Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136372e302f32342d3234203d3e2039373934.roa
File:                     3230332e3230312e3136372e302f32342d3234203d3e2039373934.roa (raw, json)
Hash identifier:          +niEoUB0SerSSC544/xkip8ZKXtlcQ8MYGw7oZM+9fA=
Subject key identifier:   70:E6:65:2E:3C:6B:13:F5:EA:AD:05:98:3D:96:9C:6A:1F:08:B8:AF
Certificate issuer:       /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Certificate serial:       7C3401709C58C4497E5894D60D350E6F88D887DF
Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136372e302f32342d3234203d3e2039373934.roa
Signing time:             Mon 01 Jul 2024 01:02:59 +0000
ROA not before:           Mon 01 Jul 2024 00:57:59 +0000
ROA not after:            Mon 30 Jun 2025 01:02:59 +0000
asID:                     9794
IP address blocks:        203.201.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl
                          rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:34:01:70:9c:58:c4:49:7e:58:94:d6:0d:35:0e:6f:88:d8:87:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
        Validity
            Not Before: Jul  1 00:57:59 2024 GMT
            Not After : Jun 30 01:02:59 2025 GMT
        Subject: CN=70E6652E3C6B13F5EAAD05983D969C6A1F08B8AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0b:23:1a:94:f3:2b:f1:b2:30:f3:db:d8:1f:
                    79:61:63:c8:98:93:c6:30:ee:1e:3a:39:df:97:3a:
                    6d:8f:2a:48:96:af:ba:5f:fe:03:a1:a5:35:e6:6b:
                    49:e5:5c:ae:35:50:95:02:f2:6e:7f:78:15:03:4e:
                    bc:2f:e5:67:92:af:57:2b:d4:fb:94:72:63:09:67:
                    54:90:85:23:e9:b3:bf:e2:80:5e:ed:3c:ea:15:4a:
                    5c:78:52:91:5c:02:ed:98:8b:4b:81:9b:af:8a:14:
                    7c:37:d7:58:22:88:fe:bc:db:ab:57:8a:b2:7c:da:
                    48:aa:30:0f:c4:c5:3c:66:f4:c9:5d:68:f9:32:e5:
                    9a:72:57:1d:8b:e0:bd:c0:c7:14:10:f9:dc:52:1f:
                    97:99:7a:c3:d7:7c:16:08:cb:2c:e1:3f:1b:89:71:
                    1f:1a:32:90:71:40:b5:0b:97:25:e4:0f:0e:70:4d:
                    92:e2:e3:fc:1a:d0:4f:0e:59:ea:79:9c:17:4a:25:
                    ee:79:f8:64:ea:5e:c0:10:84:0e:84:1e:85:00:e0:
                    59:10:d8:dd:dc:0f:0a:cd:e6:78:d7:88:6f:a8:4a:
                    46:d5:13:15:24:5f:a9:14:54:36:54:1a:7f:f4:18:
                    4a:b0:10:a1:5a:66:d3:cd:b3:4a:32:4d:03:d2:b8:
                    70:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E6:65:2E:3C:6B:13:F5:EA:AD:05:98:3D:96:9C:6A:1F:08:B8:AF
            X509v3 Authority Key Identifier:
                keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136372e302f32342d3234203d3e2039373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.201.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:64:bc:80:1d:f9:16:b3:09:7f:0b:76:67:48:d6:28:75:9b:
         8c:a5:d2:1b:fb:d1:dd:4e:55:64:1b:98:22:97:ea:8a:2a:d3:
         7b:2d:8d:a2:9b:4e:3b:65:99:dc:c1:72:d0:7a:af:bf:28:1f:
         4c:07:16:78:af:31:26:fa:91:f7:7d:57:f7:96:c9:97:83:05:
         7a:f3:9e:60:fa:9d:87:09:50:0d:d5:8c:a2:4e:fa:c3:89:91:
         68:ed:5c:22:92:5f:40:1c:fd:f2:ac:c1:2b:a9:d6:90:cf:c3:
         34:af:7f:a4:d1:ea:24:07:9f:ac:e8:2c:63:b3:57:5b:fc:71:
         ac:8e:a2:b9:b8:07:9a:9e:a5:90:07:f7:57:bc:13:88:dd:05:
         69:c6:58:36:58:4c:21:98:4b:c5:b5:9f:3a:f6:0c:c2:ba:30:
         6a:58:c3:ca:d9:37:03:3e:ff:90:b7:a9:32:92:f9:1c:6b:e7:
         53:02:2e:4a:50:55:60:43:56:e0:4a:40:80:3f:99:18:a5:d1:
         f7:aa:26:43:72:34:f5:64:59:7c:b7:3f:1f:c3:54:16:c5:08:
         73:0c:2b:67:24:bc:5c:2c:b0:e7:eb:eb:4b:5e:4e:6c:fd:d4:
         59:d1:73:c2:0a:94:2e:3a:7f:c5:59:b9:fc:c3:24:0c:9b:ef:
         0e:9c:bc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:43 2024 by rpki-client on console-fra.rpki-client.org