Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e36302e302f32342d3234203d3e203435333132.roa
File:                     3230322e38312e36302e302f32342d3234203d3e203435333132.roa (raw, json)
Hash identifier:          +YiXboX8IcAAou94cDo+USSMon0gcEwMRI5Fgbwfy7w=
Subject key identifier:   2C:C2:BF:0B:1C:56:27:BF:E7:F5:D7:83:AE:C2:DF:49:6B:E7:65:19
Certificate issuer:       /CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
Certificate serial:       0BF18A3A2DD84B22997DD92AF373C4E70A1A4A23
Authority key identifier: 15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e36302e302f32342d3234203d3e203435333132.roa
Signing time:             Tue 17 Dec 2024 08:33:59 +0000
ROA not before:           Tue 17 Dec 2024 08:28:59 +0000
ROA not after:            Tue 16 Dec 2025 08:33:59 +0000
asID:                     45312
IP address blocks:        202.81.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl
                          rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 22:45:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:f1:8a:3a:2d:d8:4b:22:99:7d:d9:2a:f3:73:c4:e7:0a:1a:4a:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
        Validity
            Not Before: Dec 17 08:28:59 2024 GMT
            Not After : Dec 16 08:33:59 2025 GMT
        Subject: CN=2CC2BF0B1C5627BFE7F5D783AEC2DF496BE76519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:85:f7:29:9e:17:2f:0d:a0:26:8c:56:ab:fa:
                    24:c2:63:56:77:28:6f:e6:1b:a8:0a:79:9b:46:85:
                    db:6b:4e:38:ad:56:b6:7d:19:96:28:16:53:a2:db:
                    f4:ab:ea:73:56:76:d6:c5:79:1a:eb:c6:35:d4:50:
                    eb:cb:98:86:98:9f:b9:d3:c8:36:69:fc:5d:f4:d4:
                    3e:23:78:78:bd:55:22:47:91:42:95:64:ba:e3:1c:
                    bb:43:ff:a7:dc:e1:82:98:9b:79:8a:30:7c:44:34:
                    3c:1c:41:75:16:5b:1c:57:6f:e4:60:b2:17:1d:e3:
                    ab:00:47:83:b6:89:35:0a:1b:d3:ad:0e:58:26:7e:
                    a5:db:1c:bd:c3:8a:b6:ec:d3:29:56:e5:b3:70:cc:
                    63:f3:17:f2:fc:50:55:67:05:91:c8:e3:64:62:87:
                    33:5f:e1:ac:5d:3e:44:fc:fd:82:25:e9:a4:3f:a2:
                    88:99:8c:06:c1:81:80:2a:5d:25:97:ff:bf:12:9b:
                    2b:d3:32:ad:08:9f:66:7e:7a:de:e5:f4:9a:03:58:
                    88:6e:b4:e4:c2:96:da:32:fc:ec:b5:18:b8:49:c5:
                    50:e0:66:58:41:82:05:03:b2:74:30:54:c4:81:eb:
                    ee:37:be:b0:f9:96:ae:b6:97:de:e4:93:80:6d:8f:
                    0f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C2:BF:0B:1C:56:27:BF:E7:F5:D7:83:AE:C2:DF:49:6B:E7:65:19
            X509v3 Authority Key Identifier:
                keyid:15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e36302e302f32342d3234203d3e203435333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.81.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:25:b7:1d:79:77:40:1d:11:58:13:59:f0:34:e6:c2:f7:d4:
         15:2a:e1:f7:73:c5:bd:c1:1f:eb:72:fb:48:ae:9c:bf:2a:2e:
         fa:f2:fe:44:b4:2a:0a:a1:30:ad:93:08:c6:96:3e:12:9e:9f:
         38:56:c4:a5:aa:49:ef:65:d7:be:eb:e5:95:9d:aa:de:9c:13:
         cd:ed:70:c4:e9:7b:3b:4d:02:a6:d0:db:9e:d4:22:d2:aa:d0:
         62:b9:ef:70:5d:17:85:c1:a8:05:a4:30:64:97:5c:96:7a:19:
         68:65:09:c1:54:e3:ad:29:03:b5:5e:7d:e6:72:9d:70:84:4c:
         41:0d:8f:64:3d:1f:8e:9f:8c:07:a3:e6:da:96:a3:80:21:98:
         52:16:63:88:4c:6a:6d:94:63:5f:a2:64:0a:43:be:5f:92:3e:
         44:f5:d8:a6:56:76:e9:5b:7e:e0:fe:91:6e:0a:81:f7:bb:96:
         a3:0d:68:78:e6:c9:65:54:eb:f6:85:ac:ba:9b:53:1d:43:64:
         55:07:ef:f3:a8:13:3d:35:48:47:d8:c1:d1:cc:a8:0c:79:1a:
         36:82:24:cb:98:9d:a6:9b:75:2c:2b:9c:f4:e0:39:b8:54:54:
         39:7a:df:03:0e:cb:cd:ed:df:19:eb:ff:02:4e:6f:11:ae:24:
         16:bb:22:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:05:57 2025 by rpki-client