Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35372e302f32342d3234203d3e203435333132.roa
File:                     3230322e38312e35372e302f32342d3234203d3e203435333132.roa (raw, json)
Hash identifier:          /Pz+lvmjrreEoN5O3O3l4iYKH60T1aclG96qf/GdciY=
Subject key identifier:   C2:1B:8E:20:63:A4:04:AF:0E:9D:15:17:09:8E:CF:15:62:EC:3B:FB
Certificate issuer:       /CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
Certificate serial:       28736486A9B14A1E2196478E3DAE03FF0B5E55AD
Authority key identifier: 15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35372e302f32342d3234203d3e203435333132.roa
Signing time:             Tue 17 Dec 2024 08:33:14 +0000
ROA not before:           Tue 17 Dec 2024 08:28:14 +0000
ROA not after:            Tue 16 Dec 2025 08:33:14 +0000
asID:                     45312
IP address blocks:        202.81.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl
                          rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 22:45:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:73:64:86:a9:b1:4a:1e:21:96:47:8e:3d:ae:03:ff:0b:5e:55:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
        Validity
            Not Before: Dec 17 08:28:14 2024 GMT
            Not After : Dec 16 08:33:14 2025 GMT
        Subject: CN=C21B8E2063A404AF0E9D1517098ECF1562EC3BFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:93:9c:7b:c3:92:17:03:1a:6d:a1:2e:89:1e:
                    bf:cf:5e:e1:35:af:fa:28:c4:9a:8a:63:52:0f:b2:
                    ed:4c:31:ef:a8:d6:cf:cf:8a:90:b1:c1:3d:98:6a:
                    91:59:3d:74:b9:92:8a:84:22:6c:f2:72:38:0a:c1:
                    48:f7:88:4c:0c:95:09:97:ca:9b:89:7b:bf:1c:cd:
                    07:5f:29:ce:9c:99:ae:15:4b:e1:50:9f:34:93:80:
                    06:24:44:93:6e:a4:c6:d9:34:8d:ba:03:ea:86:82:
                    38:0f:b0:36:0e:89:d4:6a:86:38:ab:fd:f0:10:96:
                    ed:72:7a:3c:10:d9:dd:f1:fb:0f:f1:7f:10:00:53:
                    40:46:20:fb:d8:6c:a4:ca:d2:d2:48:b0:16:67:74:
                    fb:5a:51:dc:ee:4a:1a:0a:80:d9:03:04:f7:77:e7:
                    f4:39:71:8e:7f:cf:bc:33:20:3c:ce:8d:bf:59:ae:
                    95:13:32:47:8d:92:13:60:bc:23:41:97:05:f6:89:
                    92:d0:5f:d8:15:68:b4:2f:12:14:61:0d:b0:f1:97:
                    e4:c6:ca:e2:80:d9:73:6b:00:77:09:d1:a7:92:18:
                    cb:31:9c:9f:7e:ce:b2:92:2f:df:fd:ec:b8:d1:5d:
                    68:04:61:97:eb:b8:e4:35:d6:46:55:32:b0:f0:59:
                    03:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:1B:8E:20:63:A4:04:AF:0E:9D:15:17:09:8E:CF:15:62:EC:3B:FB
            X509v3 Authority Key Identifier:
                keyid:15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35372e302f32342d3234203d3e203435333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.81.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:92:93:25:72:1b:76:ad:66:c0:36:0e:5d:c0:5e:e1:d7:06:
         3e:c9:4c:a4:38:80:07:1f:e5:d7:be:01:08:27:d6:5b:66:04:
         0e:25:c7:8f:5d:82:3b:9e:ba:d7:7e:31:cc:0a:67:fe:b2:38:
         84:c6:bf:04:a6:a8:c3:79:f7:0f:e2:42:fb:c2:44:42:ea:b9:
         cc:ca:92:62:5f:26:2e:f5:dd:12:10:61:3d:a2:b9:ed:0b:00:
         3a:e0:37:c6:b5:2e:8e:b2:3f:40:7d:1e:90:0d:8f:86:bf:48:
         4d:c3:08:28:85:bc:e5:91:82:92:8d:a5:41:03:de:66:52:3d:
         9a:ef:97:32:ae:c4:ca:a4:fb:72:5d:42:b1:58:69:cb:5d:1c:
         8c:24:7b:8f:a0:95:37:32:e1:79:7b:88:3d:d7:3f:04:e9:76:
         7b:cd:9f:d0:25:ae:65:59:11:a6:1b:21:87:07:6a:cc:46:86:
         87:ea:17:49:1d:79:49:ba:0e:31:cf:df:de:d6:3d:ff:c7:7a:
         9f:a5:a2:26:a3:62:dd:1c:df:d4:f5:ce:ca:a9:1e:1a:3d:11:
         32:75:07:97:8e:fe:0c:92:26:98:a4:57:b0:ca:84:86:07:ea:
         6d:53:ca:8e:db:18:57:0e:09:2e:ba:4c:9d:58:53:50:26:d8:
         bf:9f:59:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:05:57 2025 by rpki-client