Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230352e302f32342d3234203d3e203538353532.roa
File:                     3230322e37322e3230352e302f32342d3234203d3e203538353532.roa (raw, json)
Hash identifier:          EZK2HW82EoviLvpddG+zTsR++pGZRfxBTBEevg15VUQ=
Subject key identifier:   18:23:E3:5B:89:CF:79:BB:34:62:F8:6D:A7:C7:C9:0F:77:66:64:29
Certificate issuer:       /CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
Certificate serial:       1CC1A6D8AF799BC798DCA158481BC73B2306FED8
Authority key identifier: 9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230352e302f32342d3234203d3e203538353532.roa
Signing time:             Mon 02 Jun 2025 02:02:55 +0000
ROA not before:           Mon 02 Jun 2025 01:57:55 +0000
ROA not after:            Mon 01 Jun 2026 02:02:55 +0000
asID:                     58552
IP address blocks:        202.72.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl
                          rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 19:25:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:c1:a6:d8:af:79:9b:c7:98:dc:a1:58:48:1b:c7:3b:23:06:fe:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
        Validity
            Not Before: Jun  2 01:57:55 2025 GMT
            Not After : Jun  1 02:02:55 2026 GMT
        Subject: CN=1823E35B89CF79BB3462F86DA7C7C90F77666429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:54:e4:36:98:20:4c:d6:7d:89:15:3a:2a:15:
                    71:11:54:83:80:81:22:4a:16:40:8a:c9:87:a1:60:
                    ab:0c:a3:ea:eb:cc:d8:2c:ff:24:9e:d3:bc:01:41:
                    fe:48:f9:a3:48:ef:45:93:e1:b8:40:a7:6c:f2:af:
                    c8:e2:02:b4:8b:78:79:7d:0b:97:9e:a6:d8:66:88:
                    5f:b9:78:e0:92:ea:a4:3d:e5:1d:35:0c:60:48:16:
                    fe:63:be:71:43:4f:9d:28:9d:9c:a9:eb:7d:94:8f:
                    b8:f0:9d:f7:3a:e3:e5:57:ae:9f:ec:ef:cf:4e:d1:
                    bb:1d:e4:38:11:f2:6d:92:c1:ee:fa:15:cf:57:00:
                    30:b4:09:f3:54:6a:72:7d:b3:ca:7d:4e:cf:99:8b:
                    af:1e:b4:44:a6:0c:26:71:12:ee:31:e0:41:88:55:
                    a5:43:a1:ab:e5:ba:64:92:ae:b8:35:d7:f0:93:c2:
                    4d:44:e7:73:74:f6:d2:51:33:a6:73:02:18:c2:a2:
                    40:7b:58:c6:3c:aa:81:3d:63:06:fa:d8:71:2f:f5:
                    88:d9:df:50:28:79:8c:8b:30:73:c7:16:05:72:54:
                    6a:6d:8a:ae:ac:14:3f:14:51:cb:cb:f1:65:74:65:
                    6f:98:3b:a3:61:a4:8e:dc:ed:f3:db:75:71:87:d9:
                    ab:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:23:E3:5B:89:CF:79:BB:34:62:F8:6D:A7:C7:C9:0F:77:66:64:29
            X509v3 Authority Key Identifier:
                keyid:9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230352e302f32342d3234203d3e203538353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.72.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:65:21:3e:18:ab:ac:13:88:70:a1:b4:ec:14:de:8b:19:53:
         6b:92:e0:90:75:91:79:6e:43:63:63:d0:50:66:05:5c:0b:9c:
         a4:1c:8b:84:aa:f0:10:59:d8:eb:c1:84:2c:ac:6f:f2:0d:9c:
         02:dd:ac:8f:d1:dc:31:f6:a5:11:57:61:04:64:85:d3:9f:a6:
         5b:ce:4f:5c:69:86:4c:35:cc:dc:d6:08:58:0a:c7:bb:4f:bf:
         4b:fb:46:96:b8:eb:50:41:03:16:5f:c9:38:23:68:be:23:d1:
         aa:36:85:a8:43:68:3b:a6:59:e0:3e:ec:7b:a1:ce:ca:88:5b:
         b0:9f:61:a4:9d:55:f9:05:9a:70:19:5b:3c:a8:7b:e7:f8:9e:
         6f:36:79:41:53:a6:2d:e0:af:b5:1c:ec:e9:21:24:43:50:e7:
         f3:e2:49:d0:c5:c8:34:9b:e5:10:07:ad:8c:ed:93:a9:bc:29:
         a5:cb:b3:2b:f0:46:43:df:bf:85:d9:37:71:c0:f0:b8:7a:da:
         6c:58:1f:85:0c:79:fd:d7:b3:f2:f8:d6:d9:e7:9d:ba:3f:8c:
         4b:16:d6:2a:2d:17:5b:13:3c:a1:2f:b1:53:e5:65:4f:93:b3:
         16:a8:dc:9d:26:bd:08:f0:1f:0a:9d:9d:13:b9:a6:91:74:41:
         9b:f4:63:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:06:25 2025 by rpki-client