Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3230332e3134382e38342e302f32342d3234203d3e203435323839.roa
File:                     3230332e3134382e38342e302f32342d3234203d3e203435323839.roa (raw, json)
Hash identifier:          WDUUBVToiU1iccjikjgrMyjUMVvcr2yL6nTb6EMxpMs=
Subject key identifier:   7A:D7:BF:CF:C0:F2:1A:E7:06:10:A3:75:CD:AC:62:48:16:51:E7:D9
Certificate issuer:       /CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61
Certificate serial:       64E3A9888821A8FBCE1EAF4AE18EBB77B3689CB4
Authority key identifier: 99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3230332e3134382e38342e302f32342d3234203d3e203435323839.roa
Signing time:             Sat 15 Feb 2025 08:00:02 +0000
ROA not before:           Sat 15 Feb 2025 07:55:02 +0000
ROA not after:            Sat 14 Feb 2026 08:00:02 +0000
asID:                     45289
IP address blocks:        203.148.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl
                          rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 02:13:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:e3:a9:88:88:21:a8:fb:ce:1e:af:4a:e1:8e:bb:77:b3:68:9c:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61
        Validity
            Not Before: Feb 15 07:55:02 2025 GMT
            Not After : Feb 14 08:00:02 2026 GMT
        Subject: CN=7AD7BFCFC0F21AE70610A375CDAC62481651E7D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fc:13:d4:cc:28:46:1b:64:ef:ec:30:5e:bc:
                    89:0f:00:7d:63:5a:bc:7c:93:f1:09:3a:63:af:ce:
                    3a:7a:ce:18:f1:31:ea:d2:52:c9:cc:ee:ba:9a:9a:
                    32:cd:d9:59:d0:84:59:e7:d6:18:54:24:0a:82:d8:
                    99:f5:03:a3:89:72:8c:35:21:e3:59:7f:78:b0:75:
                    82:89:84:0f:bb:16:6c:93:02:26:72:d1:ee:5a:d0:
                    4d:ad:88:86:db:e6:d4:28:8c:98:2e:b4:a3:b0:62:
                    78:59:d3:a1:63:83:2c:ec:98:8a:66:4d:2b:bc:bd:
                    22:cf:46:ac:90:61:80:52:75:c5:d6:41:91:56:9f:
                    28:0b:a3:c4:f7:51:52:fa:45:d7:93:85:64:3f:99:
                    fd:12:d3:82:bd:a5:7b:47:35:8d:d9:73:a4:09:33:
                    d2:1e:9e:f8:92:31:48:61:cd:93:18:1a:10:58:6b:
                    22:27:2b:df:5d:c0:b9:fd:f3:52:47:3f:04:9f:cc:
                    1b:3f:1e:b8:e2:9b:fa:1c:36:13:c4:16:0c:4b:a4:
                    97:b1:e8:db:8a:23:cc:aa:80:66:1b:bc:84:99:f5:
                    e2:20:15:e5:30:03:b4:c4:85:c9:cf:29:54:74:0e:
                    e1:71:fd:d3:be:f7:e6:ab:10:ce:4f:26:f1:0e:75:
                    4d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D7:BF:CF:C0:F2:1A:E7:06:10:A3:75:CD:AC:62:48:16:51:E7:D9
            X509v3 Authority Key Identifier:
                keyid:99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3230332e3134382e38342e302f32342d3234203d3e203435323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.148.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:07:5f:53:51:1e:b3:4c:00:30:5a:e9:08:84:ec:f6:01:fa:
         ee:7a:11:1a:96:e7:94:73:da:46:d8:ba:9d:2e:d2:86:ef:b8:
         fc:80:be:35:a5:fd:14:7a:a7:55:da:a2:87:82:e4:27:f8:09:
         95:b2:0f:18:8c:a9:b7:a4:83:07:9b:47:6f:c1:36:bf:c9:df:
         c6:99:22:5f:3d:ee:87:2a:1a:5f:3a:d1:33:fe:77:07:24:be:
         e1:c4:3b:5a:c0:a5:3f:d9:0d:31:23:1c:ba:fa:7b:10:4a:10:
         cd:08:4c:0a:37:79:f8:d9:c7:20:d4:a5:2f:6b:0c:80:82:6e:
         a8:6c:73:60:4d:07:77:44:ab:1a:2e:f2:21:d1:9a:37:6d:3f:
         bd:82:2b:70:bf:3e:10:28:7b:ef:bb:cc:8b:14:ad:a9:3f:08:
         5c:82:a9:00:18:3e:09:10:8b:a1:bc:60:61:6e:4e:87:a6:19:
         ff:78:fe:e8:6f:82:f8:c5:28:de:55:26:c5:cd:46:dd:9f:86:
         e0:5e:12:3a:38:7d:52:40:ea:aa:5a:dd:d5:c7:9c:25:02:b2:
         6e:cb:08:77:91:8e:ab:98:6f:9b:1f:30:36:12:a2:5f:e0:72:
         f6:fe:fa:7d:6f:58:f2:14:71:96:c4:d2:82:21:ef:68:42:91:
         02:10:9c:69
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUZOOpiIghqPvOHq9K4Y67d7NonLQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTk3M0U1RDZGN0Y2NURDRjAxNUU5REFGQ0VGMzk0RjUx
MkU0RkQ2MTAeFw0yNTAyMTUwNzU1MDJaFw0yNjAyMTQwODAwMDJaMDMxMTAvBgNV
BAMTKDdBRDdCRkNGQzBGMjFBRTcwNjEwQTM3NUNEQUM2MjQ4MTY1MUU3RDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC//BPUzChGG2Tv7DBevIkPAH1j
Wrx8k/EJOmOvzjp6zhjxMerSUsnM7rqamjLN2VnQhFnn1hhUJAqC2Jn1A6OJcow1
IeNZf3iwdYKJhA+7FmyTAiZy0e5a0E2tiIbb5tQojJgutKOwYnhZ06FjgyzsmIpm
TSu8vSLPRqyQYYBSdcXWQZFWnygLo8T3UVL6RdeThWQ/mf0S04K9pXtHNY3Zc6QJ
M9IenviSMUhhzZMYGhBYayInK99dwLn981JHPwSfzBs/Hrjim/ocNhPEFgxLpJex
6NuKI8yqgGYbvISZ9eIgFeUwA7TEhcnPKVR0DuFx/dO+9+arEM5PJvEOdU1rAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUete/z8DyGucGEKN1zaxiSBZR59kwHwYDVR0j
BBgwFoAUmXPl1vf2Xc8BXp2vzvOU9RLk/WEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
Y2JjYzAwZC1jZTc5LTQyMTYtYTYyYi1lM2Q1MGNjNzk0NDIvMC85OTczRTVENkY3
RjY1RENGMDE1RTlEQUZDRUYzOTRGNTEyRTRGRDYxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTk3M0U1RDZGN0Y2NURDRjAxNUU5REFGQ0VGMzk0RjUxMkU0
RkQ2MS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NjYmNjMDBkLWNlNzktNDIxNi1h
NjJiLWUzZDUwY2M3OTQ0Mi8wLzMyMzAzMzJlMzEzNDM4MmUzODM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNTMyMzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMuUVDANBgkqhkiG
9w0BAQsFAAOCAQEAFAdfU1Ees0wAMFrpCITs9gH67noRGpbnlHPaRti6nS7Shu+4
/IC+NaX9FHqnVdqih4LkJ/gJlbIPGIypt6SDB5tHb8E2v8nfxpkiXz3uhyoaXzrR
M/53ByS+4cQ7WsClP9kNMSMcuvp7EEoQzQhMCjd5+NnHINSlL2sMgIJuqGxzYE0H
d0SrGi7yIdGaN20/vYIrcL8+ECh777vMixStqT8IXIKpABg+CRCLobxgYW5Oh6YZ
/3j+6G+C+MUo3lUmxc1G3Z+G4F4SOjh9UkDqqlrd1cecJQKybssId5GOq5hvmx8w
NhKiX+By9v76fW9Y8hRxlsTSgiHvaEKRAhCcaQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:59:08 2025 by rpki-client