Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234362e302f32332d3233203d3e203338373738.roa
File:                     3230322e39332e3234362e302f32332d3233203d3e203338373738.roa (raw, json)
Hash identifier:          ivkwwboxp97krml3NHZ+/mc1/AhS1A0qIb6B1JYBu0M=
Subject key identifier:   8E:C8:82:81:7E:B4:38:00:1D:31:6A:EF:97:DA:6E:78:A4:6E:D5:4C
Certificate issuer:       /CN=F38DFF094E16843854EAC1403C69FD7F77809D02
Certificate serial:       2D4134EED354ECA71C76EB0381476883E6EAEEB0
Authority key identifier: F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234362e302f32332d3233203d3e203338373738.roa
Signing time:             Mon 02 Jun 2025 02:02:40 +0000
ROA not before:           Mon 02 Jun 2025 01:57:40 +0000
ROA not after:            Mon 01 Jun 2026 02:02:40 +0000
asID:                     38778
IP address blocks:        202.93.246.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl
                          rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Jul 2025 00:31:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:41:34:ee:d3:54:ec:a7:1c:76:eb:03:81:47:68:83:e6:ea:ee:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F38DFF094E16843854EAC1403C69FD7F77809D02
        Validity
            Not Before: Jun  2 01:57:40 2025 GMT
            Not After : Jun  1 02:02:40 2026 GMT
        Subject: CN=8EC882817EB438001D316AEF97DA6E78A46ED54C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ce:cf:ce:38:a4:d2:0a:45:f3:31:18:de:e6:
                    9e:1c:9c:fc:5d:56:e0:2c:07:d9:a6:9d:d8:94:28:
                    97:bc:86:c9:d3:40:79:f6:72:2b:ec:b3:9e:df:33:
                    8c:45:2d:6c:96:7d:d4:92:00:41:43:e8:c3:d6:16:
                    c5:d9:b8:94:95:88:86:fa:07:7c:2c:59:47:bf:5c:
                    e4:d4:d6:bd:42:b9:92:94:3c:43:d5:db:83:23:c7:
                    33:08:d7:be:2e:5a:1f:0d:4d:ec:fc:e3:71:61:a4:
                    5a:84:f8:8a:35:65:84:39:bf:dc:3c:5a:61:f5:ee:
                    38:bc:26:b2:08:7e:78:54:24:09:11:94:fb:05:92:
                    b6:46:e7:e1:7e:e0:97:e1:98:d7:b4:0d:8f:64:3f:
                    e9:f0:7a:e2:40:09:a3:52:a8:05:b3:a5:c8:e1:42:
                    3c:7b:50:29:28:3a:84:9f:74:17:5b:11:d9:80:46:
                    68:b8:2b:61:20:2a:da:9b:e7:e8:b3:b7:9d:d6:c4:
                    27:7c:a5:05:1b:f3:b4:06:74:73:77:9a:6b:a4:bb:
                    0b:db:bb:f5:29:72:e4:29:9e:0d:b5:83:dd:11:26:
                    10:9b:37:cd:d7:55:21:67:a0:72:3a:a0:45:ca:53:
                    f2:01:18:79:66:36:04:6a:08:78:c6:56:25:35:0c:
                    37:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C8:82:81:7E:B4:38:00:1D:31:6A:EF:97:DA:6E:78:A4:6E:D5:4C
            X509v3 Authority Key Identifier:
                keyid:F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234362e302f32332d3233203d3e203338373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:5a:a8:bd:08:75:74:bf:c3:19:31:f4:7b:72:e4:b6:f1:ba:
         cb:3a:5d:93:fe:30:32:4e:df:a3:4f:8e:85:68:e1:8a:ad:40:
         e0:c2:a0:4f:8d:25:ff:2c:ac:ec:62:a7:a9:0a:79:50:06:ed:
         d0:c5:eb:85:e4:30:be:1d:51:f0:1e:46:ec:77:23:ec:37:3f:
         2f:87:f8:30:bc:62:17:5c:9b:89:0e:5b:f2:a2:ee:d8:ab:62:
         10:0c:d5:82:ff:0c:34:01:e4:a8:61:69:5e:ff:78:7a:98:95:
         7f:b9:d4:b0:34:66:7e:73:70:e2:1d:86:f3:44:5d:40:02:3d:
         d1:2f:b7:c5:a6:07:d9:69:9f:e0:bd:58:db:e5:5e:f8:c2:c6:
         be:84:ec:dc:34:de:13:96:21:36:62:cf:e2:13:4d:01:52:fc:
         32:38:19:e1:9f:7c:a7:8d:7e:54:66:3d:31:6d:ba:84:5f:e9:
         18:fd:80:71:f6:7b:d2:81:6b:4f:de:19:87:5f:53:f7:0f:60:
         2c:60:56:ff:ff:79:8f:82:6d:bc:34:40:19:e7:c5:d3:e6:84:
         42:67:d5:eb:15:ae:dc:e7:c9:90:98:19:fc:b4:a6:13:28:62:
         a8:f5:8a:6e:08:9e:91:5c:e6:85:3d:54:24:d1:76:25:fd:84:
         1e:57:d0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 06:15:18 2025 by rpki-client