Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e362e302f32342d3234203d3e203338373738.roa
File:                     3230322e3134382e362e302f32342d3234203d3e203338373738.roa (raw, json)
Hash identifier:          2TAY4FsnX0cJl/+3IxF7Rest2G7BsloGwrpXCZdB574=
Subject key identifier:   E4:D7:4B:67:E8:86:A2:1A:0B:53:8C:9C:8C:8D:A4:5D:5D:3A:F2:FB
Certificate issuer:       /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Certificate serial:       0E3ACA2C568B1A7070C57CBA83238CCC7DEA996A
Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e362e302f32342d3234203d3e203338373738.roa
Signing time:             Mon 31 Jul 2023 00:03:53 +0000
ROA not before:           Sun 30 Jul 2023 23:58:53 +0000
ROA not after:            Mon 29 Jul 2024 00:03:53 +0000
asID:                     38778
IP address blocks:        202.148.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl
                          rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 07:46:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:3a:ca:2c:56:8b:1a:70:70:c5:7c:ba:83:23:8c:cc:7d:ea:99:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
        Validity
            Not Before: Jul 30 23:58:53 2023 GMT
            Not After : Jul 29 00:03:53 2024 GMT
        Subject: CN=E4D74B67E886A21A0B538C9C8C8DA45D5D3AF2FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:25:e1:6e:c1:52:08:70:76:4e:70:00:8b:bd:
                    7e:a3:fa:df:e7:fa:79:bd:b0:8f:fe:85:42:0a:cc:
                    38:0d:12:e7:a0:0e:c4:0f:c1:fb:e1:b5:42:f2:fe:
                    27:46:87:f4:99:6e:d3:63:73:33:7a:ba:2e:a7:ca:
                    4f:2f:89:0a:b5:02:8a:89:be:ea:bb:c1:77:69:dd:
                    09:78:ad:4c:8f:0c:9e:35:aa:54:6e:b1:2a:38:15:
                    c4:03:4f:61:70:7b:78:a9:46:ce:12:c4:b7:73:7a:
                    18:f0:71:db:de:50:2e:6b:9e:3d:d9:75:20:c7:2d:
                    4e:5c:e5:a9:de:d6:d4:73:71:40:3a:38:c8:81:1e:
                    3e:91:c6:78:22:20:42:7c:95:75:6d:ee:60:cc:6d:
                    76:95:f4:d7:2c:a8:56:75:3e:f1:03:f6:42:cf:55:
                    e8:51:fc:e3:03:08:0d:91:0e:52:6d:86:ac:02:6e:
                    ea:4c:00:3d:be:fe:cf:60:c6:89:94:4f:67:d3:3b:
                    2f:cf:5d:dc:77:94:75:a2:fa:dd:76:47:35:14:e8:
                    7a:c3:46:f1:04:9f:22:b3:36:85:78:c9:41:cf:5c:
                    45:a7:ed:10:03:5e:5c:ad:61:39:af:73:a8:9c:6c:
                    4c:af:d3:b5:dd:33:de:3a:fa:8b:0a:39:8c:83:90:
                    35:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D7:4B:67:E8:86:A2:1A:0B:53:8C:9C:8C:8D:A4:5D:5D:3A:F2:FB
            X509v3 Authority Key Identifier:
                keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e362e302f32342d3234203d3e203338373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.148.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:0a:5a:55:cc:51:f0:0b:a3:a5:d6:87:a0:c9:6d:98:1b:2a:
         bf:2e:89:97:05:8a:1d:cf:dd:f9:19:a4:c5:16:66:cc:ae:63:
         18:34:83:89:cf:0a:91:cb:7a:c9:1b:3c:de:f7:e5:8d:2f:42:
         0e:18:15:0f:0f:fb:a0:0e:97:23:e7:07:66:cd:fa:5b:17:1d:
         4d:ce:29:41:49:f4:c5:e2:55:3a:a2:8f:d9:2e:0e:5c:c2:1e:
         13:be:e0:0f:d1:9a:97:a0:2b:55:32:67:46:b9:55:fa:96:bb:
         df:6a:2c:17:bc:f9:9d:27:d4:aa:b2:a5:64:81:1a:00:44:31:
         b4:99:2e:1d:a2:5f:3c:42:37:d1:07:a8:76:11:a1:c7:05:da:
         36:35:b3:a0:8c:bf:ba:2c:14:3d:59:44:96:36:c0:68:b0:d2:
         a4:8a:a5:9f:fd:84:9d:0a:e3:d2:23:44:fe:56:e1:9f:82:6b:
         45:5d:db:cc:75:7e:fb:3e:ea:54:42:79:e0:a5:6e:48:3c:31:
         82:2a:c5:3b:02:7e:e0:b8:98:7e:d1:90:b1:95:92:41:e3:1a:
         3f:64:dc:92:93:93:a8:97:50:6b:b4:94:8e:88:14:e2:49:2b:
         2f:65:9d:8a:bf:4f:88:89:03:8c:b6:5d:8f:c0:82:c6:7c:b7:
         79:77:e6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 04:46:23 2024 by rpki-client on console-fra.rpki-client.org