Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e32362e302f32342d3234203d3e2039373934.roa
File:                     3230322e3134382e32362e302f32342d3234203d3e2039373934.roa (raw, json)
Hash identifier:          IxHwYDgkxiuueiyb8RPJKeQLWu/3AYLFnIm3PdC3Ntk=
Subject key identifier:   7F:5E:BB:8C:51:51:DE:65:16:B3:23:33:AE:FE:40:18:0D:72:4D:DE
Certificate issuer:       /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Certificate serial:       708D21F77586BA37359ECEF72B4C2A620B55DFAC
Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e32362e302f32342d3234203d3e2039373934.roa
Signing time:             Mon 31 Jul 2023 00:03:46 +0000
ROA not before:           Sun 30 Jul 2023 23:58:46 +0000
ROA not after:            Mon 29 Jul 2024 00:03:46 +0000
asID:                     9794
IP address blocks:        202.148.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl
                          rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 16:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:8d:21:f7:75:86:ba:37:35:9e:ce:f7:2b:4c:2a:62:0b:55:df:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
        Validity
            Not Before: Jul 30 23:58:46 2023 GMT
            Not After : Jul 29 00:03:46 2024 GMT
        Subject: CN=7F5EBB8C5151DE6516B32333AEFE40180D724DDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:00:79:e7:e4:55:1f:7f:3e:ba:f1:25:d5:9a:
                    e1:e3:b3:de:ff:fa:ab:cd:51:32:0f:8e:9c:44:e2:
                    31:a0:b2:43:70:29:36:d4:cb:0d:fa:1c:64:67:57:
                    1e:c5:b6:e5:49:57:b8:35:16:ba:ff:be:28:56:d5:
                    0e:05:4e:86:51:56:4a:30:90:43:c3:20:bb:30:0b:
                    f0:24:f5:03:a6:eb:ed:70:52:00:81:3c:75:3a:fe:
                    b3:6b:a9:ae:1b:b4:ff:d2:2a:1a:30:63:ec:10:61:
                    14:26:54:e9:d6:a2:ae:9f:3e:e2:4a:34:40:27:b9:
                    a2:dd:b1:50:19:6c:76:c5:e1:1d:91:08:76:3d:3d:
                    ee:b9:f8:4b:01:58:8f:86:83:df:98:23:e7:79:af:
                    d9:41:4e:b5:db:41:fc:97:7c:42:94:4b:7c:b6:a3:
                    8a:71:10:c5:f5:bc:e6:20:8d:d7:c0:12:be:aa:bc:
                    92:2e:47:cc:0c:d6:49:b5:a7:b3:fc:00:5c:66:09:
                    83:d3:41:1e:98:1e:90:c6:50:40:c9:0b:30:12:59:
                    f1:38:ab:63:b2:72:00:29:08:de:aa:b4:45:1a:39:
                    2b:87:e4:bc:c6:3d:1c:f6:d7:a9:89:68:8d:c1:b2:
                    79:d4:b2:90:32:99:9a:04:fc:4c:5a:14:17:b4:3e:
                    79:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:5E:BB:8C:51:51:DE:65:16:B3:23:33:AE:FE:40:18:0D:72:4D:DE
            X509v3 Authority Key Identifier:
                keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e32362e302f32342d3234203d3e2039373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.148.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:1f:aa:a8:89:39:d5:02:b9:f0:b4:69:90:6b:ec:b3:f7:a6:
         74:8b:a1:ad:8a:45:b5:a2:5b:45:6a:d2:c7:78:c9:8b:d4:91:
         44:a3:d8:11:5a:cd:e0:76:5e:ff:b2:bd:d1:12:50:de:95:59:
         16:4a:1d:76:d5:f6:44:04:80:12:53:36:7c:c7:df:cf:4f:51:
         32:14:f9:e8:04:a6:7f:f6:ac:f8:59:92:fa:ae:9c:12:9d:28:
         4e:89:52:da:b9:14:8c:43:d5:23:a1:f3:e8:b0:e5:1c:30:35:
         ca:92:0a:6a:12:47:5d:21:f2:a1:09:67:5b:de:a6:80:69:f7:
         b1:fe:2d:54:9b:bc:92:3a:79:cb:dc:47:36:85:f7:0d:f3:30:
         44:1e:26:dd:f7:bb:78:5b:35:bd:de:f4:b0:89:7c:62:8f:e3:
         4d:50:91:ce:59:f0:19:4c:7b:9c:d2:c3:40:19:36:89:21:f2:
         58:16:91:61:1e:7d:50:75:57:81:80:d5:e9:cf:a4:b0:79:09:
         41:3d:f4:a8:20:b9:d5:7d:3e:97:2f:d8:0b:d4:a9:83:54:00:
         be:b4:e3:fe:54:4c:09:31:3a:59:da:83:e5:cc:03:e7:f2:16:
         5d:e8:c3:2a:46:f9:d7:26:e7:ec:24:bf:73:76:fe:a8:68:49:
         6c:82:61:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 18:54:28 2024 by rpki-client on console-fra.rpki-client.org