Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e32392e302f32342d3234203d3e2039373934.roa
File:                     3230322e3134382e32392e302f32342d3234203d3e2039373934.roa (raw, json)
Hash identifier:          0lv/pgl1njgElTCw9idI973MfMultyYU7XK4tmwBL+8=
Subject key identifier:   4D:2B:0D:C6:EB:9F:30:CC:B9:31:F1:1B:B7:31:32:78:BE:3B:26:94
Certificate issuer:       /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Certificate serial:       55FAB5089CBDD28A44C5EEF3B4C9CBB17B274629
Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e32392e302f32342d3234203d3e2039373934.roa
Signing time:             Mon 31 Jul 2023 00:03:54 +0000
ROA not before:           Sun 30 Jul 2023 23:58:54 +0000
ROA not after:            Mon 29 Jul 2024 00:03:54 +0000
asID:                     9794
IP address blocks:        202.148.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl
                          rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 16:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:fa:b5:08:9c:bd:d2:8a:44:c5:ee:f3:b4:c9:cb:b1:7b:27:46:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
        Validity
            Not Before: Jul 30 23:58:54 2023 GMT
            Not After : Jul 29 00:03:54 2024 GMT
        Subject: CN=4D2B0DC6EB9F30CCB931F11BB7313278BE3B2694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:44:f6:d5:9c:87:38:d8:5f:56:6c:e1:8c:0d:
                    2e:81:fb:30:b7:e3:60:55:a5:df:e9:94:d0:57:4d:
                    b0:36:c2:ab:d4:4f:e2:09:23:3d:1f:94:ee:28:ff:
                    a1:a8:db:04:5b:71:10:b3:29:a8:d5:46:99:a9:8b:
                    fc:d5:4b:0a:ef:a1:ab:aa:28:95:1c:1f:0a:63:38:
                    c2:5e:ac:fa:bc:ad:a3:36:d6:7e:12:c3:14:71:41:
                    7a:14:b6:43:ce:3b:a0:89:64:6c:63:51:32:a4:e1:
                    e1:72:28:e3:1e:bf:00:93:10:f1:bf:2b:63:d0:05:
                    07:4e:dc:da:70:b3:4b:ad:bc:d3:72:c0:4f:98:10:
                    1e:b0:28:cf:b7:3d:dc:ac:29:11:b5:b2:6e:d5:b7:
                    b5:93:e6:de:21:75:23:b2:37:0a:0b:e3:06:82:d7:
                    fc:0c:aa:49:71:f2:70:bd:c5:24:fc:ec:c9:41:5b:
                    a2:cb:f3:ef:ce:8a:9e:12:74:6a:7e:4b:41:16:a4:
                    8a:e8:9a:73:d2:9f:b7:cb:83:5f:7e:24:ac:fa:0a:
                    9b:10:ba:7b:5d:74:84:db:9b:43:42:e2:57:1a:68:
                    6f:73:84:0f:ab:24:1a:31:3e:8a:7f:b1:80:8d:67:
                    f0:8a:28:a7:20:ac:90:58:ce:26:25:67:02:38:4e:
                    c4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:2B:0D:C6:EB:9F:30:CC:B9:31:F1:1B:B7:31:32:78:BE:3B:26:94
            X509v3 Authority Key Identifier:
                keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e32392e302f32342d3234203d3e2039373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.148.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:02:9b:fe:6d:21:fa:f2:c2:c4:b8:40:7a:6d:a1:55:e2:9b:
         a1:86:9b:b1:33:6e:74:25:fe:87:c6:8e:b5:94:d1:98:84:4b:
         f9:13:8e:44:95:c9:43:d8:3d:23:fe:c4:b7:07:bf:c3:4c:0a:
         d8:74:32:ee:f9:8d:c7:1d:03:87:37:c6:6e:9f:b2:a5:19:00:
         68:bf:04:f8:a5:46:45:36:3d:f6:a4:45:a3:87:77:97:58:6a:
         8d:9d:28:35:71:22:72:ee:8b:9a:85:a0:98:b5:f7:8c:8d:6d:
         e3:81:b7:e4:e7:cf:da:46:19:90:5c:62:0b:6e:42:02:b2:81:
         ee:17:db:4b:89:1b:66:33:6d:01:e8:6f:1c:76:7d:c0:b5:4b:
         bc:5f:67:99:2a:bb:dc:92:c5:c3:42:05:46:8e:c4:95:f4:82:
         4b:e4:05:2e:83:c6:8f:bd:75:46:8e:2f:42:02:90:16:5b:63:
         54:06:72:01:05:59:3d:45:c0:bd:aa:39:17:28:5b:9b:94:78:
         bd:d9:7c:81:9e:07:08:48:11:25:f5:47:56:c8:25:0e:d3:96:
         d4:81:b6:cd:d7:d7:76:88:fa:0f:d7:87:ff:c5:97:f8:86:d6:
         cc:e5:f5:2f:ed:69:6d:f7:18:b3:3a:3a:2b:6d:94:bf:de:72:
         af:1d:2a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 18:54:28 2024 by rpki-client on console-fra.rpki-client.org