a3:99:8b:6b:6c:0b:72:07:79:c4:a9:b5:e5:
                    5e:9d:d6:27:32:3a:8b:5b:e9:31:a3:43:17:fb:6d:
                    b3:78:2e:a4:78:9a:69:d6:32:b9:df:c4:0b:12:46:
                    92:42:d6:29:ac:d1:b5:5d:42:47:fb:32:7b:34:45:
                    3f:08:e6:61:17:fe:3a:99:bc:7f:39:34:90:34:a1:
                    53:9a:78:b4:54:4b:a7:d5:e4:0f:4a:90:f8:2b:74:
                    1f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:08:A5:AA:30:4F:ED:48:A8:E1:D2:E6:B3:5D:08:63:62:25:59:0E
            X509v3 Authority Key Identifier:
                keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31312e302f32342d3234203d3e203338373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.148.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:b8:f2:aa:23:88:35:6f:c8:13:9b:b9:8c:37:78:19:cd:64:
         e9:45:a2:df:f7:ce:1d:c1:b9:e8:c7:57:7e:16:91:e4:6b:4d:
         da:51:8b:09:84:de:5a:d5:62:7a:6f:40:64:2a:a3:74:cf:a7:
         9e:76:5f:f3:c1:90:b0:91:8d:0d:6d:ff:f3:f4:32:3e:81:2a:
         38:ae:e2:3f:b1:bd:ff:b2:7b:df:a6:58:8e:35:3a:69:9f:05:
         09:9a:fb:c4:f2:2e:16:9f:79:59:ee:f4:66:f1:5d:a6:01:89:
         39:d6:24:c8:c3:46:4f:7d:43:c1:ee:66:7f:fb:d4:b6:ca:ac:
         6e:cf:ca:44:58:73:d6:5d:4f:66:ec:1a:65:46:88:63:39:e4:
         3b:16:f9:17:bc:9f:0b:d1:94:8e:f7:a9:40:09:74:9a:67:8e:
         08:b0:02:28:74:e2:54:0f:1b:9c:07:fa:bc:7e:9f:2c:63:9d:
         69:93:5d:f2:df:e5:75:08:2d:dd:ab:60:aa:c4:fd:46:0d:94:
         97:18:ab:66:c4:55:ce:bb:f3:69:ef:f8:d4:14:51:c1:b5:c8:
         4b:1a:2b:8e:d7:4d:6f:44:3b:57:76:a3:bc:63:9b:92:68:a6:
         22:01:53:d8:3e:b5:7e:7a:0e:5f:17:64:0e:05:ed:63:da:68:
         7b:08:55:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 15:09:07 2024 by rpki-client on console-fra.rpki-client.org