Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/3230322e34372e39302e302f32332d3234203d3e203436303230.roa
File:                     3230322e34372e39302e302f32332d3234203d3e203436303230.roa (raw, json)
Hash identifier:          f31WSeSw8w1qVqSz7UZlMp3AZocd9nv655saAh7fViI=
Subject key identifier:   A7:63:D8:C9:CC:AF:7C:B2:08:81:B7:2F:54:B3:78:E7:A1:93:2C:49
Certificate issuer:       /CN=B2BCF7264F89246583B384F354CB350DF3B6AADB
Certificate serial:       0A8675962A14056009CDE37544AB4AEA8B51CDEA
Authority key identifier: B2:BC:F7:26:4F:89:24:65:83:B3:84:F3:54:CB:35:0D:F3:B6:AA:DB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2BCF7264F89246583B384F354CB350DF3B6AADB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/3230322e34372e39302e302f32332d3234203d3e203436303230.roa
Signing time:             Mon 02 Jun 2025 02:03:16 +0000
ROA not before:           Mon 02 Jun 2025 01:58:16 +0000
ROA not after:            Mon 01 Jun 2026 02:03:16 +0000
asID:                     46020
IP address blocks:        202.47.90.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.crl
                          rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2BCF7264F89246583B384F354CB350DF3B6AADB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 07:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:86:75:96:2a:14:05:60:09:cd:e3:75:44:ab:4a:ea:8b:51:cd:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2BCF7264F89246583B384F354CB350DF3B6AADB
        Validity
            Not Before: Jun  2 01:58:16 2025 GMT
            Not After : Jun  1 02:03:16 2026 GMT
        Subject: CN=A763D8C9CCAF7CB20881B72F54B378E7A1932C49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:a9:0c:56:b9:42:23:88:73:12:a6:06:d0:19:
                    73:bf:74:c4:88:f0:c7:59:4d:68:34:c3:26:a0:e6:
                    ad:24:c4:7d:bd:fc:3e:e4:c7:50:2e:fc:7f:37:7f:
                    4e:87:83:0a:37:72:90:ef:e5:1e:26:4c:d3:da:7d:
                    6b:84:23:86:b5:33:d9:e8:3f:62:c6:03:70:7f:09:
                    25:25:8a:52:c4:91:cf:79:68:00:55:20:c6:e1:ff:
                    c8:95:da:c4:12:6a:97:7c:74:0b:11:6f:b4:10:10:
                    45:a6:a8:54:da:3e:01:71:95:a2:40:3c:f6:63:3b:
                    35:42:88:b0:02:02:17:2f:4e:09:d6:16:4a:b2:9e:
                    d4:80:94:58:17:c7:a1:1f:99:ba:2b:e9:1c:e5:01:
                    7f:94:11:8f:82:4d:8f:08:88:56:13:7b:28:95:b8:
                    79:61:7e:67:e2:ab:26:30:76:f0:c3:89:50:40:75:
                    47:bc:48:79:3a:38:9f:30:92:21:eb:3d:47:56:3f:
                    b1:ea:19:bb:f1:f3:50:26:6b:21:ec:7b:74:a1:f2:
                    08:88:9f:a4:0c:28:3b:4e:a2:b7:6d:47:40:c6:00:
                    6d:d3:94:4f:46:8f:81:37:6d:c1:df:90:df:0d:e9:
                    ed:2c:e7:65:7f:c7:70:94:69:50:7e:4e:5d:a8:74:
                    87:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:63:D8:C9:CC:AF:7C:B2:08:81:B7:2F:54:B3:78:E7:A1:93:2C:49
            X509v3 Authority Key Identifier:
                keyid:B2:BC:F7:26:4F:89:24:65:83:B3:84:F3:54:CB:35:0D:F3:B6:AA:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2BCF7264F89246583B384F354CB350DF3B6AADB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/3230322e34372e39302e302f32332d3234203d3e203436303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.47.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:2f:10:c9:21:80:85:27:54:3f:b6:a0:01:a8:fa:5f:43:52:
         b9:6f:6f:11:3a:49:ac:57:fa:95:f7:e0:0b:a0:0f:11:69:ac:
         2f:0b:77:b9:73:9c:66:c4:8f:74:79:3c:b8:f6:3c:b4:3d:af:
         94:a0:82:f7:e4:04:f1:b1:97:a4:7b:bd:be:78:f2:66:35:55:
         bf:8f:86:05:22:e0:95:b2:c5:f3:a5:bf:2b:ef:b5:9b:93:f6:
         67:45:4e:c3:8c:6d:6b:dd:2f:98:4c:37:f4:63:09:96:e5:e1:
         c4:55:57:89:ec:32:50:4d:d1:34:b2:55:f9:94:c6:28:c7:57:
         60:83:72:67:fd:15:da:01:06:21:d3:52:1d:34:69:a0:9a:51:
         75:14:bc:78:bd:ef:35:c9:3f:40:50:ab:95:cd:62:91:e5:d5:
         53:2d:7b:2d:22:27:03:36:89:8b:dd:b4:0f:a9:c4:5d:74:58:
         90:2d:d3:9e:64:7e:1e:21:68:83:a7:d4:2f:89:72:4a:3d:7b:
         ce:eb:a8:6e:d5:60:bd:35:5f:b5:c1:82:d8:1a:53:be:5f:6d:
         2d:56:b2:2c:80:57:94:e7:03:cc:25:c3:19:4b:e9:29:18:21:
         f2:f8:ea:9c:11:e1:95:d1:55:87:01:e9:da:1f:d8:25:20:97:
         d7:9f:7b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:34:58 2025 by rpki-client