Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3230322e35322e3134302e302f32332d3233203d3e203436303631.roa
File:                     3230322e35322e3134302e302f32332d3233203d3e203436303631.roa (raw, json)
Hash identifier:          OsKe0Kd5H+cGfVTzKHXPxDzQtoqEpS1qzPCWtVfHK8o=
Subject key identifier:   58:11:13:83:A4:21:BF:79:33:EA:2F:E2:96:4E:A1:9E:35:21:F3:40
Certificate issuer:       /CN=667078BDA093F84040F3016D179CABA67F68A647
Certificate serial:       065A22AF098DAD7261E0A072C471615F87A259AA
Authority key identifier: 66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3230322e35322e3134302e302f32332d3233203d3e203436303631.roa
Signing time:             Wed 03 Sep 2025 09:01:07 +0000
ROA not before:           Wed 03 Sep 2025 08:56:07 +0000
ROA not after:            Wed 02 Sep 2026 09:01:07 +0000
asID:                     46061
IP address blocks:        202.52.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl
                          rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Sep 2025 03:34:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:5a:22:af:09:8d:ad:72:61:e0:a0:72:c4:71:61:5f:87:a2:59:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=667078BDA093F84040F3016D179CABA67F68A647
        Validity
            Not Before: Sep  3 08:56:07 2025 GMT
            Not After : Sep  2 09:01:07 2026 GMT
        Subject: CN=58111383A421BF7933EA2FE2964EA19E3521F340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fd:fa:b6:32:52:f3:2b:51:91:c8:6e:ad:05:
                    d5:ac:9a:3e:0b:c7:2b:35:f7:30:be:d4:95:f4:16:
                    a6:53:df:40:f4:de:6f:2b:48:d3:6d:3e:76:da:9a:
                    76:ec:46:16:d6:a0:b5:aa:94:f7:e1:14:93:e6:f8:
                    4d:62:83:68:15:d1:42:46:39:12:10:0b:a6:34:4c:
                    81:92:85:d9:c0:a3:82:6e:3e:0c:73:06:eb:84:0c:
                    1d:c1:de:4a:6a:65:f9:0f:63:d4:0e:15:d5:09:33:
                    eb:53:f7:0f:6e:fc:25:20:1a:5f:ba:32:e6:63:6b:
                    be:47:02:d4:d4:c0:67:2c:58:f5:7c:a3:c6:c2:5c:
                    dc:6b:51:cd:f5:f2:8f:56:02:93:7e:f2:18:d6:93:
                    5e:85:ba:8e:f9:2f:80:12:63:96:32:77:2a:50:8b:
                    5d:91:43:4c:4e:a6:a3:6c:20:5d:06:0d:92:01:9f:
                    eb:cb:a5:21:06:32:dd:7f:fc:77:24:d7:8f:95:0f:
                    19:59:01:45:d1:e5:44:1c:a3:2b:ff:38:e7:a9:7a:
                    a7:1a:9c:d2:3c:60:1e:28:c4:e2:81:73:51:b3:41:
                    ce:3f:e6:27:dd:49:59:ab:b8:d3:dd:fd:c7:26:c9:
                    b3:1a:a4:69:0a:c2:64:f8:22:5b:c6:fb:33:67:f7:
                    f2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:11:13:83:A4:21:BF:79:33:EA:2F:E2:96:4E:A1:9E:35:21:F3:40
            X509v3 Authority Key Identifier:
                keyid:66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3230322e35322e3134302e302f32332d3233203d3e203436303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.52.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:37:37:b8:77:a6:06:bf:3e:c9:99:c1:5d:dc:49:8d:0e:42:
         61:9c:9f:c1:fb:8e:63:9d:39:c4:8f:8b:89:83:d4:c2:a1:c4:
         9a:a2:e4:db:74:08:d7:a5:f1:fb:be:e3:a8:20:df:5e:ef:7a:
         83:d0:f8:7e:34:56:8d:dc:89:d7:05:aa:42:d6:14:b5:56:49:
         59:06:78:01:e3:ac:cd:bd:15:98:1b:97:c1:3f:d7:b5:87:33:
         a2:11:6c:db:18:f6:0f:2b:5a:54:02:48:86:b3:a1:7d:a3:e0:
         95:77:11:4c:d9:6c:ad:87:32:64:fa:50:0c:ac:4c:d8:fd:4b:
         b3:c2:f3:83:f6:f9:ab:c8:11:dd:a3:8c:b8:30:7d:32:cb:2b:
         ec:d2:48:3f:39:7b:10:39:2f:ee:5b:9d:32:2c:cf:b5:3d:a4:
         96:fd:fe:fa:25:9c:f0:c7:37:0f:a5:50:b4:5c:38:e0:8f:52:
         bd:46:c5:0f:ba:56:35:a2:b3:45:c7:0d:ae:42:4b:cd:e2:fd:
         b3:1c:00:01:0f:93:34:f4:12:67:8b:9d:1c:d7:58:9c:ad:be:
         34:6b:2b:7b:d8:ba:a1:c4:2c:09:b5:2e:1d:8b:20:ae:f0:7d:
         e6:bb:05:eb:1c:38:fd:ea:c9:c9:c6:99:d1:cd:1a:fc:7f:6e:
         f4:43:1a:17
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUBloirwmNrXJh4KByxHFhX4eiWaowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY3MDc4QkRBMDkzRjg0MDQwRjMwMTZEMTc5Q0FCQTY3
RjY4QTY0NzAeFw0yNTA5MDMwODU2MDdaFw0yNjA5MDIwOTAxMDdaMDMxMTAvBgNV
BAMTKDU4MTExMzgzQTQyMUJGNzkzM0VBMkZFMjk2NEVBMTlFMzUyMUYzNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp/fq2MlLzK1GRyG6tBdWsmj4L
xys19zC+1JX0FqZT30D03m8rSNNtPnbamnbsRhbWoLWqlPfhFJPm+E1ig2gV0UJG
ORIQC6Y0TIGShdnAo4JuPgxzBuuEDB3B3kpqZfkPY9QOFdUJM+tT9w9u/CUgGl+6
MuZja75HAtTUwGcsWPV8o8bCXNxrUc318o9WApN+8hjWk16Fuo75L4ASY5YydypQ
i12RQ0xOpqNsIF0GDZIBn+vLpSEGMt1//Hck14+VDxlZAUXR5UQcoyv/OOepeqca
nNI8YB4oxOKBc1GzQc4/5ifdSVmruNPd/ccmybMapGkKwmT4IlvG+zNn9/LtAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUWBETg6Qhv3kz6i/ilk6hnjUh80AwHwYDVR0j
BBgwFoAUZnB4vaCT+EBA8wFtF5yrpn9opkcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
YzMyNmY0ZS02NjA1LTQ5NmEtYjlmOC1kNmU3N2IyOWJjYzYvMC82NjcwNzhCREEw
OTNGODQwNDBGMzAxNkQxNzlDQUJBNjdGNjhBNjQ3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjY3MDc4QkRBMDkzRjg0MDQwRjMwMTZEMTc5Q0FCQTY3RjY4
QTY0Ny5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJjMzI2ZjRlLTY2MDUtNDk2YS1i
OWY4LWQ2ZTc3YjI5YmNjNi8wLzMyMzAzMjJlMzUzMjJlMzEzNDMwMmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzQzNjMwMzYzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAco0jDANBgkqhkiG
9w0BAQsFAAOCAQEATDc3uHemBr8+yZnBXdxJjQ5CYZyfwfuOY505xI+LiYPUwqHE
mqLk23QI16Xx+77jqCDfXu96g9D4fjRWjdyJ1wWqQtYUtVZJWQZ4AeOszb0VmBuX
wT/XtYczohFs2xj2DytaVAJIhrOhfaPglXcRTNlsrYcyZPpQDKxM2P1Ls8Lzg/b5
q8gR3aOMuDB9Mssr7NJIPzl7EDkv7ludMizPtT2klv3++iWc8Mc3D6VQtFw44I9S
vUbFD7pWNaKzRccNrkJLzeL9sxwAAQ+TNPQSZ4udHNdYnK2+NGsre9i6ocQsCbUu
HYsgrvB95rsF6xw4/erJycaZ0c0a/H9u9EMaFw==
-----END CERTIFICATE-----
Generated at Mon Sep 8 09:30:34 2025 by rpki-client