Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31332e302f32342d3234203d3e203338373738.roa
File:                     3230322e3134382e31332e302f32342d3234203d3e203338373738.roa (raw, json)
Hash identifier:          iFO3ZQasWqbzLl7qyRCIIL+e77Oe9SL8ftQJyMMLE8M=
Subject key identifier:   DD:20:0B:5A:8D:C9:55:10:F3:5A:14:B8:DD:76:4D:30:10:B8:47:41
Certificate issuer:       /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Certificate serial:       1CA54813A1CE105F0183F2920C5B24675F6F4AA9
Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31332e302f32342d3234203d3e203338373738.roa
Signing time:             Mon 31 Jul 2023 00:03:48 +0000
ROA not before:           Sun 30 Jul 2023 23:58:48 +0000
ROA not after:            Mon 29 Jul 2024 00:03:48 +0000
asID:                     38778
IP address blocks:        202.148.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl
                          rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 07:46:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:a5:48:13:a1:ce:10:5f:01:83:f2:92:0c:5b:24:67:5f:6f:4a:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
        Validity
            Not Before: Jul 30 23:58:48 2023 GMT
            Not After : Jul 29 00:03:48 2024 GMT
        Subject: CN=DD200B5A8DC95510F35A14B8DD764D3010B84741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f9:7b:aa:f6:cc:ec:05:fc:2b:49:52:20:0a:
                    1c:74:76:5e:ff:c4:d7:f1:31:48:1d:7e:7d:7b:06:
                    a1:12:65:57:1c:70:e8:1c:f0:73:c5:fb:99:22:a7:
                    bc:c5:6f:79:b1:c9:35:b8:27:0c:61:5a:6a:96:cd:
                    3e:4e:cb:99:18:20:40:fc:70:6e:88:24:b3:18:70:
                    71:33:fe:40:77:30:20:27:0e:1e:4a:8c:bf:34:9a:
                    be:67:02:75:90:2f:89:ac:d4:12:42:e8:a8:33:83:
                    7a:55:ad:05:6a:79:f5:c2:c4:1f:9e:ea:92:e7:81:
                    05:f0:56:d7:c2:27:b4:86:e7:13:f4:f0:f6:7d:d3:
                    72:2f:be:fb:1b:38:cb:38:08:3c:58:64:7c:8a:a7:
                    cb:a1:1c:cf:24:4a:05:82:56:2f:b2:d9:7f:f9:da:
                    ba:87:32:f0:a9:15:01:a2:09:c9:0f:09:67:fc:e3:
                    c4:1e:91:6c:84:2a:ba:7a:1b:6f:b7:1a:0d:07:fa:
                    70:8c:52:df:f0:9c:2b:2b:38:91:02:8f:1d:fe:d1:
                    64:ba:b7:86:59:1e:6a:e0:9b:d0:b5:89:9d:cc:0d:
                    b4:5c:f8:88:88:39:2e:88:87:05:a6:05:a0:82:08:
                    e6:dc:6f:66:a7:bd:14:24:96:97:68:34:34:ba:49:
                    8b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:20:0B:5A:8D:C9:55:10:F3:5A:14:B8:DD:76:4D:30:10:B8:47:41
            X509v3 Authority Key Identifier:
                keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31332e302f32342d3234203d3e203338373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.148.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:f1:ad:12:d3:64:c1:ac:bc:e5:c9:92:68:2b:16:28:c4:14:
         62:ac:af:c3:21:ea:1c:19:a9:0e:e7:c4:e8:2c:11:1d:b7:d6:
         de:03:17:bf:f6:ec:c3:1c:7e:e0:62:30:79:05:f0:80:c4:eb:
         f2:e3:8a:4b:15:63:06:9c:a5:ab:2a:69:49:13:d0:33:24:30:
         a1:7c:b2:99:a0:e5:98:34:60:cf:fd:04:1a:c6:c1:4f:83:ac:
         0d:01:b3:83:91:ab:38:ae:53:01:86:aa:ed:05:08:60:97:bd:
         83:6d:09:fc:d9:86:db:93:3d:04:13:d2:8d:10:28:50:e6:91:
         ed:88:e7:8f:ac:cb:1e:ec:0c:34:06:16:19:96:02:39:6d:e0:
         54:b2:c1:f0:ea:2c:13:7a:86:69:1e:51:dc:4c:9b:fe:f1:ff:
         45:ca:66:ce:3a:ea:46:ce:ac:05:b0:c1:74:d5:90:54:75:b3:
         e8:74:30:55:0d:35:90:a3:a1:9d:4d:8f:fa:6c:27:a3:ce:00:
         91:bd:51:f4:6f:7b:14:71:e5:84:0b:95:b0:ad:e3:e3:93:65:
         9d:00:d1:83:28:f0:43:49:d8:cc:b3:b7:f3:73:23:92:25:e7:
         45:ab:30:a3:77:9e:d2:58:e7:f6:0b:26:69:fc:0b:6a:63:9e:
         ed:57:98:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 05:34:42 2024 by rpki-client on console-ams.rpki-client.org