Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e36322e302f32342d3234203d3e203435333132.roa
File:                     3230322e38312e36322e302f32342d3234203d3e203435333132.roa (raw, json)
Hash identifier:          RZUkLU6LBMt9Y+svCpdhTrmyhJt4g2G1+5jcJkjA3hE=
Subject key identifier:   AD:AB:DC:15:AE:E4:BB:1E:76:1F:6F:37:BC:12:7D:B1:D6:D7:38:AC
Certificate issuer:       /CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
Certificate serial:       4725F4AA721C41950579C5C6095B3036B6EEDE8F
Authority key identifier: 15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e36322e302f32342d3234203d3e203435333132.roa
Signing time:             Tue 17 Dec 2024 05:18:08 +0000
ROA not before:           Tue 17 Dec 2024 05:13:08 +0000
ROA not after:            Tue 16 Dec 2025 05:18:08 +0000
asID:                     45312
IP address blocks:        202.81.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl
                          rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 22:45:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:25:f4:aa:72:1c:41:95:05:79:c5:c6:09:5b:30:36:b6:ee:de:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
        Validity
            Not Before: Dec 17 05:13:08 2024 GMT
            Not After : Dec 16 05:18:08 2025 GMT
        Subject: CN=ADABDC15AEE4BB1E761F6F37BC127DB1D6D738AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:57:f6:9d:2e:aa:e5:ca:92:4d:43:25:1a:c9:
                    4a:63:3a:88:d1:c9:bc:a9:98:6f:3d:f7:5d:2a:22:
                    bc:f7:f9:4e:d8:24:ce:8e:61:b2:51:38:16:72:3a:
                    e8:b1:3e:3e:5a:cd:8e:f6:9a:06:99:67:2a:f6:82:
                    f0:37:5c:bb:bb:11:7a:8c:66:ba:9f:ec:9e:d8:0d:
                    d3:b6:48:7c:2b:d0:75:e5:a6:c0:dc:9f:0e:5e:7a:
                    04:fe:ad:c2:55:a3:e6:9f:24:4d:e1:eb:25:b1:be:
                    73:08:5a:20:35:45:83:76:c9:2e:c3:ea:21:84:1b:
                    ce:24:c6:59:d8:6b:b5:73:05:e0:d1:25:af:0b:af:
                    a6:77:47:bd:7b:f0:c1:72:2a:9b:2b:d7:ff:4c:48:
                    9f:19:1b:5f:af:ca:03:dd:13:96:0a:5e:52:02:3a:
                    c8:f9:68:62:23:9e:5b:a3:f5:37:f8:f5:3f:5c:1f:
                    80:0a:aa:05:9c:54:ea:e2:bf:59:52:f7:11:5b:bc:
                    ec:64:fb:cb:f4:5a:fb:8a:38:e7:29:7c:74:ff:cf:
                    8d:21:02:27:bf:47:a8:97:5c:64:fd:91:ab:21:68:
                    6b:fa:c2:21:90:92:fc:e2:d6:5d:1c:53:b3:2a:3f:
                    de:b5:4a:94:c8:58:20:cf:c2:69:fa:11:86:60:e9:
                    95:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:AB:DC:15:AE:E4:BB:1E:76:1F:6F:37:BC:12:7D:B1:D6:D7:38:AC
            X509v3 Authority Key Identifier:
                keyid:15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e36322e302f32342d3234203d3e203435333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.81.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:37:95:27:6b:fe:9c:b6:4f:d1:44:20:8d:34:11:c9:54:fb:
         a7:c8:2a:4c:8e:3d:34:5a:ed:e5:79:ad:24:31:ea:f1:67:43:
         b0:f7:d7:cf:db:0f:ff:5f:bc:b5:ae:73:61:4d:b1:92:f4:ff:
         47:09:1b:99:9e:f4:b0:d3:1b:c9:53:3b:16:f5:3d:fa:b6:e8:
         ee:90:50:5b:4c:0e:85:bb:61:26:d3:17:7d:54:bf:34:3a:c9:
         13:3b:8c:ba:91:3d:11:4b:7f:f6:f8:de:be:af:9f:f3:3b:84:
         72:0f:47:ef:fa:96:99:66:59:48:06:f0:c4:6d:c6:84:72:22:
         c5:72:b1:d0:74:5f:6f:73:be:bd:b5:07:1d:9b:97:07:62:19:
         9c:df:8e:98:61:11:a5:c7:ba:e2:f4:ff:eb:be:7b:6e:e5:f9:
         d8:38:c1:4c:9f:d4:1f:14:af:2f:28:30:f6:45:0d:02:12:d0:
         5a:47:b5:cd:25:be:18:84:39:66:6d:ac:70:ac:fe:d1:9c:5c:
         0e:07:c8:a2:46:fc:c7:59:ba:0c:69:6d:a5:06:64:2f:fc:89:
         15:a7:31:9a:1d:e4:ef:de:5c:be:fc:e1:d0:43:49:a5:1a:76:
         b5:ca:c9:75:32:ad:dd:89:b3:75:b8:02:91:2f:32:f9:42:9c:
         90:17:04:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:05:53 2025 by rpki-client