Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136362e302f32342d3234203d3e2039373934.roa
File:                     3230332e3230312e3136362e302f32342d3234203d3e2039373934.roa (raw, json)
Hash identifier:          wC80sOUxWwGiJM1+IYKs1Xv9YGFkbzDvBdi/xyYAwKI=
Subject key identifier:   6D:02:13:6E:31:52:F2:7E:D9:74:16:52:90:5E:8C:4B:1C:D8:46:B9
Certificate issuer:       /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Certificate serial:       5941781AAEA89CF432A5F934B5B71710EBA4FAE7
Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136362e302f32342d3234203d3e2039373934.roa
Signing time:             Mon 31 Jul 2023 00:03:53 +0000
ROA not before:           Sun 30 Jul 2023 23:58:53 +0000
ROA not after:            Mon 29 Jul 2024 00:03:53 +0000
asID:                     9794
IP address blocks:        203.201.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl
                          rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 16:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:41:78:1a:ae:a8:9c:f4:32:a5:f9:34:b5:b7:17:10:eb:a4:fa:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
        Validity
            Not Before: Jul 30 23:58:53 2023 GMT
            Not After : Jul 29 00:03:53 2024 GMT
        Subject: CN=6D02136E3152F27ED9741652905E8C4B1CD846B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1c:1d:63:06:51:ad:07:6d:f6:73:ee:f5:c5:
                    2b:3f:16:34:4e:b5:fb:cc:71:17:0a:6b:ca:34:6f:
                    3e:40:69:71:02:33:26:0f:a6:2a:04:51:1e:57:54:
                    15:99:29:7f:fa:b9:b4:59:eb:a7:69:90:50:b8:66:
                    16:61:c8:61:98:7c:4b:50:5b:82:72:b3:88:47:ee:
                    3d:09:a2:75:4c:2b:e0:44:64:a9:ad:b5:84:fd:1f:
                    25:59:78:64:7e:a6:8f:77:05:74:62:a7:aa:c8:d1:
                    bd:12:61:ce:df:d4:dd:c6:df:c0:df:c1:ff:65:d6:
                    80:c8:12:c6:74:87:8b:36:3f:c7:ea:85:6d:7b:b2:
                    ee:f9:25:02:73:b8:be:c0:5b:58:0f:a2:d9:f9:2d:
                    e6:fc:eb:ea:52:0e:e5:ca:70:8a:5b:9f:af:a0:c4:
                    72:14:80:74:1e:b6:ec:02:1c:d9:ec:dd:b1:7a:e5:
                    9d:92:fb:2c:4d:60:94:3c:e1:af:77:0d:03:6f:d7:
                    51:34:0c:48:cf:19:8a:42:63:d6:67:e3:17:6d:80:
                    65:78:6d:6e:c2:37:cd:f5:fe:d1:4b:ad:3c:c1:65:
                    f1:3f:6c:c4:da:55:8a:a1:64:77:eb:f2:08:8d:36:
                    06:ea:96:b1:0b:e8:12:2d:73:2c:07:ac:57:76:94:
                    51:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:02:13:6E:31:52:F2:7E:D9:74:16:52:90:5E:8C:4B:1C:D8:46:B9
            X509v3 Authority Key Identifier:
                keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136362e302f32342d3234203d3e2039373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.201.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:04:cc:cd:e0:ed:41:58:ac:b5:4f:aa:73:aa:3d:12:08:af:
         3b:92:51:ec:c6:e3:2e:9e:95:39:9d:65:8e:31:e8:f0:df:4c:
         c3:c6:13:e4:3d:0a:44:1a:05:cc:a2:ea:4d:6e:d0:28:3d:a7:
         14:8d:52:51:9a:7e:c7:7f:15:8d:4d:2c:f7:ba:f6:a7:5b:3f:
         55:e6:31:78:58:b4:44:a2:5e:ac:c9:d8:74:c3:63:e0:7f:2d:
         6d:93:0a:5c:f4:71:81:e5:b8:ce:39:3e:ea:19:9c:1f:ca:96:
         d0:4c:97:17:ee:d5:70:40:7e:58:66:9d:9f:6e:39:c6:0b:48:
         8a:22:13:25:f6:72:88:29:32:6f:b1:04:a0:20:aa:3d:e8:4e:
         e8:87:0f:61:cc:6c:43:a9:76:3d:91:c0:2e:82:a3:fc:b3:97:
         ce:d2:83:f0:9d:c7:87:f9:08:9e:77:7b:6a:16:b2:6e:20:1f:
         fa:de:d9:ed:1c:7e:7f:8e:58:05:6e:1f:28:da:92:7b:69:a2:
         5f:cd:e7:99:92:dc:8d:db:bf:a3:52:0f:94:16:2b:18:47:80:
         75:04:54:8a:36:9d:33:f3:54:81:eb:13:61:3f:23:69:be:15:
         8d:aa:25:0f:f0:39:00:d6:fe:e1:6c:2d:68:00:00:80:ac:d9:
         02:d4:91:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 19:13:27 2024 by rpki-client on console-ams.rpki-client.org