Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3230322e37342e3233372e302f32342d3234203d3e20313331373735.roa
File:                     3230322e37342e3233372e302f32342d3234203d3e20313331373735.roa (raw, json)
Hash identifier:          6e4gMBIWBCHTWU94MEtj6eyxSIoX56aVHgjbVxpfxNg=
Subject key identifier:   D9:22:57:E3:66:DD:34:23:64:ED:BE:6A:C8:01:7B:D4:81:7B:70:A5
Certificate issuer:       /CN=49CDCA308C289D688C649C2303BECB3ED76B5054
Certificate serial:       6C9B2D9A65F2275137403D4FF765C42F6599132A
Authority key identifier: 49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3230322e37342e3233372e302f32342d3234203d3e20313331373735.roa
Signing time:             Mon 02 Jun 2025 02:02:48 +0000
ROA not before:           Mon 02 Jun 2025 01:57:48 +0000
ROA not after:            Mon 01 Jun 2026 02:02:48 +0000
asID:                     131775
IP address blocks:        202.74.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl
                          rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 08:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:9b:2d:9a:65:f2:27:51:37:40:3d:4f:f7:65:c4:2f:65:99:13:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49CDCA308C289D688C649C2303BECB3ED76B5054
        Validity
            Not Before: Jun  2 01:57:48 2025 GMT
            Not After : Jun  1 02:02:48 2026 GMT
        Subject: CN=D92257E366DD342364EDBE6AC8017BD4817B70A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:86:4d:74:fc:b3:6e:cf:72:40:e9:b5:a3:02:
                    ed:61:d9:53:c0:bc:cd:82:e5:fb:42:a9:c7:a8:99:
                    61:4f:00:30:f2:c1:bc:41:1c:66:bb:79:b9:b8:a3:
                    9d:0c:27:12:2a:fb:67:5a:b4:5c:ae:9c:b9:6c:c4:
                    0c:26:0c:06:02:82:49:1a:d1:e4:c0:8d:cc:80:f9:
                    bd:2d:42:91:3b:ae:88:1e:42:d1:6c:ba:80:a9:86:
                    f4:e3:4d:bf:fc:76:a5:0c:ef:d2:49:9f:38:d7:95:
                    c4:12:c6:5a:08:09:d7:0f:e3:74:ea:76:b8:e7:c2:
                    ed:22:dd:ba:3d:27:e9:70:ca:48:3b:ad:62:68:96:
                    ee:1b:95:83:89:b4:6c:3f:41:7f:87:cd:fd:66:53:
                    18:61:b5:3f:35:fe:c0:64:14:47:a8:20:f4:45:16:
                    7b:36:98:07:68:b8:14:db:11:c5:dd:d0:73:3c:df:
                    9d:3a:95:fc:5d:bf:8d:59:36:9f:1c:f5:8e:fb:5b:
                    2f:9f:a4:bd:b6:74:7b:2d:8f:66:d0:94:fd:33:91:
                    b1:54:84:8b:ae:db:fb:21:fc:83:6a:4a:bf:50:6f:
                    d1:94:93:ed:15:a9:03:66:f5:e6:da:f0:f9:f0:3b:
                    97:b3:cb:2a:31:a8:89:67:1c:43:f0:5d:fd:95:92:
                    07:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:22:57:E3:66:DD:34:23:64:ED:BE:6A:C8:01:7B:D4:81:7B:70:A5
            X509v3 Authority Key Identifier:
                keyid:49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3230322e37342e3233372e302f32342d3234203d3e20313331373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.74.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:27:a2:cf:f9:b8:76:cd:92:13:dd:31:5f:cc:bb:c8:d1:03:
         03:1c:3e:fb:cd:8b:3a:4b:1c:57:e1:e6:b7:bd:4e:4f:6c:38:
         14:34:7d:6d:ef:4e:f1:a1:a1:6a:70:6d:91:ba:94:ba:5d:2f:
         16:c4:d5:23:bb:ef:36:b9:a7:6e:85:df:e2:cd:86:fe:f5:1e:
         b3:06:bf:74:69:63:62:ab:69:bf:c9:2c:44:84:a2:2b:6a:6c:
         27:14:21:cb:9f:72:9a:88:4a:73:f8:98:24:aa:a7:21:ed:11:
         b2:e2:e0:27:7b:14:a7:19:0a:08:0c:ee:e6:b2:3b:c3:fe:0a:
         c4:69:e9:74:f4:ff:2b:c4:1b:eb:b1:db:66:50:e5:41:b4:ea:
         44:cf:67:4a:bf:8b:38:a2:ed:3f:f3:4c:9c:a0:e3:26:0c:25:
         52:da:65:4a:29:fa:90:79:a5:38:2b:34:c4:ed:31:17:13:12:
         70:5f:69:0b:9d:ea:86:ce:22:67:ed:d3:97:64:fd:ff:54:35:
         18:83:fb:0d:fe:d0:5d:7e:24:fb:63:4d:b8:25:ed:2a:08:94:
         d0:d0:6d:60:fb:3e:14:59:d7:62:33:4a:5f:7d:d0:76:b4:83:
         c2:7e:55:e9:13:f0:b2:a3:bf:ef:df:db:2b:ae:28:c4:d3:1b:
         dc:91:97:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:34:23 2025 by rpki-client