Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3230322e34332e3131342e302f32332d3234203d3e203435373036.roa
File:                     3230322e34332e3131342e302f32332d3234203d3e203435373036.roa (raw, json)
Hash identifier:          7fQVmlkjjbtviTL2Fj7ic9MZZ5loTg5W7CHv/vNGE0s=
Subject key identifier:   8E:32:5B:D9:4F:30:92:57:B6:8E:35:E0:97:1B:43:FB:B6:1B:1E:DF
Certificate issuer:       /CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5
Certificate serial:       783ABA0864D1F0ED1F1694DDB51F839D9DB4979C
Authority key identifier: 49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3230322e34332e3131342e302f32332d3234203d3e203435373036.roa
Signing time:             Mon 02 Jun 2025 01:03:18 +0000
ROA not before:           Mon 02 Jun 2025 00:58:18 +0000
ROA not after:            Mon 01 Jun 2026 01:03:18 +0000
asID:                     45706
IP address blocks:        202.43.114.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl
                          rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 06:21:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:3a:ba:08:64:d1:f0:ed:1f:16:94:dd:b5:1f:83:9d:9d:b4:97:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5
        Validity
            Not Before: Jun  2 00:58:18 2025 GMT
            Not After : Jun  1 01:03:18 2026 GMT
        Subject: CN=8E325BD94F309257B68E35E0971B43FBB61B1EDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:22:1d:7e:95:08:48:f0:05:de:ae:32:32:a8:
                    08:8c:d2:6c:fa:9f:7d:e0:d4:ac:00:01:8f:f3:d3:
                    03:0d:5c:ad:18:4c:ca:63:d9:bd:80:a2:9c:30:6e:
                    79:c2:d6:29:58:5b:1e:52:47:cd:b1:d2:2d:49:7c:
                    0c:0a:98:bc:e7:95:7a:1f:f3:f9:b9:5d:c0:9a:d0:
                    c4:43:84:43:83:3c:16:66:cb:4a:1e:d4:e3:4c:53:
                    ea:3e:6a:83:ca:db:0d:94:d3:b9:cd:0d:02:31:0e:
                    2c:06:06:f2:7c:bc:0a:23:79:ee:3b:7a:98:a0:39:
                    9e:80:ad:ad:a3:df:61:04:58:eb:e7:de:3f:6e:b9:
                    59:8f:c1:07:1b:66:3d:e4:aa:18:92:c6:72:ef:17:
                    73:5f:f8:54:c9:4d:bc:c4:89:b3:f4:da:8b:6f:69:
                    d2:d7:cb:f8:71:9f:74:6b:18:93:56:b7:27:35:36:
                    9e:5b:e5:5b:bf:ff:9b:e2:ed:68:86:46:64:10:77:
                    10:a9:a8:81:a0:52:6a:f6:f2:f1:ef:3b:44:af:23:
                    6f:be:98:26:2f:40:f7:b0:10:e2:f6:0a:9f:24:ae:
                    a9:67:af:d8:e5:22:93:c6:11:53:b3:bc:a6:32:ec:
                    85:58:1b:fd:9f:ca:19:20:70:d9:02:93:c0:15:56:
                    f2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:32:5B:D9:4F:30:92:57:B6:8E:35:E0:97:1B:43:FB:B6:1B:1E:DF
            X509v3 Authority Key Identifier:
                keyid:49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3230322e34332e3131342e302f32332d3234203d3e203435373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.43.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:63:bd:e0:07:33:03:22:05:56:a7:16:e4:59:b0:47:65:d4:
         0f:92:3b:f2:cb:18:8f:df:2a:b1:10:dc:88:4e:aa:c8:1b:7c:
         6a:2c:7f:01:70:1b:8d:95:75:00:83:0c:45:fb:8c:9e:41:d0:
         eb:1d:69:18:a0:08:6b:b2:b4:ab:47:14:d3:0c:19:29:91:9a:
         15:84:da:b3:f3:40:89:c0:29:6b:75:17:63:b5:fe:a9:93:1f:
         4f:b6:c9:37:83:77:b6:e0:de:e5:a1:27:f2:c4:0e:f4:8b:80:
         0d:66:27:24:f3:a2:c8:4c:0b:11:36:0d:a5:4b:98:bd:09:cd:
         7d:f9:cd:4e:0b:bd:36:71:83:72:22:72:5e:39:6a:1d:46:27:
         75:22:4d:14:7d:ba:8e:ca:4b:03:c7:2c:8f:5a:bf:5f:f6:da:
         9b:17:b1:72:ea:44:2f:fc:ee:fa:e9:9e:a6:0e:61:0d:e0:10:
         96:5e:a2:51:ae:84:02:00:c8:02:8d:7c:41:92:2f:40:6e:80:
         e0:7c:89:2c:9b:5e:b6:3c:43:d0:24:fb:2a:d0:36:de:f6:7c:
         e4:a4:4b:14:1f:ef:03:99:f9:bb:8e:b1:cd:3b:77:87:90:fe:
         3d:d7:90:f2:b2:99:60:df:39:86:b3:3e:b7:e3:dd:d1:fd:ac:
         0a:69:f7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:07:23 2025 by rpki-client