Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234342e302f32342d3234203d3e203338373738.roa
File:                     3230322e39332e3234342e302f32342d3234203d3e203338373738.roa (raw, json)
Hash identifier:          Ukwgls6QusI0sVPeKowIBEMKKVNZ7qicjc7eWe3Bawc=
Subject key identifier:   53:CD:51:11:BD:5F:69:C0:11:A3:33:B3:83:06:65:43:15:A4:BD:55
Certificate issuer:       /CN=F38DFF094E16843854EAC1403C69FD7F77809D02
Certificate serial:       04B0F7ADC42C804E60F3F7DE321EA5C9ABAD8BA9
Authority key identifier: F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234342e302f32342d3234203d3e203338373738.roa
Signing time:             Thu 03 Apr 2025 09:00:01 +0000
ROA not before:           Thu 03 Apr 2025 08:55:01 +0000
ROA not after:            Thu 02 Apr 2026 09:00:01 +0000
asID:                     38778
IP address blocks:        202.93.244.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl
                          rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 19:07:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b0:f7:ad:c4:2c:80:4e:60:f3:f7:de:32:1e:a5:c9:ab:ad:8b:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F38DFF094E16843854EAC1403C69FD7F77809D02
        Validity
            Not Before: Apr  3 08:55:01 2025 GMT
            Not After : Apr  2 09:00:01 2026 GMT
        Subject: CN=53CD5111BD5F69C011A333B38306654315A4BD55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4f:fa:15:f9:a7:24:8b:bb:68:4e:75:71:29:
                    71:8a:8a:b6:e9:6a:d1:79:f1:ee:68:40:0a:49:4d:
                    8a:1a:d3:23:d4:2d:0a:4b:ab:9e:ba:79:68:b6:cd:
                    23:4c:94:50:d1:a9:07:8d:b7:3f:08:28:7e:6c:ca:
                    29:ba:a0:91:e7:38:d8:8a:9f:4b:9e:fa:bb:a3:58:
                    37:11:17:9f:a4:0a:67:4b:01:4e:f3:ce:6a:42:58:
                    eb:67:da:9d:37:77:5f:19:2b:be:da:e0:e3:a6:ab:
                    09:3a:ad:3e:e6:cb:bd:b7:ce:a8:5d:cd:5b:b0:20:
                    b7:67:67:c4:cc:73:66:a0:f2:64:95:e6:c4:9f:04:
                    e7:c7:52:7c:48:67:18:05:b7:e6:8c:06:94:fe:1a:
                    e5:45:0d:9f:fe:08:30:9f:78:9b:30:19:18:f3:b5:
                    b6:d0:6e:03:48:5e:ac:f8:19:85:a6:57:36:73:31:
                    b6:9f:5c:5f:01:0c:12:04:b2:49:30:6b:50:e4:c0:
                    e7:77:06:36:db:d2:73:6d:b1:d7:32:65:8e:7a:f1:
                    9d:0b:51:fd:7b:64:79:7c:9f:b4:1b:c7:77:54:bb:
                    42:52:64:47:e7:ee:ba:76:9c:f2:bd:e5:23:10:28:
                    00:ab:d8:7b:7e:e9:79:b1:88:26:c7:f7:82:a0:da:
                    70:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:CD:51:11:BD:5F:69:C0:11:A3:33:B3:83:06:65:43:15:A4:BD:55
            X509v3 Authority Key Identifier:
                keyid:F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234342e302f32342d3234203d3e203338373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:0b:97:4e:8e:f7:63:e7:34:2c:97:36:68:3a:3b:41:03:68:
         d6:8f:1d:9e:2c:f6:a5:b6:6b:8e:8b:b7:07:ca:dd:9f:38:ff:
         16:44:8a:92:56:68:16:59:d7:9b:ce:78:f0:4f:80:2a:6a:72:
         f8:ef:6f:71:8f:8d:af:b6:7e:2a:ab:cc:7b:3a:7e:ba:a9:fc:
         03:fc:96:64:96:84:e4:ba:0e:b4:ae:d9:1d:38:ee:77:f1:b1:
         29:9d:7d:83:c7:08:f5:b7:3c:7d:8e:bd:cb:85:56:18:87:5d:
         e5:fe:4d:77:66:2c:bb:44:56:76:77:13:0f:dc:4d:fb:f1:bc:
         fa:53:d6:df:e2:c7:cc:71:67:b0:ed:13:be:9d:74:a9:72:42:
         30:1a:45:c0:ef:95:08:be:77:9f:35:6d:12:e8:a2:13:7a:c5:
         f2:8e:9b:91:e6:7a:36:77:19:13:49:a8:6c:fe:2f:ad:4b:b4:
         0b:65:3e:0b:7d:97:65:d4:7e:ee:00:10:0b:16:51:53:96:a0:
         75:d1:5d:14:8f:f4:05:14:c1:90:6e:ce:57:05:c8:4a:21:b2:
         b1:0f:3a:0a:73:bb:d0:67:31:12:6c:69:63:62:40:85:ea:21:
         42:d1:9e:f3:ed:65:25:d5:78:99:4d:a7:d0:1b:83:06:c5:e5:
         d5:60:76:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:01:26 2025 by rpki-client on console.sobornost.net