Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234342e302f32322d3234203d3e203338373738.roa
File:                     3230322e39332e3234342e302f32322d3234203d3e203338373738.roa (raw, json)
Hash identifier:          OolbpeUpBXtFe5uwnVMRBxDj4cHLKQcUAfTTgB8M49A=
Subject key identifier:   59:B8:7C:8B:41:2F:A7:C9:AC:DF:F3:40:00:6B:9D:81:F6:91:EA:15
Certificate issuer:       /CN=F38DFF094E16843854EAC1403C69FD7F77809D02
Certificate serial:       4DBB8DCAC0D7CBC1CDC9CBED8BD071BE3C0DDD6B
Authority key identifier: F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234342e302f32322d3234203d3e203338373738.roa
Signing time:             Fri 04 Apr 2025 03:00:00 +0000
ROA not before:           Fri 04 Apr 2025 02:55:00 +0000
ROA not after:            Fri 03 Apr 2026 03:00:00 +0000
asID:                     38778
IP address blocks:        202.93.244.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl
                          rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 19:07:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:bb:8d:ca:c0:d7:cb:c1:cd:c9:cb:ed:8b:d0:71:be:3c:0d:dd:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F38DFF094E16843854EAC1403C69FD7F77809D02
        Validity
            Not Before: Apr  4 02:55:00 2025 GMT
            Not After : Apr  3 03:00:00 2026 GMT
        Subject: CN=59B87C8B412FA7C9ACDFF340006B9D81F691EA15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ce:3e:3e:1e:ba:ef:02:dc:a2:e1:08:37:c2:
                    23:f7:a8:31:c1:5b:21:af:d8:de:65:0c:e1:9a:b3:
                    59:0f:60:54:6e:22:52:67:eb:83:2a:38:15:7c:63:
                    ff:f6:e5:0c:4e:d1:b3:86:6c:ae:52:ed:72:34:b0:
                    52:e1:48:a2:c5:10:c5:ac:06:91:03:94:8d:a4:6c:
                    05:c7:20:dd:de:8b:fe:d7:32:d6:c3:67:20:2f:be:
                    e8:d2:f1:31:77:31:42:1a:65:c3:f5:41:3b:49:70:
                    57:72:42:db:99:7d:dc:59:33:1a:37:45:24:9d:d2:
                    ab:2c:95:ab:7c:9e:0e:0c:6f:8b:a0:91:32:52:10:
                    4a:db:5f:5c:4c:2d:b1:98:95:3f:88:86:44:25:23:
                    39:5e:19:6c:92:8e:35:e4:19:0d:8b:c1:0f:95:9e:
                    6b:01:1c:0c:33:67:22:64:71:1c:e4:2b:2d:18:24:
                    16:83:9b:83:21:05:57:e9:b0:55:e9:d7:6f:5f:72:
                    14:c9:14:95:9d:45:88:a4:a9:e2:b6:4f:0c:42:24:
                    d2:4a:2c:28:ac:f9:36:f0:d6:df:54:33:dd:f2:e1:
                    3e:b2:2a:4e:fc:db:2a:f1:5e:88:1c:5e:67:02:38:
                    26:af:23:7b:97:69:93:f9:74:e8:f7:1f:11:f7:f0:
                    ca:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B8:7C:8B:41:2F:A7:C9:AC:DF:F3:40:00:6B:9D:81:F6:91:EA:15
            X509v3 Authority Key Identifier:
                keyid:F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234342e302f32322d3234203d3e203338373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:17:b5:33:51:7c:14:52:ed:ac:0f:06:c1:6c:ce:7d:e2:10:
         62:fa:52:be:1a:0f:f0:ab:cc:a9:50:0c:bc:1b:6c:1f:36:56:
         7b:2f:a0:26:1f:fc:fe:b3:86:c9:76:6e:75:85:81:d4:ed:a1:
         a6:27:22:ca:f0:95:7d:78:3b:7b:92:f4:5a:61:43:89:de:24:
         ce:55:b7:bf:bc:19:b4:83:c1:f1:03:13:5f:10:ba:11:34:07:
         a9:25:5a:ac:bf:8d:52:99:a4:3e:d5:d4:21:60:fe:13:ce:4e:
         38:96:aa:87:7c:fd:67:0d:06:7e:ef:af:6a:92:03:36:7d:88:
         ba:49:fa:c4:33:f0:51:88:c7:62:f6:b1:cd:a3:7b:4e:56:94:
         0f:e3:ac:75:3a:44:88:e5:19:1d:5f:ac:ae:ea:6c:f2:9f:78:
         71:46:39:d5:75:d8:2d:ba:e6:d1:e3:7e:04:5e:c2:5a:4c:bc:
         a8:78:4a:12:57:52:98:e6:f9:75:ac:da:7f:f9:1e:74:58:b0:
         17:ac:0f:99:33:8b:cb:e6:47:0d:4b:1a:bd:66:7e:c0:88:40:
         f1:90:1b:b9:a6:40:26:50:36:a8:87:d4:c9:4f:b2:76:49:66:
         bc:10:47:97:d0:be:0b:e6:c8:b0:82:df:df:bf:da:46:4b:48:
         93:1b:02:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:01:26 2025 by rpki-client on console.sobornost.net