Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234312e302f32342d3234203d3e203338313530.roa
File:                     3138302e3231342e3234312e302f32342d3234203d3e203338313530.roa (raw, json)
Hash identifier:          bu8PQupPQERGQ/wzLVVe3ZYhIOmwELfx937WvLW0lzc=
Subject key identifier:   81:A5:7A:4A:42:C9:42:12:6F:74:FF:A2:25:95:F6:B9:E6:70:1F:90
Certificate issuer:       /CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
Certificate serial:       73B37F8B09C13AAEFB36651AB4F8E4A77FD6C1A8
Authority key identifier: 2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234312e302f32342d3234203d3e203338313530.roa
Signing time:             Mon 02 Jun 2025 02:02:33 +0000
ROA not before:           Mon 02 Jun 2025 01:57:33 +0000
ROA not after:            Mon 01 Jun 2026 02:02:33 +0000
asID:                     38150
IP address blocks:        180.214.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl
                          rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 22:14:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:b3:7f:8b:09:c1:3a:ae:fb:36:65:1a:b4:f8:e4:a7:7f:d6:c1:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
        Validity
            Not Before: Jun  2 01:57:33 2025 GMT
            Not After : Jun  1 02:02:33 2026 GMT
        Subject: CN=81A57A4A42C942126F74FFA22595F6B9E6701F90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:92:dc:d3:75:78:11:d6:39:67:ce:fe:44:af:
                    77:3b:16:c8:d4:7e:4d:7b:8c:c3:f3:32:60:ac:1f:
                    95:d5:4e:5c:32:fe:25:c8:fa:6c:4d:76:8b:fa:93:
                    3d:85:db:22:3e:cc:da:da:77:cf:c8:5d:b8:ab:25:
                    b3:7b:91:a2:c9:2c:24:6d:df:78:0f:20:54:06:65:
                    09:19:db:c4:69:a4:5b:89:a5:f4:57:c2:17:69:91:
                    fa:1d:f4:ee:05:e6:d6:f7:3a:1e:62:9a:39:26:c0:
                    76:00:24:04:2a:0b:87:62:bb:ee:60:6c:95:f0:3b:
                    d1:7f:50:ba:9b:04:d8:64:57:1e:00:78:44:f5:68:
                    1e:2e:24:c2:d0:4d:c3:b9:c0:e4:76:dc:3f:e4:1c:
                    25:73:db:46:0c:43:8e:21:e8:ac:c3:d9:61:50:ff:
                    8a:27:ad:f9:5a:e5:32:05:f2:5e:ec:37:13:16:0e:
                    23:46:57:de:b7:91:27:e8:bd:88:2c:0d:05:ec:21:
                    b2:1f:e6:30:c1:65:3f:37:31:1f:5b:e6:e1:2f:c1:
                    98:b2:37:af:1f:c0:c4:83:3a:27:51:e7:99:3f:55:
                    c6:e3:e9:c4:ca:04:d4:d6:1b:b3:5e:7d:2d:1b:9e:
                    cc:ea:f3:85:bb:82:bd:68:70:dc:80:9e:93:de:1f:
                    60:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A5:7A:4A:42:C9:42:12:6F:74:FF:A2:25:95:F6:B9:E6:70:1F:90
            X509v3 Authority Key Identifier:
                keyid:2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3138302e3231342e3234312e302f32342d3234203d3e203338313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.214.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:1f:2b:88:e9:f5:8e:69:24:9f:a0:b6:39:60:67:4a:14:3d:
         9d:04:e4:aa:b3:d4:24:8b:3d:e0:a4:f9:41:60:bb:43:97:45:
         34:67:c0:3f:62:72:8d:73:e6:30:dc:cb:7a:c5:4e:35:ee:69:
         0f:34:04:36:0b:17:04:00:0a:f0:ac:26:bf:e7:9b:e2:56:82:
         b2:37:12:53:1f:aa:d3:17:41:b3:0f:9a:04:cf:73:43:2d:31:
         6b:d2:ea:25:62:fc:9d:ea:aa:fa:08:81:26:8c:c9:25:51:36:
         17:8a:ec:22:6e:9c:ae:40:7c:30:d4:1a:82:fe:d7:11:e2:21:
         8c:b3:cd:87:75:58:48:c5:6a:77:24:71:d5:fd:36:ba:c1:30:
         65:cc:ef:32:41:04:9d:67:3c:2e:15:07:98:d1:a4:2d:4f:b9:
         50:19:a1:5c:5c:df:12:2d:0e:16:1a:a1:8e:bd:68:46:44:6a:
         04:b4:07:80:7a:4d:ee:f0:b8:7f:5e:f5:a5:29:af:f3:86:a6:
         f9:17:0c:8d:45:65:1d:c2:06:f7:56:77:a0:c0:47:08:9c:6e:
         0d:c1:49:43:d4:9d:1a:00:96:3f:81:bc:4a:77:e7:b6:72:b2:
         7a:9b:39:dd:e8:2a:1f:f8:ea:35:c6:10:77:38:18:9c:70:cc:
         9c:14:87:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:26:45 2025 by rpki-client