Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e362e302f32332d3233203d3e203338373738.roa
File:                     3230322e3134382e362e302f32332d3233203d3e203338373738.roa (raw, json)
Hash identifier:          cgURYy7RbX73tV79MOdm4wBNvqY1SNtRF2dQ5tjWXrg=
Subject key identifier:   54:28:8C:25:3D:FB:27:B7:D3:31:8D:CD:67:8A:69:8A:58:C7:AD:73
Certificate issuer:       /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Certificate serial:       783AB5B3D0E5FA38F2E64AF6ADDF06CE506D3323
Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e362e302f32332d3233203d3e203338373738.roa
Signing time:             Mon 01 Jul 2024 01:02:59 +0000
ROA not before:           Mon 01 Jul 2024 00:57:59 +0000
ROA not after:            Mon 30 Jun 2025 01:02:59 +0000
asID:                     38778
IP address blocks:        202.148.6.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl
                          rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:3a:b5:b3:d0:e5:fa:38:f2:e6:4a:f6:ad:df:06:ce:50:6d:33:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
        Validity
            Not Before: Jul  1 00:57:59 2024 GMT
            Not After : Jun 30 01:02:59 2025 GMT
        Subject: CN=54288C253DFB27B7D3318DCD678A698A58C7AD73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:dd:be:a3:ed:e0:65:51:d9:ee:1f:99:95:7c:
                    00:e6:d1:13:94:7a:c2:16:a0:58:d1:0a:c2:ca:dc:
                    95:e7:a9:ae:ae:a4:88:a8:05:d2:0e:2e:5e:99:2e:
                    da:18:3f:f6:06:43:25:0d:41:d7:69:33:28:5e:65:
                    c0:4b:78:15:f7:73:c8:c5:6d:7e:b2:91:9b:40:f6:
                    e2:68:51:96:1d:39:a3:2d:47:56:5a:86:4f:48:60:
                    7b:3b:a1:2c:af:84:b7:19:38:a5:79:16:12:f5:08:
                    8a:b8:c2:8c:3d:4a:63:66:8f:57:25:1d:2e:97:e5:
                    12:84:ca:48:5c:47:82:6a:cc:f0:92:68:af:77:c5:
                    b1:20:01:e7:62:84:c3:6c:bd:0f:e8:49:c8:f5:c7:
                    26:e3:e8:20:e9:70:d3:55:6c:6a:c0:85:44:6e:43:
                    5e:ce:44:05:34:0c:28:25:dc:86:1d:2d:32:b8:14:
                    26:4f:34:73:06:4a:9c:e6:b0:fc:c4:84:56:ce:78:
                    df:61:48:55:e6:88:62:42:ac:1b:03:53:04:9b:f2:
                    5a:9f:bb:8d:f4:b2:cf:9f:a5:68:3c:6e:23:64:10:
                    46:3a:5e:c7:2d:20:e3:b0:94:f7:6d:c5:a6:98:9e:
                    65:52:d9:dd:f3:d8:5c:d6:b3:25:40:d1:12:51:08:
                    d7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:28:8C:25:3D:FB:27:B7:D3:31:8D:CD:67:8A:69:8A:58:C7:AD:73
            X509v3 Authority Key Identifier:
                keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e362e302f32332d3233203d3e203338373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.148.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:e1:9d:51:c9:cd:c0:ad:3d:42:17:4c:7d:a3:cc:bc:a3:81:
         92:64:20:6e:4c:26:1d:d2:95:54:51:f4:3f:8e:e9:9a:ee:dd:
         e7:f0:04:f2:79:47:bb:86:1c:7b:5a:32:97:c1:24:90:e1:45:
         3a:8b:d6:85:6b:0b:77:bc:ec:da:67:2a:d9:63:de:57:39:b1:
         e4:08:d1:67:f7:c4:0d:c6:4b:66:4e:b8:e7:24:13:6c:6e:35:
         26:28:af:52:45:03:82:c5:3c:2e:5d:2f:50:c2:66:b0:d0:0a:
         4c:36:e3:3a:8b:1c:3c:43:48:09:36:fa:0b:77:b3:2e:18:6d:
         df:91:52:ca:50:e0:cd:94:6f:37:5c:19:df:5d:1d:c2:10:07:
         c0:3f:92:3e:9f:ed:5e:10:c8:00:55:f9:9d:08:0a:08:f1:cc:
         1e:aa:06:7a:52:94:90:da:32:6c:73:1c:22:66:1d:e9:01:2b:
         ed:d2:a5:1f:f7:bb:d8:b5:2c:4e:11:bd:7a:dd:f9:30:8f:1f:
         55:1c:64:ed:34:19:66:06:8c:2b:02:78:32:67:77:e7:d3:01:
         8b:69:68:a0:7b:14:d2:b5:53:20:66:9b:e6:70:2d:18:ec:33:
         89:6c:9d:e0:d7:9a:b4:43:d3:f4:af:d8:70:b8:8c:41:e3:af:
         fc:43:65:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:43 2024 by rpki-client on console-fra.rpki-client.org