Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/3230332e33342e3131392e302f32342d3234203d3e203338373735.roa
File:                     3230332e33342e3131392e302f32342d3234203d3e203338373735.roa (raw, json)
Hash identifier:          lQa70hzJ397OJiel1wVx7dOXLMWMPJnsKeiNgocVwQs=
Subject key identifier:   7C:67:62:A0:D4:2A:65:B6:79:36:99:D0:26:8F:6F:5F:2F:1B:0F:D0
Certificate issuer:       /CN=A7422B678A17489054C0697D44A3B19EB9F67509
Certificate serial:       28E8AEF680428743A152079CB1F5031129FA2E41
Authority key identifier: A7:42:2B:67:8A:17:48:90:54:C0:69:7D:44:A3:B1:9E:B9:F6:75:09
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/3230332e33342e3131392e302f32342d3234203d3e203338373735.roa
Signing time:             Mon 02 Jun 2025 02:04:04 +0000
ROA not before:           Mon 02 Jun 2025 01:59:04 +0000
ROA not after:            Mon 01 Jun 2026 02:04:04 +0000
asID:                     38775
IP address blocks:        203.34.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.crl
                          rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Jun 2025 02:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:e8:ae:f6:80:42:87:43:a1:52:07:9c:b1:f5:03:11:29:fa:2e:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7422B678A17489054C0697D44A3B19EB9F67509
        Validity
            Not Before: Jun  2 01:59:04 2025 GMT
            Not After : Jun  1 02:04:04 2026 GMT
        Subject: CN=7C6762A0D42A65B6793699D0268F6F5F2F1B0FD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9c:dc:c4:54:03:a7:74:7b:46:58:59:d0:5a:
                    80:4b:59:df:ee:4a:3a:4f:a2:71:94:8a:de:3c:a3:
                    74:87:eb:9a:84:de:c8:ba:ac:ee:a4:58:a1:92:60:
                    e8:ff:44:c6:c6:4d:f1:4a:8c:c2:70:71:73:88:8c:
                    d0:67:8d:0e:34:02:ca:f9:96:7b:9e:90:88:45:d2:
                    91:f6:98:b2:59:35:3b:2c:59:ad:74:d8:c1:e3:ea:
                    af:71:9b:6b:ac:2c:b0:20:c3:b6:cc:db:2c:21:74:
                    b4:00:46:0b:39:2a:9b:06:8e:6a:02:51:e4:fa:c5:
                    25:27:d2:0f:51:29:1f:bc:fd:2a:22:8f:04:98:16:
                    7e:c6:c5:82:c8:4d:48:df:18:23:13:87:32:27:c4:
                    34:58:a7:a1:65:e2:f8:c6:cd:4e:cd:9a:0f:f9:5f:
                    3e:3a:85:e0:c7:5b:e2:b9:8b:35:f5:f7:a0:d4:10:
                    47:62:ff:46:94:ff:2e:7d:4c:10:c4:49:7a:e3:6b:
                    fd:52:bd:73:d3:32:2d:cd:3f:fa:a9:5a:e0:f7:3f:
                    cc:c0:40:5f:ce:85:f3:4f:45:0e:0a:96:c2:26:95:
                    f5:c6:fc:3e:0c:f9:8b:cd:90:a3:59:01:04:39:81:
                    43:bc:e8:65:c2:c6:2b:8a:e1:d2:bb:09:5e:40:56:
                    46:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:67:62:A0:D4:2A:65:B6:79:36:99:D0:26:8F:6F:5F:2F:1B:0F:D0
            X509v3 Authority Key Identifier:
                keyid:A7:42:2B:67:8A:17:48:90:54:C0:69:7D:44:A3:B1:9E:B9:F6:75:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/3230332e33342e3131392e302f32342d3234203d3e203338373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.34.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:f5:c4:bf:69:1e:bf:61:b7:cc:e5:82:63:3a:c3:b1:25:5a:
         b2:f3:20:12:1e:39:d8:4f:68:c1:ba:5e:10:43:c9:26:26:8a:
         d3:a1:d8:ee:7d:bc:58:25:8a:3b:50:1e:c5:cc:4b:3c:8f:7c:
         04:74:e6:4e:db:62:cb:a2:d3:05:03:01:a1:64:79:e6:f1:df:
         61:f4:44:d7:87:d7:93:1c:41:f4:88:06:5c:5b:3e:a9:97:02:
         ee:5c:ce:e8:4f:0b:36:5c:a6:8c:30:95:d1:d6:d5:de:5d:de:
         44:16:20:9c:2b:7e:8d:8c:37:d3:2f:01:18:c0:3a:97:f8:da:
         c9:8c:43:05:77:59:dd:09:2d:17:92:be:4f:8d:f6:5e:89:b1:
         d3:e5:86:9a:fa:48:e1:08:f1:07:42:57:5e:35:69:39:46:23:
         88:a9:39:f2:c8:03:91:4e:9c:65:d6:0e:90:e1:f2:cd:13:d6:
         49:1c:75:bb:15:7c:7d:65:86:8f:fd:3e:75:48:f9:ab:27:f3:
         db:44:5c:10:3c:90:14:e5:03:59:9e:b4:19:5c:da:8a:15:66:
         58:57:93:e3:19:5a:37:b8:9a:8d:6a:db:ea:c9:0e:cb:ce:9e:
         c1:d0:11:66:a3:f0:6e:2d:25:f6:67:97:8a:8b:e5:89:31:0b:
         b9:95:ff:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:40:30 2025 by rpki-client