Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230332e302f32342d3234203d3e203538353532.roa
File:                     3230322e37322e3230332e302f32342d3234203d3e203538353532.roa (raw, json)
Hash identifier:          ClWieUUujizdV+v3zWqEr3zcFrew9Y3pcCg166brANs=
Subject key identifier:   4E:07:6A:85:58:C1:8A:A5:4B:1A:D5:07:74:AB:FB:BF:B5:1A:0A:BB
Certificate issuer:       /CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
Certificate serial:       3FFC529526B9DCCBFD10D4011C84F321D6201D4C
Authority key identifier: 9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230332e302f32342d3234203d3e203538353532.roa
Signing time:             Mon 07 Jul 2025 14:00:01 +0000
ROA not before:           Mon 07 Jul 2025 13:55:01 +0000
ROA not after:            Mon 06 Jul 2026 14:00:01 +0000
asID:                     58552
IP address blocks:        202.72.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl
                          rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 04:22:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:fc:52:95:26:b9:dc:cb:fd:10:d4:01:1c:84:f3:21:d6:20:1d:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
        Validity
            Not Before: Jul  7 13:55:01 2025 GMT
            Not After : Jul  6 14:00:01 2026 GMT
        Subject: CN=4E076A8558C18AA54B1AD50774ABFBBFB51A0ABB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:da:24:c4:91:61:5e:02:9f:88:b5:a2:ae:33:
                    cb:40:c0:13:14:41:c7:42:f7:2c:88:fa:c5:42:ef:
                    cb:e2:6e:62:a7:52:f9:e2:70:5e:c1:22:9a:ed:a7:
                    c4:fb:b3:6e:cd:e5:03:3d:bb:42:d3:0d:87:2d:9b:
                    d5:a5:b5:b0:9a:1c:9c:24:b8:9e:85:cb:46:4d:0a:
                    21:51:73:e2:aa:9b:d2:78:ce:17:9b:73:7f:a0:4e:
                    0c:5a:08:c7:90:14:63:cf:60:9b:3c:f2:1b:0a:55:
                    90:c5:18:cd:f2:76:61:8d:1a:6c:d4:83:40:82:90:
                    83:de:40:8d:9b:22:12:78:7f:33:25:b1:70:2e:f2:
                    c8:19:fa:f5:a1:8f:d2:ef:d0:62:e3:ca:e4:c5:2b:
                    80:86:9d:a0:cf:2f:8e:14:ca:b4:3d:5e:39:42:7d:
                    b6:0b:5b:8e:7a:80:6a:2d:7c:34:87:09:3b:19:dc:
                    87:e1:0a:c8:68:18:ce:92:ea:69:42:b9:c1:aa:c9:
                    11:7b:31:f7:87:fa:32:17:78:5c:5c:d0:c0:84:8d:
                    06:6e:e6:e6:4e:30:b1:f6:1b:de:0e:b2:cd:eb:a3:
                    1d:02:02:73:1b:c6:48:28:25:d5:97:e0:71:46:42:
                    2a:33:36:54:70:29:cb:da:34:33:27:b9:af:55:35:
                    5b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:07:6A:85:58:C1:8A:A5:4B:1A:D5:07:74:AB:FB:BF:B5:1A:0A:BB
            X509v3 Authority Key Identifier:
                keyid:9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230332e302f32342d3234203d3e203538353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.72.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:42:c6:16:3f:d1:bd:1a:f4:8c:4b:f9:29:d0:f9:b7:9b:3c:
         bf:bd:4d:2c:8c:ba:e2:4e:d6:48:73:f3:5f:a0:70:29:58:8c:
         54:81:9e:96:1a:73:0c:86:28:8a:a9:b7:14:ea:2b:af:5a:88:
         53:f4:40:15:ae:8c:a8:fd:38:f4:dc:54:68:c1:b3:26:47:84:
         71:ee:85:6a:3e:c9:34:58:de:22:8f:fd:d1:a8:a6:ee:72:ea:
         a9:bb:01:dc:78:e4:7c:0e:d1:48:73:e4:2a:81:14:bc:5d:c6:
         f3:be:bb:db:77:14:7a:74:b4:71:69:a3:f1:72:ae:43:6c:5c:
         0e:44:bf:b8:0e:cf:b6:11:ee:bf:d1:3f:a3:6d:6f:31:bc:87:
         3f:a7:a5:8b:87:bc:97:cf:e5:be:ca:e5:d7:db:dd:1f:d1:71:
         5a:3f:0c:cc:b9:71:6c:58:59:09:a5:f4:a7:ce:29:b0:4e:52:
         36:1c:ca:b1:37:50:ab:7b:2e:98:b6:4e:1a:60:7b:4a:90:84:
         a2:d7:c9:8b:02:a6:4b:21:b9:a9:b2:1b:db:8b:4a:ab:89:c6:
         cf:c7:2d:96:a6:ff:ae:44:07:1e:66:4c:5e:71:3c:0d:f7:f4:
         4f:d5:0b:59:11:c8:5c:c1:44:cd:e7:11:e7:76:12:96:b6:ec:
         b8:15:d8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:10:16 2025 by rpki-client