Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3139322e302f32342d3234203d3e203138313533.roa
File:                     3230322e37322e3139322e302f32342d3234203d3e203138313533.roa (raw, json)
Hash identifier:          4JRHGlgTjiQ2E4ohNDpjmFcrV1mqUH90bgY8D6I5glU=
Subject key identifier:   C6:E2:5C:7D:7B:E4:99:B8:C9:79:08:23:C7:99:B1:B2:8E:00:63:87
Certificate issuer:       /CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
Certificate serial:       16187AF6C912A23E93E749BC402A97904E6E6D5F
Authority key identifier: 9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3139322e302f32342d3234203d3e203138313533.roa
Signing time:             Mon 02 Jun 2025 02:02:54 +0000
ROA not before:           Mon 02 Jun 2025 01:57:54 +0000
ROA not after:            Mon 01 Jun 2026 02:02:54 +0000
asID:                     18153
IP address blocks:        202.72.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl
                          rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 15:11:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:18:7a:f6:c9:12:a2:3e:93:e7:49:bc:40:2a:97:90:4e:6e:6d:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
        Validity
            Not Before: Jun  2 01:57:54 2025 GMT
            Not After : Jun  1 02:02:54 2026 GMT
        Subject: CN=C6E25C7D7BE499B8C9790823C799B1B28E006387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:28:23:5c:db:87:30:f7:ca:80:29:07:df:ff:
                    44:02:59:3b:f1:f4:e9:52:38:f4:ba:7a:bf:ac:72:
                    19:04:3d:0f:2c:50:54:0b:dd:64:9e:21:00:1c:ef:
                    e8:23:f4:a5:89:eb:52:b5:6a:eb:0e:b8:46:f6:31:
                    65:b8:5e:7c:39:4c:c1:d6:cd:aa:9b:7d:2e:fb:9d:
                    a6:45:51:c7:fa:17:9d:a4:eb:04:49:77:a3:ad:e8:
                    5d:89:41:c5:80:4e:98:e6:47:f0:2a:8b:e3:95:f8:
                    1e:ea:68:ff:c1:23:88:9a:20:27:87:5b:f9:a9:48:
                    a9:b1:4d:7c:1e:b9:8b:77:b5:c4:ac:f7:ec:f4:05:
                    9e:2f:84:3a:0f:be:f5:79:be:fa:8b:0d:64:06:64:
                    c0:d0:07:59:0c:8f:9f:12:28:69:11:63:75:93:fe:
                    6a:f5:87:20:f5:5e:c0:05:2d:7c:0b:a0:aa:22:0d:
                    76:2d:d3:9d:eb:ba:52:80:fd:46:d0:90:ea:b3:84:
                    e9:8f:80:89:78:fb:e5:65:a0:b1:7c:0a:47:0e:76:
                    d7:40:80:01:82:cf:12:02:a5:4a:f3:87:df:2a:62:
                    ee:b9:bc:2c:8b:bb:00:bd:d0:8d:5a:52:8b:5e:bf:
                    c9:fe:63:d3:15:b8:00:61:7b:24:63:c2:28:f7:0c:
                    cf:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E2:5C:7D:7B:E4:99:B8:C9:79:08:23:C7:99:B1:B2:8E:00:63:87
            X509v3 Authority Key Identifier:
                keyid:9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3139322e302f32342d3234203d3e203138313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.72.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:d0:61:73:51:04:b0:82:f8:34:ad:e4:38:44:ef:5f:45:6f:
         ed:ff:62:ca:d6:62:8a:9d:03:c0:c4:a2:35:15:50:be:04:ed:
         bd:b2:6c:76:22:4a:16:03:85:61:61:54:e5:2d:bb:c7:d7:e3:
         af:24:c4:dc:24:59:c5:fa:10:7f:ff:d8:2a:27:65:2a:7d:a6:
         dd:89:c9:1e:19:03:1a:40:5e:77:c4:82:48:91:7b:bb:ae:2a:
         54:f4:79:0d:f8:0e:37:c6:2a:e9:1c:66:a1:b5:66:f1:ed:88:
         96:0b:c8:91:80:e8:14:d8:55:56:da:eb:7a:e4:eb:53:39:01:
         c1:8d:82:4c:22:94:80:a3:43:11:46:99:e1:b3:1c:05:44:86:
         68:0d:da:d3:a4:01:cc:46:35:6b:22:78:88:bb:9c:74:fd:f6:
         d7:18:7e:c2:64:99:52:1a:05:fd:e9:05:3a:dc:35:88:d8:b5:
         13:36:d1:85:ae:0e:31:0e:0b:ce:11:cd:83:3b:ac:04:02:d3:
         2b:2f:31:de:23:6f:fc:43:75:26:ce:26:10:63:20:e8:cc:b4:
         78:e7:ea:62:0e:68:c3:bc:ba:8f:f5:ee:70:c3:8a:f4:21:80:
         e2:01:de:2c:10:2f:58:94:7f:ad:5f:b6:86:7a:cc:d2:6d:0e:
         4a:23:32:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:51:19 2025 by rpki-client