Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35342e302f32342d3234203d3e203435333132.roa
File:                     3230322e38312e35342e302f32342d3234203d3e203435333132.roa (raw, json)
Hash identifier:          EnEsjagVtiwiZ0D39b7rmKktZN2dw/LhLdbA8IiiM30=
Subject key identifier:   67:30:93:FD:68:02:6F:BE:49:20:0A:72:02:13:B6:D4:23:C3:4E:7D
Certificate issuer:       /CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
Certificate serial:       D1CFAD9A79EFDE39F721A37BF3DD263E569523
Authority key identifier: 15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35342e302f32342d3234203d3e203435333132.roa
Signing time:             Tue 17 Dec 2024 08:30:27 +0000
ROA not before:           Tue 17 Dec 2024 08:25:27 +0000
ROA not after:            Tue 16 Dec 2025 08:30:27 +0000
asID:                     45312
IP address blocks:        202.81.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl
                          rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 22:45:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d1:cf:ad:9a:79:ef:de:39:f7:21:a3:7b:f3:dd:26:3e:56:95:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
        Validity
            Not Before: Dec 17 08:25:27 2024 GMT
            Not After : Dec 16 08:30:27 2025 GMT
        Subject: CN=673093FD68026FBE49200A720213B6D423C34E7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:32:e4:fd:ac:20:e4:e0:ff:3e:46:07:99:43:
                    da:d0:97:e4:67:48:a4:7d:4c:50:71:08:58:1d:8b:
                    87:e2:c5:ae:5d:57:c4:56:0b:7d:8b:8e:7b:63:3c:
                    00:e7:8a:94:49:55:a7:f7:a8:1b:c9:c9:f0:b4:f1:
                    16:8b:1b:1e:e8:65:76:a0:95:eb:95:bb:2e:7d:45:
                    45:9f:59:6a:6a:93:71:8b:7c:a0:4b:e9:63:56:39:
                    c2:99:44:ab:79:19:4e:6a:58:a3:73:b9:9f:5c:b5:
                    aa:cc:43:96:8a:0f:aa:7e:e2:7d:c5:49:24:11:6c:
                    59:4b:39:58:ce:6a:01:0c:e5:8f:a7:84:29:d7:34:
                    1b:28:be:26:39:2a:89:85:1c:58:2f:18:89:9d:60:
                    4a:71:d4:f6:8d:c6:6b:39:a4:92:c1:ce:51:31:9a:
                    df:b9:75:43:ea:53:7d:43:e2:f5:b1:20:92:d6:dd:
                    4b:20:46:08:2a:10:b3:5a:28:80:ef:b0:b8:35:59:
                    db:e7:cc:04:1e:45:25:31:fc:df:87:42:63:1e:4e:
                    0d:b4:e7:08:f3:ec:e9:f4:de:63:cf:f3:ca:61:9e:
                    7c:11:a0:dc:92:02:fe:58:57:71:cb:8b:cd:ad:44:
                    c6:b2:b9:06:61:6a:dd:57:62:4e:5b:97:d7:ec:32:
                    ac:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:30:93:FD:68:02:6F:BE:49:20:0A:72:02:13:B6:D4:23:C3:4E:7D
            X509v3 Authority Key Identifier:
                keyid:15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35342e302f32342d3234203d3e203435333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.81.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:bd:4f:f1:f5:18:ae:4d:c8:d4:fb:20:c9:70:af:bd:37:10:
         1c:e0:55:2b:14:5f:6e:c1:a1:72:62:08:1c:1a:6f:a8:07:e9:
         7f:a7:df:2e:e6:a3:79:d3:66:20:32:ed:4e:39:7c:e5:43:5d:
         22:d7:c3:d3:45:44:1d:9e:79:6e:a6:a1:1b:f0:ac:d4:ef:df:
         15:06:a9:62:f4:87:9f:a4:92:32:36:94:52:df:cc:64:c5:eb:
         1c:a7:5d:20:71:fc:5d:d4:45:6c:76:02:fe:ac:d6:34:3e:0a:
         5f:f0:33:87:4f:98:39:d0:e2:71:a6:17:80:c7:9a:3b:96:73:
         44:6c:7c:a0:d1:91:10:13:db:bd:82:74:0c:53:ac:fc:b3:28:
         fb:95:36:2c:46:46:0f:84:51:49:61:2f:22:84:e0:37:7b:44:
         c7:0a:e1:8e:ce:73:a4:b9:cc:28:39:dd:6d:e9:73:b5:2d:68:
         53:3b:a6:6c:db:f5:92:96:c8:d3:66:f2:6b:96:6a:bc:4e:2e:
         eb:34:26:2b:47:69:14:d1:1d:71:d4:26:85:c3:67:ee:68:0b:
         09:9f:e0:84:1c:be:bd:ae:4a:a3:8b:ea:da:8b:0d:4b:62:89:
         5d:a9:00:85:f8:c4:8f:ba:77:d9:18:1e:80:36:28:b5:72:40:
         2d:80:5d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:03:22 2025 by rpki-client