Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31382e302f32342d3234203d3e2039373934.roa
File:                     3230322e3134382e31382e302f32342d3234203d3e2039373934.roa (raw, json)
Hash identifier:          AnBdA82s3cL+tD8czj0lI+wC2L1je22w/ji6QUubPGo=
Subject key identifier:   68:62:74:2D:CF:F8:8C:91:AD:2E:17:33:46:74:94:F4:04:4B:D6:1F
Certificate issuer:       /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Certificate serial:       70D5EFDB713028FB1758CC65F59899342342F5B2
Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31382e302f32342d3234203d3e2039373934.roa
Signing time:             Mon 31 Jul 2023 00:03:50 +0000
ROA not before:           Sun 30 Jul 2023 23:58:50 +0000
ROA not after:            Mon 29 Jul 2024 00:03:50 +0000
asID:                     9794
IP address blocks:        202.148.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl
                          rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 16:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d5:ef:db:71:30:28:fb:17:58:cc:65:f5:98:99:34:23:42:f5:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
        Validity
            Not Before: Jul 30 23:58:50 2023 GMT
            Not After : Jul 29 00:03:50 2024 GMT
        Subject: CN=6862742DCFF88C91AD2E1733467494F4044BD61F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:93:ed:08:17:01:8a:4c:93:fd:55:2e:4a:c4:
                    af:5c:df:b1:37:7c:9e:44:8e:a4:ce:fd:06:4f:51:
                    68:44:cd:48:1b:3f:2e:23:74:dd:f5:47:cd:69:0a:
                    13:b1:7a:6d:98:2b:14:71:11:cf:5b:5a:d0:3c:8c:
                    5a:d1:c4:6f:b6:15:66:a6:bd:c2:c6:63:05:7f:f9:
                    51:c0:99:f8:be:de:44:b2:19:4d:32:98:0a:b5:0b:
                    c2:54:d9:2c:4d:81:50:f0:aa:c7:ed:82:f9:9e:02:
                    8d:71:6f:62:72:70:c6:93:6e:63:cd:68:ec:d1:9a:
                    c4:04:69:0b:95:de:63:bb:43:1f:2e:37:c9:0a:91:
                    57:e5:50:5b:20:85:74:97:51:6e:67:31:3a:06:ee:
                    9e:13:3e:d1:9f:22:04:85:aa:e1:d9:2e:04:78:d2:
                    19:34:da:df:27:50:ac:ad:39:42:1a:8f:7b:67:4e:
                    f8:52:65:12:ea:4a:30:b8:eb:dc:1e:06:e2:45:fa:
                    2c:9f:55:d8:24:69:ba:83:de:e2:94:28:2a:23:a4:
                    36:92:79:44:b1:8d:3c:47:53:27:03:2c:35:2a:99:
                    d8:fb:39:e4:ea:d2:31:fd:36:04:a0:2f:74:f8:84:
                    dc:94:52:1c:08:c2:1f:78:c7:35:d2:80:c1:45:9b:
                    90:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:62:74:2D:CF:F8:8C:91:AD:2E:17:33:46:74:94:F4:04:4B:D6:1F
            X509v3 Authority Key Identifier:
                keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31382e302f32342d3234203d3e2039373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.148.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:c9:1b:75:ba:18:bc:8f:61:de:c4:80:e1:71:76:f4:f4:44:
         0c:ba:14:92:f6:7f:2e:8d:0a:6e:ce:93:17:61:11:6d:e1:bc:
         32:eb:8b:37:52:ad:dd:14:b4:f5:1f:d6:9c:54:fc:6e:94:93:
         5d:d3:58:11:88:26:09:f8:5a:60:81:9f:db:a7:18:41:a3:58:
         71:3d:cd:e6:5b:71:8c:3d:29:f6:11:d8:66:ff:f2:88:6e:2e:
         2b:38:58:eb:75:82:4f:75:be:2a:ce:e5:bb:28:8f:42:ee:66:
         4b:c1:f2:ba:ab:f0:60:bb:0e:71:35:89:cf:c5:11:e1:f9:49:
         c4:59:a0:e7:cd:de:2c:96:62:16:c2:b0:6a:bb:f2:5f:cd:f6:
         02:84:35:7c:29:47:b9:c9:43:7d:eb:24:bd:49:a9:7f:3a:82:
         0b:0d:c1:4b:97:f7:ef:17:a2:5d:3e:a6:70:ce:5e:73:b3:b3:
         7e:29:27:58:80:4c:85:56:1e:31:c9:be:7c:8a:bf:35:ee:c6:
         8f:5e:45:50:e8:8a:b8:da:9d:d7:77:9a:61:d9:78:27:85:8e:
         f2:6d:90:73:c6:f1:8f:88:bf:fa:dc:a8:bb:d1:29:ec:77:9d:
         e3:24:7f:57:fb:f7:5b:64:20:ec:51:3b:ef:7e:96:20:47:b7:
         fb:8d:3a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 18:54:28 2024 by rpki-client on console-fra.rpki-client.org