Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/3230332e3230372e35322e302f32322d3234203d3e203138333531.roa
File:                     3230332e3230372e35322e302f32322d3234203d3e203138333531.roa (raw, json)
Hash identifier:          GkkNG9FcAuiztsaFs7LArOPHFVmugjMRyr9b42+liyc=
Subject key identifier:   04:B3:02:52:A4:4B:24:50:FA:B4:BD:1A:4B:78:FB:08:6B:9B:C9:7A
Certificate issuer:       /CN=D296B71263A794DB76A99329A0A6CD91F03F997C
Certificate serial:       0B519EC05FF6261E5FDC357F67D63A25F0F652FE
Authority key identifier: D2:96:B7:12:63:A7:94:DB:76:A9:93:29:A0:A6:CD:91:F0:3F:99:7C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/3230332e3230372e35322e302f32322d3234203d3e203138333531.roa
Signing time:             Mon 02 Jun 2025 02:02:35 +0000
ROA not before:           Mon 02 Jun 2025 01:57:35 +0000
ROA not after:            Mon 01 Jun 2026 02:02:35 +0000
asID:                     18351
IP address blocks:        203.207.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.crl
                          rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Jun 2025 02:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:51:9e:c0:5f:f6:26:1e:5f:dc:35:7f:67:d6:3a:25:f0:f6:52:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D296B71263A794DB76A99329A0A6CD91F03F997C
        Validity
            Not Before: Jun  2 01:57:35 2025 GMT
            Not After : Jun  1 02:02:35 2026 GMT
        Subject: CN=04B30252A44B2450FAB4BD1A4B78FB086B9BC97A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e3:02:0c:92:01:07:de:5c:b2:2e:2a:f2:16:
                    2d:72:e7:b4:d5:50:33:0f:ce:e3:f6:94:30:c2:f8:
                    0f:16:f6:59:5a:9b:ec:c7:1b:06:bd:1b:40:94:53:
                    7e:06:4a:b4:3c:73:d5:d3:10:4a:0b:4f:6a:8f:43:
                    bc:bf:7c:28:dc:1c:7b:e3:ad:8b:d0:64:01:7c:e9:
                    2c:50:1d:1f:cb:0c:ab:34:1c:df:e8:78:fd:37:60:
                    54:31:47:f2:03:a6:d4:7d:fc:51:70:64:9d:0b:33:
                    ad:45:15:21:e9:4c:be:64:cb:8c:85:34:d6:71:56:
                    ae:c0:ce:8c:9c:9d:97:17:9d:b9:5b:bd:54:bc:a1:
                    1c:d9:6f:8b:12:98:50:a2:fe:0a:f2:a9:6d:f9:98:
                    05:10:d5:64:04:63:4e:e2:3c:98:b1:67:33:5a:31:
                    1f:08:30:9e:da:fb:4c:63:87:62:41:35:03:06:3d:
                    26:4d:dd:41:1e:c1:c5:e0:a8:f1:22:9b:ea:ea:d5:
                    a9:1c:0b:b0:98:cc:07:7e:90:50:64:12:67:5b:b1:
                    a0:78:35:7c:db:aa:65:c8:0b:0e:1f:5b:da:ba:c5:
                    04:95:59:bf:85:ba:cb:d9:a2:39:43:61:88:0a:b4:
                    5b:6a:29:3c:b9:1d:f6:cd:ae:05:b5:af:fc:1e:5b:
                    af:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B3:02:52:A4:4B:24:50:FA:B4:BD:1A:4B:78:FB:08:6B:9B:C9:7A
            X509v3 Authority Key Identifier:
                keyid:D2:96:B7:12:63:A7:94:DB:76:A9:93:29:A0:A6:CD:91:F0:3F:99:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/3230332e3230372e35322e302f32322d3234203d3e203138333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.207.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:03:3d:c2:f9:e0:23:da:a8:0a:f3:57:c6:55:a3:bd:97:93:
         73:22:3e:2d:8a:ad:7b:08:74:59:d9:e2:d9:76:8a:ea:74:c0:
         32:bd:55:9d:4a:a7:98:5c:b7:18:91:5f:e6:b0:2a:f8:57:c6:
         45:07:ba:45:07:32:d5:b4:5e:ba:9c:c7:ca:2c:42:82:71:10:
         3e:65:eb:21:4b:82:71:c5:50:f3:41:9a:5f:12:cf:6a:81:0e:
         9c:3e:47:ff:c7:cc:d5:9e:59:4e:7b:fe:1a:9f:e4:6a:f7:d5:
         de:f5:31:19:42:5c:b8:a8:50:e3:c3:9f:49:63:ad:f2:de:35:
         c7:88:88:25:98:16:60:64:30:cb:2a:65:7a:8b:e1:62:3b:f6:
         29:e6:59:3b:9c:50:d3:04:1f:13:7c:cc:8f:50:8f:ba:d1:19:
         f5:59:a2:fa:12:ca:1e:3b:6b:e9:8e:ec:35:3b:1d:8b:e7:63:
         98:8b:1e:9d:dc:45:a1:cb:a8:c0:1d:65:c2:44:e8:75:5e:fa:
         17:a5:4f:1e:b2:b5:91:21:e3:cc:92:96:ad:52:38:be:d3:1c:
         78:da:12:4d:34:73:87:e7:44:47:e3:1b:60:72:b1:de:14:0b:
         91:77:20:c0:2b:97:af:5f:18:5a:5c:1d:24:bd:8d:ca:08:83:
         a6:99:cd:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:20:56 2025 by rpki-client