Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/3232332e3133302e32322e302f32332d3234203d3e2039343232.roa
File:                     3232332e3133302e32322e302f32332d3234203d3e2039343232.roa (raw, json)
Hash identifier:          7z/4k9uh8qc3CYPaIfLqUwfu/s9Fgtg25t7b4ka8UOQ=
Subject key identifier:   7C:4F:3A:0E:2D:77:6B:DD:82:ED:90:A8:76:F8:6C:31:24:2B:FF:B0
Certificate issuer:       /CN=295CEF87CDB74B1A43287E630C3FE568272D2F33
Certificate serial:       37996A7A1805FE4BCE005030B7CE1AAD93076EB0
Authority key identifier: 29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/3232332e3133302e32322e302f32332d3234203d3e2039343232.roa
Signing time:             Mon 02 Jun 2025 02:04:20 +0000
ROA not before:           Mon 02 Jun 2025 01:59:20 +0000
ROA not after:            Mon 01 Jun 2026 02:04:20 +0000
asID:                     9422
IP address blocks:        223.130.22.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl
                          rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 12:28:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:99:6a:7a:18:05:fe:4b:ce:00:50:30:b7:ce:1a:ad:93:07:6e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295CEF87CDB74B1A43287E630C3FE568272D2F33
        Validity
            Not Before: Jun  2 01:59:20 2025 GMT
            Not After : Jun  1 02:04:20 2026 GMT
        Subject: CN=7C4F3A0E2D776BDD82ED90A876F86C31242BFFB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d9:f4:4f:b5:9e:dc:df:b4:f5:60:ab:df:57:
                    04:11:2d:7b:b4:6b:00:44:c4:b3:ad:48:ed:7b:83:
                    e3:eb:db:52:f6:0a:9f:4e:13:60:45:aa:da:56:50:
                    3a:c0:17:ad:50:00:90:64:aa:d8:92:ca:5e:18:43:
                    b4:c1:47:c1:4a:68:c9:49:93:c1:c4:1e:2c:bb:21:
                    0c:f0:00:f0:4e:f7:f1:54:7d:c0:85:fe:d0:f0:6a:
                    7c:ce:94:de:4c:17:37:0e:2d:3c:3b:5e:de:cb:25:
                    6a:9b:c7:4c:b4:a4:11:a5:4d:96:41:13:fe:42:f3:
                    18:ec:b7:2e:d8:dd:64:2b:27:ba:68:9a:f6:a6:1b:
                    dc:75:24:96:ab:84:31:24:88:a8:ac:9b:ac:1f:2d:
                    5d:76:05:dd:7e:9b:d6:4b:67:94:30:34:d0:f8:2d:
                    ed:3b:b6:2d:c0:f7:a3:a9:d6:66:48:f0:8d:ea:7f:
                    b1:5e:80:43:f3:0f:d0:ec:89:2a:98:eb:0a:fe:bb:
                    2d:df:b9:5f:c5:70:7a:f4:76:e3:1e:e4:48:05:aa:
                    fc:97:1e:77:49:2b:bd:63:9a:a9:83:8f:c8:fa:d4:
                    69:89:1e:cf:de:c4:fe:35:74:36:0d:32:5d:3d:0e:
                    64:df:18:e8:03:cc:38:3e:54:f9:b7:32:b1:7b:59:
                    ba:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:4F:3A:0E:2D:77:6B:DD:82:ED:90:A8:76:F8:6C:31:24:2B:FF:B0
            X509v3 Authority Key Identifier:
                keyid:29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/3232332e3133302e32322e302f32332d3234203d3e2039343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.130.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:12:05:30:92:ac:7b:cf:49:5a:a0:f3:60:59:29:0d:34:a5:
         16:67:b4:4c:3c:0f:86:0c:d4:4d:15:82:13:b4:e5:9d:16:22:
         c8:3a:5b:b4:0e:b4:28:de:99:11:58:2d:1b:a7:54:48:97:11:
         b3:09:c2:87:cf:06:d0:d5:74:e9:35:6c:11:86:af:fd:23:6d:
         c7:3e:9c:2b:5e:de:8c:3f:b8:cd:0f:d0:a9:90:88:fd:e7:63:
         f4:e9:2f:62:66:87:0b:77:16:86:52:c1:f6:71:44:50:67:49:
         22:cc:1f:67:e5:dd:1c:fc:fe:87:7f:ee:48:6a:45:e5:8d:48:
         af:0d:40:b1:a4:6b:f5:b1:fd:89:f5:99:83:99:5c:6c:49:97:
         86:09:15:50:ea:0a:74:b7:ed:8b:cf:06:bc:95:72:28:3f:c8:
         c5:d0:f8:25:c4:7c:3e:35:79:d5:ee:5f:3b:2c:4a:d5:8b:5b:
         6f:02:89:f2:ab:6d:d1:b6:2c:54:98:ba:fb:b8:99:57:cb:8c:
         cc:23:a3:cc:22:da:b7:6d:b6:00:17:50:3a:68:2e:36:12:28:
         f1:f2:4e:72:b9:c6:88:4e:26:a6:45:06:57:8b:78:1d:97:aa:
         f6:77:4a:dc:46:f3:82:9b:b3:6d:04:af:15:87:7b:79:7e:35:
         83:48:63:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:08:00 2025 by rpki-client