Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e36392e302f32342d3234203d3e203538383234.roa
File:                     3230322e34372e36392e302f32342d3234203d3e203538383234.roa (raw, json)
Hash identifier:          G15emKlFtrQ/Qz174DFzSajHhjAQlZRYNTmG97OYqeg=
Subject key identifier:   08:F4:0E:53:06:94:10:6A:9A:B4:4D:92:6F:D0:F5:E8:21:B0:5F:D9
Certificate issuer:       /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Certificate serial:       30C5443B348D9C91BFF8193A8B231753822AE4F5
Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e36392e302f32342d3234203d3e203538383234.roa
Signing time:             Thu 24 Jul 2025 07:14:22 +0000
ROA not before:           Thu 24 Jul 2025 07:09:22 +0000
ROA not after:            Thu 23 Jul 2026 07:14:22 +0000
asID:                     58824
IP address blocks:        202.47.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl
                          rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 15:45:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:c5:44:3b:34:8d:9c:91:bf:f8:19:3a:8b:23:17:53:82:2a:e4:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
        Validity
            Not Before: Jul 24 07:09:22 2025 GMT
            Not After : Jul 23 07:14:22 2026 GMT
        Subject: CN=08F40E530694106A9AB44D926FD0F5E821B05FD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e9:16:ba:18:e1:31:07:f1:02:66:6f:08:40:
                    5b:e1:0e:fc:37:4c:c1:99:1f:f2:e2:c5:0c:02:3d:
                    10:e2:6b:c2:f4:9d:93:57:a5:d1:21:69:eb:cb:96:
                    16:1b:92:3e:e4:32:cb:73:e0:b2:0c:c8:5a:0d:f4:
                    ba:44:47:e0:db:1a:c2:1d:9a:1c:67:74:1f:60:c5:
                    ee:1f:a3:c8:ad:61:1a:fe:8b:49:3f:bf:e7:e0:62:
                    8a:4c:69:d0:b3:d0:5b:98:0c:ee:dd:3a:66:be:eb:
                    fd:e3:6c:32:33:ea:72:dd:3a:6a:68:1a:05:31:21:
                    f8:81:96:b9:c5:72:b2:55:74:ff:ca:99:15:1a:54:
                    a6:72:3e:d0:2c:38:08:a9:8d:d4:0a:4e:45:51:27:
                    db:fa:86:87:d5:15:80:fc:93:c6:55:33:6a:1d:53:
                    f4:7d:6d:36:91:93:a0:e7:c7:f6:54:aa:c6:bc:d5:
                    ed:32:69:dd:41:b1:b4:6a:1d:be:5d:5e:47:0e:01:
                    2b:20:92:55:59:e4:be:96:cf:94:39:ff:ab:78:9f:
                    4c:40:6a:ec:35:2f:02:98:f9:8a:b1:cb:37:0b:c7:
                    91:d2:8e:39:66:09:de:5f:27:b3:a2:8b:9e:81:0e:
                    de:fe:af:18:45:be:ec:7c:26:03:30:be:40:d7:71:
                    ed:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F4:0E:53:06:94:10:6A:9A:B4:4D:92:6F:D0:F5:E8:21:B0:5F:D9
            X509v3 Authority Key Identifier:
                keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e36392e302f32342d3234203d3e203538383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.47.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:50:bc:86:71:d9:d6:6b:c4:90:fe:f1:49:bc:d6:11:01:b8:
         fd:a3:9b:9c:d8:ae:b4:11:f7:03:cc:c6:33:07:7e:6e:4c:c6:
         97:ca:95:43:34:04:dd:fb:eb:4b:13:e8:3d:ac:8a:e1:cd:c0:
         bf:71:8c:d3:a5:26:b8:b9:9e:3e:ef:0c:31:65:ba:7c:fc:e7:
         54:1d:71:9a:3f:06:4f:07:09:a5:73:4d:e5:fd:50:b4:f2:79:
         4c:92:eb:68:5f:9f:83:62:7d:00:df:24:11:2a:90:9c:9c:5c:
         88:a6:fb:98:51:61:7f:76:b9:cc:89:4b:0a:95:24:90:bd:96:
         67:ba:49:ae:31:e5:ba:a7:a1:df:39:f2:00:0d:ab:33:67:f2:
         3f:86:41:ed:05:b9:48:8c:77:e9:7d:5d:ba:01:ce:66:22:2d:
         bf:b7:9d:66:63:e8:12:ff:9f:92:a0:46:94:f2:e0:9f:a2:97:
         24:0d:e7:2e:89:c2:e9:f0:47:84:06:38:45:9a:4a:a7:c3:04:
         de:6e:22:62:0e:e9:db:ba:4c:8c:a7:30:1e:fc:58:3a:71:65:
         03:90:ef:43:8f:7d:96:fa:14:65:3b:30:0d:58:6b:b1:ac:20:
         b9:52:9e:48:ef:db:a0:bf:44:5f:dc:7e:b2:e4:e9:5f:bf:fd:
         0e:1c:0b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:23:21 2025 by rpki-client