Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/3230322e34372e3138382e302f32332d3234203d3e203435333035.roa
File:                     3230322e34372e3138382e302f32332d3234203d3e203435333035.roa (raw, json)
Hash identifier:          8JuZ2ebsqDLgMKPt7Z/5NJCA9Jrmu98pAz1BifgGHCc=
Subject key identifier:   11:80:71:52:30:D2:33:52:23:9C:7E:6A:EF:A0:CD:16:F9:CC:7F:78
Certificate issuer:       /CN=79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E
Certificate serial:       41579559A3C34BA92D8D29D5662D81D4B012FAEC
Authority key identifier: 79:BD:07:5D:1B:C4:BD:8A:E0:C2:6E:FD:2D:37:22:CC:F6:EF:F6:5E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/3230322e34372e3138382e302f32332d3234203d3e203435333035.roa
Signing time:             Wed 07 May 2025 02:55:10 +0000
ROA not before:           Wed 07 May 2025 02:50:10 +0000
ROA not after:            Wed 06 May 2026 02:55:10 +0000
asID:                     45305
IP address blocks:        202.47.188.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.crl
                          rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 15:50:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:57:95:59:a3:c3:4b:a9:2d:8d:29:d5:66:2d:81:d4:b0:12:fa:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E
        Validity
            Not Before: May  7 02:50:10 2025 GMT
            Not After : May  6 02:55:10 2026 GMT
        Subject: CN=1180715230D23352239C7E6AEFA0CD16F9CC7F78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9c:fd:5b:71:bb:b8:18:9d:a3:ca:b2:c3:af:
                    fc:ba:43:77:15:6d:54:98:29:a2:79:54:00:d9:64:
                    9a:6e:d6:0f:bc:d5:e6:7f:9e:df:4f:14:29:03:69:
                    8d:f1:54:0a:81:08:b1:c6:8e:fe:aa:48:79:c7:cf:
                    2c:3b:57:48:85:df:33:df:e2:a2:78:9e:6d:ae:1f:
                    54:a1:66:d5:27:3f:ee:51:9d:dd:ff:ed:c6:0d:bf:
                    37:7c:6e:c6:06:6f:ce:79:5b:83:44:ab:8f:d4:ad:
                    39:fc:80:11:36:1b:d3:de:66:6c:f4:fd:28:1d:d3:
                    d1:55:01:09:8d:cc:85:74:9f:62:0d:f4:58:c6:7b:
                    3c:ea:22:84:55:df:9d:db:a0:d6:2a:11:a0:93:8c:
                    92:af:22:28:21:4a:84:e7:7b:10:12:de:a3:a0:6f:
                    a6:ec:66:29:63:d8:b3:9b:8b:9b:a0:a7:f9:37:fc:
                    32:02:ab:2b:f0:31:fe:80:9f:2d:e2:12:ef:a6:b7:
                    f3:9c:61:3c:bc:e6:ba:d1:12:a6:1f:48:6d:f4:b5:
                    e2:cc:5b:42:a6:47:a5:bf:fc:e6:91:31:b9:ff:04:
                    f8:27:04:5b:8d:d5:0e:cb:1e:96:43:49:9a:b7:31:
                    9a:66:e2:4e:33:6b:87:76:72:ea:1d:ae:72:2c:e1:
                    6a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:80:71:52:30:D2:33:52:23:9C:7E:6A:EF:A0:CD:16:F9:CC:7F:78
            X509v3 Authority Key Identifier:
                keyid:79:BD:07:5D:1B:C4:BD:8A:E0:C2:6E:FD:2D:37:22:CC:F6:EF:F6:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/3230322e34372e3138382e302f32332d3234203d3e203435333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.47.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:e4:9a:9c:af:9f:46:17:0e:69:6f:84:af:9d:54:0c:25:e8:
         ad:57:31:5a:1e:8e:d0:33:da:0c:30:68:81:b8:ce:7d:73:14:
         c4:54:a2:3a:a6:04:3b:69:76:f4:90:b7:40:e1:fc:50:fa:6c:
         4d:45:33:1d:10:51:fa:52:62:8d:e1:06:24:bd:51:c2:90:4a:
         c6:25:bb:90:a1:0e:88:4b:da:70:27:9c:e5:38:4e:c9:bf:e6:
         fb:67:cd:f1:43:d2:dd:52:e2:44:66:e8:af:7c:81:38:20:d0:
         10:b4:87:d2:c4:6c:18:1a:e6:bf:a0:08:8f:61:01:53:c0:0c:
         4a:d2:84:b8:21:f0:d4:ea:f8:9e:d7:82:41:2d:01:1f:b1:68:
         d7:c2:c2:dd:97:6c:cc:17:7e:ca:7b:ee:aa:dc:57:41:69:20:
         8f:df:6a:c3:1c:1d:89:54:36:7c:e8:aa:82:4d:5a:43:39:7c:
         ce:20:79:db:38:43:44:98:ae:1b:69:2e:8e:49:77:83:76:c7:
         04:92:b1:35:02:2a:3c:97:01:6f:92:a2:1b:9d:54:73:96:21:
         ef:8f:8d:fd:09:06:71:71:10:58:2b:d3:fd:a6:89:00:be:68:
         b2:17:14:a0:ec:31:65:dd:06:89:81:ec:40:3e:55:d3:06:04:
         e9:9f:d6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:31:50 2025 by rpki-client