Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136322e302f32342d3234203d3e2039373934.roa
File:                     3230332e3230312e3136322e302f32342d3234203d3e2039373934.roa (raw, json)
Hash identifier:          +sb9KYBkf46I0RsLAVhTPtLzTEBjIxv2ZKXjeTjkrg4=
Subject key identifier:   16:94:12:A4:1C:57:A5:87:26:B1:8E:50:3F:93:26:F9:C2:59:8D:77
Certificate issuer:       /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Certificate serial:       550A16C398C6EE95845DBAACCB24D69785AEDD23
Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136322e302f32342d3234203d3e2039373934.roa
Signing time:             Mon 01 Jul 2024 01:02:58 +0000
ROA not before:           Mon 01 Jul 2024 00:57:58 +0000
ROA not after:            Mon 30 Jun 2025 01:02:58 +0000
asID:                     9794
IP address blocks:        203.201.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl
                          rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:0a:16:c3:98:c6:ee:95:84:5d:ba:ac:cb:24:d6:97:85:ae:dd:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
        Validity
            Not Before: Jul  1 00:57:58 2024 GMT
            Not After : Jun 30 01:02:58 2025 GMT
        Subject: CN=169412A41C57A58726B18E503F9326F9C2598D77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cf:7a:ef:4f:8e:2f:99:7e:c6:5c:82:98:79:
                    3a:7f:ed:29:f0:97:1f:ad:4d:7f:b7:12:ad:15:63:
                    b9:4a:67:b1:ef:4d:ab:bf:67:21:54:bf:70:b1:e2:
                    a9:ef:aa:63:0e:74:48:77:91:5e:d6:8f:16:81:ab:
                    8d:df:cf:bf:ef:9a:a4:5b:e4:f0:bb:97:01:43:08:
                    c2:8c:89:38:c0:77:46:b6:9c:fa:db:7f:ec:8b:f0:
                    f6:53:50:cf:1f:2b:77:7d:a5:63:2e:5a:36:dc:91:
                    b1:23:a0:63:63:7e:b6:39:1b:5d:ab:fc:35:f0:85:
                    63:8f:90:2a:e5:33:b2:80:5a:34:47:32:cf:0d:a9:
                    be:a2:cc:2d:73:cf:4e:1b:45:62:87:4a:34:cf:e1:
                    2b:41:65:94:2b:b5:ad:f0:e8:34:4f:00:4a:53:c1:
                    63:22:8a:46:fe:f5:c7:7c:cb:e9:dc:ca:04:1f:f5:
                    3b:e6:5c:a5:4a:85:d9:a6:64:58:c4:17:02:cf:81:
                    3a:24:ab:82:bb:ad:d5:e7:64:83:f4:33:5b:db:b9:
                    1a:37:fa:02:fa:04:ae:43:50:02:9e:14:40:ae:34:
                    4d:df:5e:69:d9:10:8a:88:31:a4:a5:66:b1:33:79:
                    48:bc:99:5b:d5:29:3b:44:20:15:ef:91:a0:8e:49:
                    dc:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:94:12:A4:1C:57:A5:87:26:B1:8E:50:3F:93:26:F9:C2:59:8D:77
            X509v3 Authority Key Identifier:
                keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136322e302f32342d3234203d3e2039373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.201.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:11:e7:a7:9e:02:71:ba:c1:73:2c:7b:7d:bf:19:1a:1d:a6:
         fd:6f:32:d3:15:df:6d:ad:a9:4d:3a:d7:2d:59:fc:d3:b5:76:
         1a:fb:ce:ed:c5:0e:73:5c:ed:a3:70:ca:fa:b9:49:c1:d7:31:
         f1:d7:e9:30:d7:c5:9e:bd:da:93:cd:d0:a9:c2:aa:b1:fd:64:
         d0:b9:11:f0:95:3b:de:0c:41:d2:3a:a2:c6:bf:c2:db:86:45:
         6f:b5:da:ec:55:5d:43:d4:ef:04:d9:54:ac:32:a3:97:90:f8:
         e2:d9:55:16:cb:d0:34:52:1a:82:c4:01:30:4a:bb:da:23:ab:
         01:7c:99:99:4c:9e:b1:46:15:b4:78:1a:7c:ce:bc:92:cb:45:
         db:10:81:66:21:ed:04:75:72:04:c0:5f:1b:7f:cd:5f:c6:f2:
         a9:aa:ee:2b:ca:f0:8a:fe:67:23:9e:ea:08:d4:91:01:09:73:
         4b:f3:c9:0f:c5:fb:b3:ca:bc:a3:a4:15:9c:29:59:b8:c7:f2:
         5e:63:ff:50:0d:9e:fc:7f:04:41:9a:3c:27:d1:d4:b1:da:d1:
         62:47:79:71:76:05:1a:fc:0d:10:92:a3:98:0e:28:83:c3:e1:
         75:7f:a0:b7:b0:f1:26:51:99:20:d4:05:f7:64:62:0b:8e:6f:
         5e:b7:ca:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:43 2024 by rpki-client on console-fra.rpki-client.org