Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35332e302f32342d3234203d3e203435333132.roa
File:                     3230322e38312e35332e302f32342d3234203d3e203435333132.roa (raw, json)
Hash identifier:          WzGM4heJSmsbOW9KNHZi2BGFE4WXHQUEdZcFcAbTMlY=
Subject key identifier:   FD:04:41:80:61:6D:93:8E:8F:63:B4:8B:45:82:8E:43:68:24:01:C3
Certificate issuer:       /CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
Certificate serial:       027EF2A95401CCB10EAE58C74513FDC5AA6749AE
Authority key identifier: 15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35332e302f32342d3234203d3e203435333132.roa
Signing time:             Tue 17 Dec 2024 05:16:40 +0000
ROA not before:           Tue 17 Dec 2024 05:11:40 +0000
ROA not after:            Tue 16 Dec 2025 05:16:40 +0000
asID:                     45312
IP address blocks:        202.81.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl
                          rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 22:45:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:7e:f2:a9:54:01:cc:b1:0e:ae:58:c7:45:13:fd:c5:aa:67:49:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
        Validity
            Not Before: Dec 17 05:11:40 2024 GMT
            Not After : Dec 16 05:16:40 2025 GMT
        Subject: CN=FD044180616D938E8F63B48B45828E43682401C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:62:26:6f:41:84:fb:b6:52:68:c4:55:d9:7a:
                    a3:d1:04:79:e2:a4:7a:34:42:3a:3f:71:48:b0:da:
                    1e:b2:da:36:13:f9:6f:c7:e9:ca:df:4a:ce:58:81:
                    07:07:a3:0e:5a:ec:c3:fb:f0:46:b2:97:80:43:39:
                    eb:8a:1b:09:07:a8:e3:7b:a6:c7:37:df:37:66:f3:
                    8c:51:ce:55:6d:8a:24:e2:d1:bb:41:12:56:2f:5e:
                    fc:73:a2:d8:06:a9:3b:87:be:65:80:9e:a3:10:9f:
                    ca:d8:01:5e:6e:50:04:54:75:10:9d:64:f8:59:2c:
                    ad:b9:6d:1a:89:71:73:08:45:a4:5e:d1:5a:b5:5d:
                    58:55:cb:6a:88:bd:67:f6:9a:86:f8:e3:83:9d:1a:
                    7a:84:ac:a5:8b:b8:66:e9:d0:94:c9:ed:43:68:df:
                    a8:2b:bf:64:6a:41:a5:3e:d2:e2:e4:3f:e1:28:ad:
                    03:8b:3d:6d:a0:a5:90:30:ad:92:aa:3f:e8:d1:28:
                    2f:f4:48:06:ab:71:bc:e6:89:08:fd:20:4e:e5:2d:
                    80:c5:cb:18:e1:fa:a2:12:c4:92:2f:f6:4b:2f:e1:
                    6c:4f:a2:95:68:21:16:a5:d3:55:fa:37:bd:59:ac:
                    a4:ef:5c:6f:97:dc:6c:60:50:04:5e:b7:ae:b6:7e:
                    37:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:04:41:80:61:6D:93:8E:8F:63:B4:8B:45:82:8E:43:68:24:01:C3
            X509v3 Authority Key Identifier:
                keyid:15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35332e302f32342d3234203d3e203435333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.81.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:3b:54:ef:5e:0b:d9:22:04:19:14:81:af:b3:55:2d:da:12:
         d7:54:4b:f8:68:e9:20:7e:03:d5:3b:be:a3:6f:36:c2:90:d9:
         a6:57:42:2d:22:41:71:4e:0c:55:00:c3:74:63:9a:93:43:36:
         b3:19:d4:aa:16:13:24:53:4c:91:4e:49:ef:7d:d3:ce:dd:9b:
         4d:b0:97:26:82:83:39:9c:40:6d:59:09:e9:5c:ba:32:e8:13:
         47:3a:e8:fc:42:db:3b:85:68:85:4c:ff:76:95:4d:b4:d0:e3:
         91:62:97:72:c3:2f:bf:a9:8c:b3:2e:36:e9:3b:7f:62:d3:cd:
         12:d1:8d:9a:3f:ee:7b:6a:c0:42:36:56:f2:5e:b8:a5:ce:46:
         fd:bb:7e:c8:cb:2e:8f:ec:60:29:fd:f7:02:dc:98:85:2c:07:
         d8:e8:1e:e7:47:54:34:2d:35:8d:fe:2f:29:23:1c:ce:a5:a8:
         2a:2e:2f:ab:0d:17:c2:d6:89:ea:5c:80:77:f9:1d:55:d6:36:
         2e:cc:e4:32:8a:2c:52:3e:6d:6f:a2:96:90:b6:02:d6:16:c8:
         f1:e7:a2:9b:57:8c:70:2c:e6:ff:3f:d7:09:4e:f8:4d:00:c3:
         29:ad:4b:f2:56:8b:48:6d:10:87:c7:2c:d0:ed:25:62:e6:96:
         51:80:41:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:05:55 2025 by rpki-client