Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/3230332e38342e3135322e302f32312d3234203d3e203234353233.roa
File:                     3230332e38342e3135322e302f32312d3234203d3e203234353233.roa (raw, json)
Hash identifier:          sHtP5I2fCL/ByfK8+QejX4fzdx/zVWKbMfpBHH71lYU=
Subject key identifier:   A8:01:F7:35:CF:AC:66:3F:51:B9:D0:34:21:72:2F:39:C1:84:CA:C1
Certificate issuer:       /CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38
Certificate serial:       4E185F01DEE265B16353D7A38EB4EDAD2C37808D
Authority key identifier: 11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/3230332e38342e3135322e302f32312d3234203d3e203234353233.roa
Signing time:             Mon 02 Jun 2025 02:03:00 +0000
ROA not before:           Mon 02 Jun 2025 01:58:00 +0000
ROA not after:            Mon 01 Jun 2026 02:03:00 +0000
asID:                     24523
IP address blocks:        203.84.152.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl
                          rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 20:31:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:18:5f:01:de:e2:65:b1:63:53:d7:a3:8e:b4:ed:ad:2c:37:80:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38
        Validity
            Not Before: Jun  2 01:58:00 2025 GMT
            Not After : Jun  1 02:03:00 2026 GMT
        Subject: CN=A801F735CFAC663F51B9D03421722F39C184CAC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:40:60:34:98:d0:db:05:11:ed:52:65:de:59:
                    e5:47:68:c7:45:dc:90:11:df:37:09:54:6c:dc:d5:
                    19:b0:ce:36:fa:2f:27:4d:8d:27:28:c4:e6:b7:99:
                    0a:d4:a4:02:62:bb:a0:ca:88:46:07:05:cc:8a:91:
                    ff:e4:1f:e7:61:ce:1c:b2:23:ce:1b:1b:cf:ae:f3:
                    9e:7a:f0:9e:59:1c:22:2d:91:43:bd:bf:94:96:f9:
                    d5:cb:db:2e:fc:e0:a5:ec:b7:33:f6:22:07:ca:08:
                    ab:af:74:16:59:5b:5b:4b:02:43:09:f0:d5:93:5a:
                    bc:f6:7e:29:c5:71:62:88:6f:f5:00:b2:27:a0:88:
                    7f:13:d1:dd:7b:92:4c:7d:72:f5:bc:45:ba:68:30:
                    cc:bc:e7:f8:0a:8b:1c:48:ed:15:16:69:fa:16:00:
                    54:96:22:23:92:45:59:00:a0:fe:25:ea:59:c9:3d:
                    a1:4a:12:47:7c:e4:99:c0:04:ee:4b:d2:2e:e0:37:
                    15:6d:58:5c:56:da:cc:56:64:29:c6:1f:5e:5a:81:
                    50:50:11:78:52:66:d2:1b:14:52:b0:74:24:a2:7e:
                    17:1b:6c:ab:6b:34:3e:76:12:f6:76:ff:40:b4:47:
                    bf:bc:28:35:dd:ad:4f:3e:12:c4:9e:d6:c3:6f:e0:
                    e8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:01:F7:35:CF:AC:66:3F:51:B9:D0:34:21:72:2F:39:C1:84:CA:C1
            X509v3 Authority Key Identifier:
                keyid:11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/3230332e38342e3135322e302f32312d3234203d3e203234353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.84.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         17:b7:91:63:cd:8b:81:03:1e:4e:93:f8:7c:d5:84:5f:85:68:
         72:f7:ff:20:dd:f2:a0:58:0a:1f:c2:4c:5b:21:37:95:32:99:
         e7:50:ea:ec:98:a4:e5:da:b9:5a:11:ca:52:54:e8:8c:76:d5:
         53:17:49:10:32:4e:f5:31:0b:d6:10:71:8a:0f:78:fe:16:13:
         bd:2d:88:f0:ab:ea:df:8f:16:37:80:3b:02:23:fe:09:da:b9:
         09:95:e2:89:40:b8:40:f6:1c:67:56:da:8b:14:4d:4a:e0:bd:
         f5:c1:ef:11:05:ce:2a:8a:65:90:67:2d:36:11:06:6e:46:2a:
         ba:d7:eb:54:0a:b4:5a:5f:02:d9:c4:0d:01:43:4d:35:77:d2:
         af:89:e3:07:51:b3:95:48:23:95:2d:0d:35:ab:e0:37:b5:cb:
         f6:0e:f4:3a:75:42:22:55:93:3e:ac:82:40:7c:cc:99:40:83:
         01:1f:5a:8e:9c:d9:64:a2:38:10:a4:47:5a:51:da:b6:6b:2f:
         08:7b:fe:c5:0d:8c:44:aa:b4:57:72:45:92:86:ff:fb:f6:42:
         b7:f9:af:0c:6c:31:ec:85:cc:7f:65:ef:9d:35:a8:f4:a2:4d:
         83:e2:c3:b5:a7:2a:c1:f2:e1:83:27:25:cb:84:54:95:91:39:
         e8:f1:40:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:35:30 2025 by rpki-client