Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3230322e35382e3234332e302f32342d3234203d3e203435333235.roa
File:                     3230322e35382e3234332e302f32342d3234203d3e203435333235.roa (raw, json)
Hash identifier:          WivqrExuW/czATKs+PzCjFZrJxIri49e6BcoDofHA0A=
Subject key identifier:   0B:C5:1A:35:1E:BB:1C:36:C3:7A:F1:87:99:6E:3C:30:24:4A:C0:E7
Certificate issuer:       /CN=C16E46D556A47D2429EC847E95E7C429D38AC26D
Certificate serial:       371BB953ADD87DF4511E801413ED207283AB1616
Authority key identifier: C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3230322e35382e3234332e302f32342d3234203d3e203435333235.roa
Signing time:             Thu 10 Jul 2025 03:37:42 +0000
ROA not before:           Thu 10 Jul 2025 03:32:42 +0000
ROA not after:            Thu 09 Jul 2026 03:37:42 +0000
asID:                     45325
IP address blocks:        202.58.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl
                          rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 13:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:1b:b9:53:ad:d8:7d:f4:51:1e:80:14:13:ed:20:72:83:ab:16:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C16E46D556A47D2429EC847E95E7C429D38AC26D
        Validity
            Not Before: Jul 10 03:32:42 2025 GMT
            Not After : Jul  9 03:37:42 2026 GMT
        Subject: CN=0BC51A351EBB1C36C37AF187996E3C30244AC0E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:0b:bf:a8:c8:a5:73:0a:a8:86:47:e0:c2:9d:
                    4c:3a:ef:94:50:d4:d7:0f:75:2a:76:f7:3a:05:36:
                    65:b0:3d:1c:a1:4c:4f:b5:31:47:73:17:b9:74:5e:
                    33:1a:b7:be:65:3b:60:f8:b9:ed:67:8e:b7:a9:c7:
                    9c:2c:b3:87:c1:86:0a:45:76:2c:ba:59:01:5a:bb:
                    77:85:56:25:bc:28:3b:0d:3f:41:4a:ee:cb:2e:cc:
                    ba:f3:ef:b6:9b:04:cd:d6:dc:81:a5:d5:14:a7:67:
                    72:2e:56:7f:f5:71:cd:02:b8:5d:4c:c1:f1:98:6d:
                    32:73:d9:b6:2f:d1:39:b6:6e:87:61:ff:a9:bd:19:
                    68:d9:7d:a0:8c:58:84:44:83:7f:4c:48:33:f1:7c:
                    84:c2:77:8e:5f:b4:86:f9:a5:77:e4:74:da:6e:54:
                    c3:b9:8d:4a:f3:7c:13:75:b5:37:6d:60:fb:83:99:
                    5a:3f:ae:9a:88:58:3e:d4:63:de:ee:2d:3c:83:fc:
                    4d:0a:26:1c:23:4b:cb:8d:f9:df:93:9c:73:be:2a:
                    40:97:e3:10:1e:4b:34:1e:42:cf:35:2f:c9:b4:67:
                    73:5a:75:83:5d:30:11:9c:6e:1f:8c:0e:76:74:e2:
                    04:e2:d5:10:aa:89:72:b5:c8:cf:8a:19:86:8e:42:
                    7d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C5:1A:35:1E:BB:1C:36:C3:7A:F1:87:99:6E:3C:30:24:4A:C0:E7
            X509v3 Authority Key Identifier:
                keyid:C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3230322e35382e3234332e302f32342d3234203d3e203435333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.58.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:d7:d2:96:dd:6d:6b:06:1d:86:94:3e:91:3d:54:3b:bc:66:
         56:fc:f6:db:c9:ab:a5:77:bc:67:1c:29:32:d2:db:87:ec:aa:
         31:dc:c0:46:12:f7:dd:0d:8d:47:f9:2e:12:ad:59:73:e5:65:
         a0:5c:d0:ef:36:fe:15:9f:ae:40:67:77:60:58:00:7f:57:33:
         40:23:00:93:0b:1d:96:47:e6:be:20:0c:9b:a1:fa:f1:bf:f8:
         98:69:d0:5b:f2:bf:fb:32:6e:2b:a9:19:f1:90:e2:bf:a5:b4:
         3e:94:2f:b0:5f:0b:1a:60:90:a7:99:3c:85:4b:68:0d:9f:66:
         ce:8b:f7:62:a2:15:25:27:b6:c7:61:f4:c3:ee:78:86:eb:74:
         40:31:17:43:a4:2d:a9:1e:39:56:c8:60:99:2e:f3:57:f7:63:
         c4:19:1f:85:67:e4:15:52:b0:60:58:30:6d:ab:35:4f:49:eb:
         5b:18:e7:be:1f:e1:cf:67:bb:2c:f4:b9:cc:e3:2c:c3:70:6c:
         9d:96:3b:2d:46:b7:f1:7d:d0:87:82:fe:3c:75:91:90:d9:90:
         47:7b:d3:ed:d0:9a:85:d1:10:7f:fd:35:1d:9a:23:c3:8c:4d:
         ec:c7:4e:aa:46:b5:f5:bf:05:bd:c5:e2:fa:7a:d5:8e:a3:2a:
         8d:ee:5b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 03:51:40 2025 by rpki-client