Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e32322e302f32342d3234203d3e2039373934.roa
File:                     3230322e3134382e32322e302f32342d3234203d3e2039373934.roa (raw, json)
Hash identifier:          /WBQLivDIUyCbVpQ9cwCex7y9aqGNhP43653chyhHKM=
Subject key identifier:   AE:15:A1:88:A2:EE:15:33:42:F8:D0:E5:45:ED:76:8A:EF:51:AE:B5
Certificate issuer:       /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Certificate serial:       729C915DC5912562C7C6B6BF7CEC9D99E5A18230
Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e32322e302f32342d3234203d3e2039373934.roa
Signing time:             Mon 31 Jul 2023 00:03:47 +0000
ROA not before:           Sun 30 Jul 2023 23:58:47 +0000
ROA not after:            Mon 29 Jul 2024 00:03:47 +0000
asID:                     9794
IP address blocks:        202.148.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl
                          rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 16:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:9c:91:5d:c5:91:25:62:c7:c6:b6:bf:7c:ec:9d:99:e5:a1:82:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
        Validity
            Not Before: Jul 30 23:58:47 2023 GMT
            Not After : Jul 29 00:03:47 2024 GMT
        Subject: CN=AE15A188A2EE153342F8D0E545ED768AEF51AEB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ae:ac:ce:67:51:22:17:d1:24:f1:db:3a:07:
                    83:7b:5e:11:77:79:2c:f3:8e:34:77:6a:11:98:77:
                    5f:fb:60:26:d2:0b:9d:ef:8a:59:de:61:b7:76:63:
                    57:ce:1d:77:7b:b1:c3:ef:4c:b9:10:3e:b1:02:62:
                    48:f2:d3:5b:76:28:60:a7:54:06:5a:74:ed:86:cb:
                    bd:e8:3f:86:df:d5:97:e2:32:2f:9d:da:c0:2b:33:
                    b6:0c:80:56:0c:86:9b:d4:e6:6f:ca:51:5b:e6:dd:
                    60:38:43:be:02:7e:1f:27:f1:94:bb:da:ac:da:2d:
                    5f:b4:a3:cb:5b:23:c8:23:64:99:fc:63:4a:9c:9e:
                    b1:09:b4:25:05:ca:3d:16:db:af:fd:d6:cd:cc:c3:
                    27:8c:d1:ae:91:fb:c5:1c:11:6b:8a:f7:98:1c:ae:
                    a9:7c:c9:ea:ae:03:70:d3:c4:41:e5:ca:7d:b9:2e:
                    9d:f1:ee:db:6a:9b:e2:5d:78:8f:b8:ae:c5:bb:ef:
                    78:a9:26:2b:b1:92:82:32:c8:b0:84:4a:4b:b2:71:
                    46:1c:32:05:b1:8a:6d:19:bd:9b:f4:fa:84:37:08:
                    fb:ad:79:67:87:11:dd:01:01:d4:0e:76:97:d0:53:
                    60:f7:d4:85:9c:35:dd:5d:26:2d:6e:90:e7:ef:53:
                    60:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:15:A1:88:A2:EE:15:33:42:F8:D0:E5:45:ED:76:8A:EF:51:AE:B5
            X509v3 Authority Key Identifier:
                keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e32322e302f32342d3234203d3e2039373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.148.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:b1:d2:3c:34:0a:53:8f:ef:a2:64:99:66:0a:1a:ea:0b:9a:
         68:28:03:00:b1:f2:13:01:aa:c6:80:e1:f3:48:eb:2a:37:a4:
         38:66:3c:d9:56:42:ab:7c:fd:c8:b0:53:22:c1:12:5e:f3:09:
         a2:2e:38:2f:45:68:9e:09:82:e1:1b:24:47:32:30:c1:64:d7:
         72:a7:11:f0:1d:93:4b:d6:59:b7:b5:3e:2b:d3:00:96:f5:10:
         82:d1:9b:d6:9b:ec:f4:7d:de:46:d1:49:24:04:c8:31:48:b5:
         a6:65:50:e0:ab:c5:04:ca:e0:0e:b3:24:dc:10:ce:94:cf:63:
         96:eb:e2:3f:b1:4d:17:d0:37:be:cb:aa:6c:6d:5b:50:6c:5a:
         56:df:e7:4f:6f:67:57:81:c0:44:25:80:44:3b:a9:66:27:3c:
         c0:73:be:4e:5c:ae:a5:1f:bb:95:2f:dc:b0:42:eb:3c:b3:21:
         5c:2d:3b:51:18:e5:50:0b:30:bb:36:65:66:52:7a:cc:55:c6:
         33:49:69:fe:80:d5:ad:b2:59:16:e5:af:50:7c:95:67:79:2a:
         b4:45:19:0c:ef:07:73:d7:eb:61:c0:3b:f5:1b:bf:4a:77:7f:
         e8:e9:fc:2b:3b:25:dd:b2:78:a7:e5:d0:ba:b2:c8:91:7d:11:
         77:00:2c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 19:13:26 2024 by rpki-client on console-ams.rpki-client.org