Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230342e302f32332d3233203d3e203538353532.roa
File:                     3230322e37322e3230342e302f32332d3233203d3e203538353532.roa (raw, json)
Hash identifier:          GdxXTcqOs77ZDWh2maZVFcjOZNFSKj6ecuomfp+ELnY=
Subject key identifier:   FC:F7:4B:16:BE:28:8C:6D:A7:FE:D1:87:44:8D:B6:C7:6E:BA:92:87
Certificate issuer:       /CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
Certificate serial:       12A1045558C07E173C1E5204B8EDD8FAC664328B
Authority key identifier: 9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230342e302f32332d3233203d3e203538353532.roa
Signing time:             Mon 02 Jun 2025 02:02:54 +0000
ROA not before:           Mon 02 Jun 2025 01:57:54 +0000
ROA not after:            Mon 01 Jun 2026 02:02:54 +0000
asID:                     58552
IP address blocks:        202.72.204.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl
                          rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 19:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:a1:04:55:58:c0:7e:17:3c:1e:52:04:b8:ed:d8:fa:c6:64:32:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
        Validity
            Not Before: Jun  2 01:57:54 2025 GMT
            Not After : Jun  1 02:02:54 2026 GMT
        Subject: CN=FCF74B16BE288C6DA7FED187448DB6C76EBA9287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:05:42:9a:4d:69:27:30:7b:a2:23:87:3b:c6:
                    4e:f9:e5:a8:34:20:4c:f3:14:83:b4:4c:4a:b6:5f:
                    f2:7e:09:e2:dc:47:3c:4b:0b:61:8b:9a:3f:ad:fb:
                    bf:91:fa:4b:98:48:4c:48:c4:38:4f:61:d2:a2:e2:
                    64:94:7c:50:3e:cb:f1:f6:75:95:c1:a3:65:38:f4:
                    aa:89:08:ba:68:8f:b7:65:e8:0c:f6:a8:a6:fa:1e:
                    03:eb:e3:28:58:67:e7:43:88:31:68:f4:f1:0a:14:
                    02:d8:3e:6e:2d:2c:1b:fb:f1:7f:4a:cd:3f:6c:1e:
                    26:5a:45:c1:8a:a5:29:4d:d9:e7:96:a1:2c:5d:bb:
                    61:c6:f6:e8:a6:b9:8b:33:df:36:79:e3:d4:02:0c:
                    5a:28:6e:0d:ce:cb:29:37:86:f2:33:e0:89:65:61:
                    46:48:4a:4f:7d:91:0e:32:16:64:6f:9c:fe:c5:ba:
                    14:7c:99:2f:08:89:76:2b:59:c2:e3:81:0a:1d:5b:
                    1c:71:23:29:d4:48:af:08:1c:04:fa:df:2c:a7:2c:
                    c8:c9:9e:23:ba:7e:90:1e:88:a7:42:29:06:97:bf:
                    15:a8:3f:f0:2e:84:fb:40:83:90:43:ae:66:d5:e7:
                    ed:66:a9:bd:95:91:66:3c:cf:cf:fc:df:ba:9f:49:
                    e3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F7:4B:16:BE:28:8C:6D:A7:FE:D1:87:44:8D:B6:C7:6E:BA:92:87
            X509v3 Authority Key Identifier:
                keyid:9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230342e302f32332d3233203d3e203538353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.72.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:f9:16:16:b0:7b:0a:e2:54:9f:d6:29:13:62:6f:16:32:b9:
         ba:92:b6:60:7c:b3:2e:1c:2a:f0:ae:ab:02:e7:42:25:d0:5e:
         b8:56:95:e2:fb:d0:bb:ca:e4:c5:ed:8a:0b:f6:af:1a:27:0b:
         40:1b:fb:52:29:f0:57:ab:4c:d1:77:9c:91:00:16:f1:ca:d8:
         dc:d3:d9:b1:66:f0:34:97:c5:d6:bc:8e:93:97:8e:b4:b2:12:
         5f:cf:af:ef:8c:15:8e:5e:8b:26:5e:23:79:c0:7f:33:69:9e:
         0a:3a:7e:08:47:38:67:b8:e7:dc:b9:98:6a:94:66:6f:80:23:
         0b:3f:02:b9:f4:f1:7c:4e:24:6c:70:61:6f:21:5f:df:bb:27:
         62:61:5d:c7:9a:e0:7a:27:30:02:5d:cb:b2:3b:e2:50:2a:96:
         0d:62:21:31:d4:1a:b6:ca:ec:01:e7:48:23:c6:a6:3f:76:82:
         c9:97:cb:5a:a0:c8:bd:e6:3c:b9:fa:7f:ef:8e:90:f1:27:28:
         b1:18:09:d0:6b:93:05:7a:56:ab:d0:08:fc:90:8b:f1:6d:d9:
         d8:3c:4e:c7:16:75:71:89:e3:1c:ab:29:a9:01:5e:35:b6:e3:
         50:83:6f:8d:15:82:73:68:f7:f5:c1:de:ae:d1:c7:ab:63:ef:
         c1:e7:79:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:06:05 2025 by rpki-client