Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234362e302f32342d3234203d3e203338313530.roa
File:                     3138302e3231342e3234362e302f32342d3234203d3e203338313530.roa (raw, json)
Hash identifier:          euoMpvL4eG72VF7oEqlEoSVWhRjwaeq3y0huB9mjd6w=
Subject key identifier:   E4:6C:62:C5:BB:DE:05:D2:EE:8C:2C:3C:9B:F0:A0:D8:A2:C9:D6:C2
Certificate issuer:       /CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
Certificate serial:       265D74AADC345B8C585FABED5673878ECFB98DED
Authority key identifier: 2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234362e302f32342d3234203d3e203338313530.roa
Signing time:             Mon 02 Jun 2025 02:02:31 +0000
ROA not before:           Mon 02 Jun 2025 01:57:31 +0000
ROA not after:            Mon 01 Jun 2026 02:02:31 +0000
asID:                     38150
IP address blocks:        180.214.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl
                          rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 15:15:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:5d:74:aa:dc:34:5b:8c:58:5f:ab:ed:56:73:87:8e:cf:b9:8d:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
        Validity
            Not Before: Jun  2 01:57:31 2025 GMT
            Not After : Jun  1 02:02:31 2026 GMT
        Subject: CN=E46C62C5BBDE05D2EE8C2C3C9BF0A0D8A2C9D6C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:51:0a:de:ec:64:f5:a2:c6:fd:3f:4c:54:63:
                    b5:33:12:24:e4:f7:ea:d1:0e:b6:63:15:9d:08:6d:
                    de:75:04:3a:73:3e:14:21:90:10:ce:24:24:bc:64:
                    d4:02:30:8c:d7:42:28:c7:39:57:ee:6b:51:cd:b0:
                    ea:61:20:33:f2:88:38:84:c4:2f:ad:4b:de:7e:f4:
                    1b:50:6e:52:69:7a:67:ca:bb:c3:18:88:d5:47:6f:
                    ca:b0:03:be:03:08:e7:ad:78:3b:17:1d:7d:f0:4d:
                    b7:96:36:4a:f3:26:a0:51:29:4a:1c:4c:45:b3:58:
                    49:14:2d:02:00:d8:77:41:99:96:01:1c:37:05:64:
                    11:26:f5:36:b3:2d:f1:7c:e2:e9:1c:b8:17:37:48:
                    d9:a0:aa:5f:f3:af:f3:5d:b3:34:6a:e7:91:fb:aa:
                    16:02:46:2e:73:e3:c5:96:93:fe:58:06:e1:db:73:
                    dd:1f:2a:23:9f:be:c8:f7:6b:20:e0:a1:c7:2b:34:
                    c0:70:45:10:91:c4:39:f9:f6:9d:e7:05:39:30:48:
                    fd:bc:2e:9b:22:ff:39:5b:2e:fc:5c:0d:73:c7:36:
                    f4:ea:94:dd:d4:0f:3f:52:3b:d7:78:11:54:0e:58:
                    97:b0:01:80:6f:42:0a:b8:6d:47:2c:29:9e:c5:3e:
                    34:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:6C:62:C5:BB:DE:05:D2:EE:8C:2C:3C:9B:F0:A0:D8:A2:C9:D6:C2
            X509v3 Authority Key Identifier:
                keyid:2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234362e302f32342d3234203d3e203338313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.214.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:4c:5d:c0:2e:2b:ec:b3:c2:d7:16:5e:90:f0:16:cc:17:65:
         ba:89:31:09:11:02:40:a5:4d:2b:6e:d0:cc:62:a3:19:92:29:
         0a:aa:79:c9:3a:a9:05:0a:27:89:8c:29:02:1b:f0:c2:1d:3a:
         34:41:29:05:b3:fb:88:13:ea:e0:5a:59:ba:39:38:98:2d:59:
         80:c6:c6:6b:05:b7:d8:17:47:e8:4f:55:4e:8c:04:fd:76:91:
         72:8c:09:e3:bf:20:b1:07:c1:8a:6f:c6:70:4c:2c:78:86:45:
         d3:1b:d9:96:85:9b:13:dd:99:0e:aa:d8:a6:e6:65:15:cc:dd:
         06:2f:24:72:d5:2c:3f:95:2e:a3:66:2a:fa:d2:1a:e4:8f:f4:
         2d:37:85:5b:1b:f9:ff:6e:2b:5a:75:e0:7e:66:d6:2e:65:00:
         f8:cf:6b:ab:63:96:bb:52:94:61:4e:8a:3d:40:96:43:a6:00:
         cd:09:46:05:85:c9:c4:04:ce:1f:51:54:fe:8c:3f:4f:ec:09:
         e4:77:4f:33:0b:0c:12:0f:56:86:92:c6:72:7c:d0:95:e6:59:
         da:bf:b1:da:cc:79:53:7c:25:68:ca:36:78:3a:29:76:a3:7a:
         c4:ce:e8:38:75:94:16:47:97:06:4e:2f:7b:68:a7:28:7c:aa:
         b0:25:ea:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:42:33 2025 by rpki-client