Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35352e302f32342d3234203d3e203435333132.roa
File:                     3230322e38312e35352e302f32342d3234203d3e203435333132.roa (raw, json)
Hash identifier:          4LVJmjObJnJKAgv9eynOi92N2rUzgOHw6n+oM801DK4=
Subject key identifier:   5D:DC:EF:6A:45:FD:54:6F:70:9A:6E:20:59:F9:8B:8F:3D:1C:EB:88
Certificate issuer:       /CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
Certificate serial:       50CC5783C19FE5B8BF125A24E233096E259901DF
Authority key identifier: 15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35352e302f32342d3234203d3e203435333132.roa
Signing time:             Tue 17 Dec 2024 08:32:23 +0000
ROA not before:           Tue 17 Dec 2024 08:27:23 +0000
ROA not after:            Tue 16 Dec 2025 08:32:23 +0000
asID:                     45312
IP address blocks:        202.81.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl
                          rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 22:45:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:cc:57:83:c1:9f:e5:b8:bf:12:5a:24:e2:33:09:6e:25:99:01:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
        Validity
            Not Before: Dec 17 08:27:23 2024 GMT
            Not After : Dec 16 08:32:23 2025 GMT
        Subject: CN=5DDCEF6A45FD546F709A6E2059F98B8F3D1CEB88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:69:a9:96:fd:ca:d1:50:77:d2:15:d6:b0:83:
                    86:90:11:b2:31:58:cc:64:db:53:f8:e6:5e:9d:87:
                    a1:f1:df:f0:bc:98:11:ab:b6:b7:d4:73:d2:06:30:
                    83:14:e7:08:93:b2:44:1b:0c:12:c8:45:46:28:89:
                    5b:fc:d9:c9:eb:28:51:50:5a:05:a9:9d:f4:92:4e:
                    4b:a9:bc:92:36:b3:0d:f4:f1:19:d9:58:ab:bf:f7:
                    29:f4:59:07:04:1a:12:72:e8:4a:d4:1a:3d:32:c9:
                    dd:09:ee:47:8c:7d:db:45:f9:49:17:ed:44:30:ab:
                    db:a4:5c:c3:38:b8:13:72:ce:4d:12:3a:9b:60:d8:
                    55:13:17:bd:bb:4f:c5:f9:de:5a:13:db:08:94:23:
                    5a:55:09:fe:85:15:cf:04:19:7c:6f:02:11:4f:c4:
                    26:31:69:92:86:72:12:66:b7:56:6c:7e:ff:3c:a2:
                    06:ab:c0:3f:3d:d4:78:32:e2:63:1d:90:c2:d3:94:
                    0b:97:f8:1d:6f:b8:98:f5:14:5a:15:0f:d7:ef:97:
                    71:f4:94:13:1d:38:47:6a:27:02:d6:9b:99:8a:4c:
                    1a:b0:42:5f:d6:b4:db:ec:00:6a:e0:18:28:81:6d:
                    28:54:a8:82:84:4d:87:bf:7c:c3:85:e0:37:03:ee:
                    52:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:DC:EF:6A:45:FD:54:6F:70:9A:6E:20:59:F9:8B:8F:3D:1C:EB:88
            X509v3 Authority Key Identifier:
                keyid:15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35352e302f32342d3234203d3e203435333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.81.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:04:af:65:97:cc:9b:6f:1a:67:39:63:8d:93:2f:2d:38:3c:
         fa:75:92:4f:bc:9e:13:cf:51:6e:a8:fc:92:68:7a:8c:b0:b6:
         f3:07:16:23:1d:1c:4d:62:05:a7:da:6e:e6:e2:e0:b3:e8:2a:
         e6:07:55:15:8c:87:3e:84:25:1c:31:33:7f:d1:4b:c2:d9:f8:
         4d:7e:32:f6:5d:f0:c9:b2:0a:6f:0a:21:b7:47:4f:0b:1d:df:
         ba:14:c7:05:17:db:28:a5:dd:40:e8:d7:c2:bc:91:5d:2c:6e:
         f3:1f:cd:b3:2b:3f:e1:b0:1f:e5:98:7d:3b:4d:97:b7:6e:77:
         00:c9:f1:09:fe:4f:20:11:b8:9c:2b:d4:33:3a:15:47:35:e0:
         76:fb:ec:fd:4c:b0:10:41:1d:5b:b5:27:5d:1a:a5:11:9b:3f:
         d7:a1:5c:2f:e3:6a:08:89:2d:eb:e8:01:3a:89:d6:a7:d8:85:
         26:48:4c:a8:ac:d0:98:24:11:1b:84:fa:e1:83:3b:71:4a:f9:
         fd:ae:cd:4f:eb:6d:28:ad:3a:73:d0:b8:07:20:56:62:34:54:
         ad:00:3c:6f:03:0d:37:df:f5:3c:91:d9:af:d9:72:57:79:94:
         2c:22:ba:82:7d:6e:85:91:ca:d5:f0:42:6a:8b:5e:75:9b:c2:
         22:10:a8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:05:56 2025 by rpki-client