Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e39302e302f32332d3233203d3e203435373235.roa
File:                     3138302e3231312e39302e302f32332d3233203d3e203435373235.roa (raw, json)
Hash identifier:          OgCMc6N8YMB+q9soDBfzLtklXuNaeCduzkpg+Npc+Pg=
Subject key identifier:   73:4B:4E:00:C1:78:22:1B:84:16:68:28:17:FE:1D:93:CE:D8:8E:15
Certificate issuer:       /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial:       74D4C561D15774A1EC8FF177B3ACF9446587B0CF
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e39302e302f32332d3233203d3e203435373235.roa
Signing time:             Sun 06 Apr 2025 15:13:28 +0000
ROA not before:           Sun 06 Apr 2025 15:08:28 +0000
ROA not after:            Sun 05 Apr 2026 15:13:28 +0000
asID:                     45725
IP address blocks:        180.211.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl
                          rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 16:36:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:d4:c5:61:d1:57:74:a1:ec:8f:f1:77:b3:ac:f9:44:65:87:b0:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
        Validity
            Not Before: Apr  6 15:08:28 2025 GMT
            Not After : Apr  5 15:13:28 2026 GMT
        Subject: CN=734B4E00C178221B8416682817FE1D93CED88E15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6d:c9:a0:6e:0e:38:c9:b1:af:05:04:78:ac:
                    71:e1:65:5f:a8:d0:1a:59:9a:54:38:1f:b2:b4:99:
                    92:79:ed:00:87:47:e4:ae:e3:af:6a:42:46:df:a3:
                    6c:4c:68:c0:45:28:f9:49:95:9c:22:be:fc:35:25:
                    26:e7:40:75:dc:c4:c4:52:ae:9e:6b:50:77:b1:4a:
                    c4:32:a5:51:a3:76:a2:98:ae:3a:ea:73:9b:b3:26:
                    ae:aa:35:80:f8:cd:69:82:a8:31:66:d3:45:ee:8a:
                    f6:99:cf:79:a3:49:f7:6f:eb:4f:1a:dd:08:3d:a7:
                    d2:1a:31:19:28:84:9d:e6:11:34:9f:88:4d:1f:2a:
                    0f:c7:5b:5b:e6:2a:52:5b:74:2c:cc:ad:c0:b8:19:
                    70:4c:e7:94:5b:09:43:55:4c:9c:1a:cb:1b:a8:d3:
                    06:6b:b9:74:07:02:4a:c8:25:75:e3:99:64:a1:f9:
                    d1:40:c4:af:44:8c:01:d9:29:aa:69:c2:69:7e:7d:
                    fe:fb:8a:87:79:8a:34:10:a6:a3:4a:1b:50:e5:0e:
                    00:a7:90:96:16:31:36:c2:2e:18:02:44:ef:87:ad:
                    af:13:ff:a1:01:27:bc:cc:db:c1:f4:c9:f5:55:74:
                    f7:6c:bb:cb:e3:4a:6f:5a:1b:e0:09:0c:fc:69:16:
                    ac:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:4B:4E:00:C1:78:22:1B:84:16:68:28:17:FE:1D:93:CE:D8:8E:15
            X509v3 Authority Key Identifier:
                keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e39302e302f32332d3233203d3e203435373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.211.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:48:70:15:8b:b1:bd:5d:a4:ac:3d:01:22:4d:91:f3:6a:0a:
         51:b6:d7:41:eb:59:ca:60:40:e3:d4:4c:0b:11:aa:9a:72:17:
         9d:e4:d7:ba:22:e6:2b:d5:86:f5:ea:07:45:aa:2f:32:3e:89:
         95:90:74:55:e1:30:4c:cd:55:46:d9:4b:24:8f:17:77:ff:a1:
         ff:13:92:74:98:d2:3b:36:76:9f:64:17:5b:b7:02:99:0e:4f:
         6b:e0:e4:30:c9:eb:ae:75:97:8f:f5:ed:1d:03:c6:22:06:88:
         84:b2:5e:c9:9e:09:45:d8:68:ae:81:a4:fd:46:13:66:36:87:
         6c:45:77:c1:b2:08:b9:85:a0:b8:a8:6f:bd:23:57:42:1a:26:
         4b:d7:a9:46:06:08:80:96:85:a1:5c:48:cc:09:54:9e:a6:20:
         45:7d:48:b2:0b:53:ab:72:91:d7:6b:20:21:83:66:b6:44:4a:
         5e:3e:7e:d0:31:e3:cf:05:12:32:5a:5a:9e:e6:bf:e8:b0:28:
         98:8b:99:bc:51:19:c4:b5:65:7a:e9:fc:65:59:3a:81:9c:17:
         0d:4c:28:9b:80:cb:bb:61:81:7e:9e:4f:ad:05:01:60:2f:a0:
         77:62:94:d8:2a:36:90:01:12:6a:3f:04:54:79:a0:2b:ff:34:
         59:03:4e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:53:29 2025 by rpki-client