Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3230322e3132372e39362e302f32302d3234203d3e203137393130.roa
File:                     3230322e3132372e39362e302f32302d3234203d3e203137393130.roa (raw, json)
Hash identifier:          IM2twiGIKQqETGmIWQI3vAIIytZPeeD5wgctglA7Hpc=
Subject key identifier:   1F:D1:D0:4B:06:34:14:1A:B4:4E:69:51:40:6C:FB:54:BC:72:B2:2B
Certificate issuer:       /CN=1635F5E419798341BDC615D4E1C6AE340C34BEED
Certificate serial:       3C0539AD3E6A74C3D385BE294A5A2D823F67EF29
Authority key identifier: 16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3230322e3132372e39362e302f32302d3234203d3e203137393130.roa
Signing time:             Tue 22 Jul 2025 07:35:01 +0000
ROA not before:           Tue 22 Jul 2025 07:30:01 +0000
ROA not after:            Tue 21 Jul 2026 07:35:01 +0000
asID:                     17910
IP address blocks:        202.127.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.crl
                          rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 22:03:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:05:39:ad:3e:6a:74:c3:d3:85:be:29:4a:5a:2d:82:3f:67:ef:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1635F5E419798341BDC615D4E1C6AE340C34BEED
        Validity
            Not Before: Jul 22 07:30:01 2025 GMT
            Not After : Jul 21 07:35:01 2026 GMT
        Subject: CN=1FD1D04B0634141AB44E6951406CFB54BC72B22B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4f:24:b3:38:b4:df:54:a5:13:17:99:c6:e0:
                    9d:22:ae:02:1d:86:cd:c2:58:5e:5d:a8:f8:bc:a8:
                    98:e9:7e:f2:9d:87:65:bd:e0:9f:15:9d:af:12:66:
                    cf:b1:7e:be:82:b9:1f:2e:9f:de:27:90:55:d4:af:
                    18:07:48:64:ce:35:83:29:bc:d9:27:5a:5a:4c:14:
                    da:1f:4c:78:52:15:ff:91:2e:b3:a8:7e:0d:84:17:
                    a4:63:d2:e4:9a:1f:ba:b8:08:9b:66:7d:98:d7:fd:
                    e0:e2:1b:38:95:de:4e:e6:38:b4:98:34:aa:f2:da:
                    08:12:07:ee:8b:bb:39:66:18:34:70:33:40:84:6a:
                    1d:1c:43:67:d6:ba:59:ae:da:f5:ec:8e:9f:4a:29:
                    42:e4:6b:e0:55:43:12:dd:16:21:d6:6d:43:d5:f5:
                    ae:db:11:16:06:d4:c5:44:14:30:8b:b2:1c:f7:80:
                    06:d3:0c:c7:13:f4:26:f0:70:7f:b3:3f:5f:4e:b4:
                    1d:0d:71:b6:eb:a9:ef:85:a9:ab:1d:d5:b3:91:4c:
                    3a:69:f8:1d:7a:d7:51:f2:71:64:08:09:fa:03:2a:
                    95:b2:ae:dc:70:e5:ea:c8:3c:64:26:6c:ce:4f:b9:
                    90:03:34:cb:6c:56:0c:c2:e5:bc:b7:b3:83:99:d5:
                    5c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D1:D0:4B:06:34:14:1A:B4:4E:69:51:40:6C:FB:54:BC:72:B2:2B
            X509v3 Authority Key Identifier:
                keyid:16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3230322e3132372e39362e302f32302d3234203d3e203137393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.127.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         07:07:f6:aa:e6:3e:e0:e1:9a:21:be:16:c7:8a:a4:c9:8b:6e:
         bd:f9:1f:3b:63:5e:b8:67:bd:85:b3:d6:d6:17:ad:64:66:d8:
         e1:b7:6a:19:c4:e6:47:21:01:b6:f2:0e:94:dd:49:41:9e:f7:
         1d:9e:e8:3d:f0:37:7f:b6:84:9b:92:be:c2:76:27:38:95:61:
         58:73:9f:64:d1:c3:94:dc:d1:bd:41:83:39:40:d5:38:18:96:
         fd:f6:1a:cc:09:6d:39:f0:2d:d9:e1:48:8a:43:b7:9a:bf:13:
         aa:0a:12:7a:02:2b:c1:f0:f4:51:0c:d7:b1:f1:9a:12:00:f9:
         3f:75:d9:74:36:89:16:87:5d:b8:ea:36:41:b9:86:af:e7:03:
         b1:f9:ba:84:6f:e4:84:e1:57:b0:68:dd:28:77:fb:41:80:5e:
         05:c7:c9:63:40:90:47:d9:1e:26:35:54:41:ee:fc:9c:47:53:
         84:8b:a8:d2:61:b1:9d:35:92:4e:b5:28:c3:69:76:4a:88:51:
         4d:7d:9e:ce:61:b2:d2:0e:98:7d:59:49:08:e7:a5:a5:36:7f:
         8c:71:9f:22:f6:3b:19:2b:7f:d6:7b:71:c2:73:bf:22:85:9a:
         ed:5a:54:1d:83:b9:9d:14:b9:1c:17:76:3f:0a:f3:ec:e5:cb:
         c3:7b:26:fa
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUPAU5rT5qdMPThb4pSlotgj9n7ykwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTYzNUY1RTQxOTc5ODM0MUJEQzYxNUQ0RTFDNkFFMzQw
QzM0QkVFRDAeFw0yNTA3MjIwNzMwMDFaFw0yNjA3MjEwNzM1MDFaMDMxMTAvBgNV
BAMTKDFGRDFEMDRCMDYzNDE0MUFCNDRFNjk1MTQwNkNGQjU0QkM3MkIyMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbTySzOLTfVKUTF5nG4J0irgId
hs3CWF5dqPi8qJjpfvKdh2W94J8Vna8SZs+xfr6CuR8un94nkFXUrxgHSGTONYMp
vNknWlpMFNofTHhSFf+RLrOofg2EF6Rj0uSaH7q4CJtmfZjX/eDiGziV3k7mOLSY
NKry2ggSB+6LuzlmGDRwM0CEah0cQ2fWulmu2vXsjp9KKULka+BVQxLdFiHWbUPV
9a7bERYG1MVEFDCLshz3gAbTDMcT9CbwcH+zP19OtB0Ncbbrqe+Fqasd1bORTDpp
+B1611HycWQICfoDKpWyrtxw5erIPGQmbM5PuZADNMtsVgzC5by3s4OZ1VxnAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUH9HQSwY0FBq0TmlRQGz7VLxysiswHwYDVR0j
BBgwFoAUFjX15Bl5g0G9xhXU4cauNAw0vu0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
NjQ1MDAzMi01NDkyLTRhNWEtOTQzZi1iZGI0NzMzNDEyMzMvMC8xNjM1RjVFNDE5
Nzk4MzQxQkRDNjE1RDRFMUM2QUUzNDBDMzRCRUVELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTYzNUY1RTQxOTc5ODM0MUJEQzYxNUQ0RTFDNkFFMzQwQzM0
QkVFRC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg2NDUwMDMyLTU0OTItNGE1YS05
NDNmLWJkYjQ3MzM0MTIzMy8wLzMyMzAzMjJlMzEzMjM3MmUzOTM2MmUzMDJmMzIz
MDJkMzIzNDIwM2QzZTIwMzEzNzM5MzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMp/YDANBgkqhkiG
9w0BAQsFAAOCAQEABwf2quY+4OGaIb4Wx4qkyYtuvfkfO2NeuGe9hbPW1hetZGbY
4bdqGcTmRyEBtvIOlN1JQZ73HZ7oPfA3f7aEm5K+wnYnOJVhWHOfZNHDlNzRvUGD
OUDVOBiW/fYazAltOfAt2eFIikO3mr8TqgoSegIrwfD0UQzXsfGaEgD5P3XZdDaJ
FodduOo2QbmGr+cDsfm6hG/khOFXsGjdKHf7QYBeBcfJY0CQR9keJjVUQe78nEdT
hIuo0mGxnTWSTrUow2l2SohRTX2ezmGy0g6YfVlJCOelpTZ/jHGfIvY7GSt/1ntx
wnO/IoWa7VpUHYO5nRS5HBd2Pwrz7OXLw3sm+g==
-----END CERTIFICATE-----
Generated at Sun Aug 10 05:34:42 2025 by rpki-client