Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3230332e3230372e35362e302f32322d3232203d3e203535363939.roa
File:                     3230332e3230372e35362e302f32322d3232203d3e203535363939.roa (raw, json)
Hash identifier:          pgKybEe1UDr8NMq8IDGfdGJ30yQQRx6GVXnTuNxgMuU=
Subject key identifier:   6B:85:B9:79:37:64:76:8A:47:8B:EB:47:92:61:8E:31:5E:82:AF:4E
Certificate issuer:       /CN=1976DD7D4FBDFBEB355F0B96690613959E106872
Certificate serial:       B16BB1CBF0B8F5F98BE8B23BEF8B342005D3D2
Authority key identifier: 19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3230332e3230372e35362e302f32322d3232203d3e203535363939.roa
Signing time:             Mon 02 Jun 2025 02:03:06 +0000
ROA not before:           Mon 02 Jun 2025 01:58:06 +0000
ROA not after:            Mon 01 Jun 2026 02:03:06 +0000
asID:                     55699
IP address blocks:        203.207.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl
                          rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 00:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            b1:6b:b1:cb:f0:b8:f5:f9:8b:e8:b2:3b:ef:8b:34:20:05:d3:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1976DD7D4FBDFBEB355F0B96690613959E106872
        Validity
            Not Before: Jun  2 01:58:06 2025 GMT
            Not After : Jun  1 02:03:06 2026 GMT
        Subject: CN=6B85B9793764768A478BEB4792618E315E82AF4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:60:b5:09:38:78:32:ac:54:d0:96:8b:30:c5:
                    a7:59:6e:91:aa:87:dc:70:a4:28:ac:bb:ea:71:4c:
                    5c:7e:b5:8f:08:0c:43:ae:9c:f8:f8:35:68:e0:86:
                    72:2b:95:77:11:70:fd:c6:f9:89:16:c1:82:cb:82:
                    22:3c:c6:ed:2d:0b:9b:b0:df:3c:21:ed:3d:54:f3:
                    b1:15:4d:dd:98:09:8f:fb:b1:51:5f:93:07:17:95:
                    45:c6:c4:91:be:06:e8:07:55:f1:a0:e8:82:cc:ea:
                    ed:f9:07:20:cc:1b:4f:48:f3:20:19:af:b7:63:d6:
                    7c:52:7a:e2:55:e4:6d:ea:f9:dc:80:f5:97:81:43:
                    85:22:ad:af:bf:9a:e1:f3:0d:74:7d:3c:78:55:40:
                    d3:d4:da:14:0b:a5:d6:d1:57:30:18:8d:53:06:08:
                    1a:4f:57:69:fc:27:d0:a0:99:e0:6e:29:74:16:15:
                    58:88:d8:b5:ab:5a:7e:55:3b:65:93:b6:0a:b5:29:
                    79:56:1a:f0:38:25:3c:78:28:0d:87:95:46:e9:0c:
                    1d:95:a1:7e:77:96:c5:ec:6f:67:ef:ef:8c:54:2b:
                    9c:72:e5:f3:85:01:bb:bc:5b:3d:48:ba:68:ff:6c:
                    14:25:b4:a2:0c:13:6c:a9:13:13:7c:a7:fb:0f:4f:
                    b1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:85:B9:79:37:64:76:8A:47:8B:EB:47:92:61:8E:31:5E:82:AF:4E
            X509v3 Authority Key Identifier:
                keyid:19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3230332e3230372e35362e302f32322d3232203d3e203535363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.207.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:ac:35:98:73:7c:ad:12:aa:fc:da:22:f4:09:9d:69:3e:ff:
         66:ee:bc:85:c6:12:f6:da:6a:80:88:ec:c4:99:11:a3:d6:b7:
         ba:0b:dd:c6:f2:c9:18:38:74:27:b6:4e:6b:fd:c4:e3:bd:0a:
         1c:21:4c:42:14:d3:40:9e:9f:93:ba:12:78:ad:51:9f:d4:6f:
         7e:ae:fd:a4:00:37:81:2d:7f:9a:c9:aa:df:f3:a0:9f:a7:27:
         17:80:bb:f0:5f:a4:6a:29:ae:ff:38:6c:1b:6a:c6:75:0f:75:
         34:57:51:a4:4c:f6:a2:d9:0c:88:46:fb:41:1d:2c:65:13:6c:
         3f:13:71:d7:09:e3:5e:42:a4:3b:72:72:28:a9:ab:10:ae:8f:
         6b:5c:b3:25:57:a4:e9:ef:81:ae:38:18:69:45:9c:dc:8f:e8:
         49:a5:c5:8f:e7:0c:41:b9:c1:bf:8b:8e:a2:c4:52:4a:df:c3:
         bf:9a:5b:d7:f4:53:99:16:6b:62:0b:f0:55:0d:f9:01:98:7d:
         c3:a6:53:7f:a1:21:56:82:58:85:dc:18:ac:50:c2:e2:05:b7:
         9e:cd:97:94:12:80:8e:5e:25:19:51:b3:0c:ba:b1:8f:90:b5:
         23:79:f9:58:a2:5a:88:34:98:f6:f7:48:39:18:5f:16:4e:91:
         94:61:e8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:57:18 2025 by rpki-client