Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3230362e302f32342d3234203d3e203633383539.roa
File:                     3230322e3135322e3230362e302f32342d3234203d3e203633383539.roa (raw, json)
Hash identifier:          /r/8FbAnrRY9+Q4m/2LANGmYkN67339eqGM2Pr09v38=
Subject key identifier:   EF:EF:76:62:D2:F1:75:E0:77:DC:70:6A:BF:88:1A:A1:A7:E3:CB:15
Certificate issuer:       /CN=5058CBC5AF21280546887DEF6CFA4341A8F99150
Certificate serial:       633FB1E11561C6F4C735A49397399DB333455782
Authority key identifier: 50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3230362e302f32342d3234203d3e203633383539.roa
Signing time:             Tue 10 Jun 2025 03:45:14 +0000
ROA not before:           Tue 10 Jun 2025 03:40:14 +0000
ROA not after:            Tue 09 Jun 2026 03:45:14 +0000
asID:                     63859
IP address blocks:        202.152.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl
                          rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 05:10:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:3f:b1:e1:15:61:c6:f4:c7:35:a4:93:97:39:9d:b3:33:45:57:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5058CBC5AF21280546887DEF6CFA4341A8F99150
        Validity
            Not Before: Jun 10 03:40:14 2025 GMT
            Not After : Jun  9 03:45:14 2026 GMT
        Subject: CN=EFEF7662D2F175E077DC706ABF881AA1A7E3CB15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f6:e1:a5:c2:d2:e3:fe:3b:db:0a:aa:bc:8e:
                    cd:fd:d5:3f:aa:09:ba:10:60:71:5f:62:1c:0c:80:
                    50:a7:f6:7c:09:bc:4c:7e:85:a6:f1:62:4a:ea:8d:
                    62:07:b5:aa:c8:0c:99:69:ca:e0:54:83:ac:58:3a:
                    2c:05:ae:d2:e0:f8:6d:f6:f9:2c:55:c7:2a:dd:62:
                    ef:c8:dc:05:29:0b:11:f8:2b:7a:e1:7b:71:ca:41:
                    ec:1d:93:3c:0c:b7:39:e5:9b:d9:28:67:b5:03:81:
                    80:e0:4c:b9:77:6d:62:c5:13:42:b9:a6:7a:18:8d:
                    82:ed:64:2c:a7:e8:dd:12:c9:9c:9c:f8:05:56:b1:
                    31:44:10:23:9d:9f:3c:b3:e9:c9:30:f0:8c:9e:f1:
                    07:36:b8:09:4f:1c:3d:28:e8:fe:0c:63:c2:e2:85:
                    29:58:e3:bf:a9:67:d6:99:b8:37:78:4d:2b:a1:1a:
                    92:9e:40:55:d3:35:90:1f:83:72:7d:3d:29:94:a4:
                    e1:46:cc:0b:bb:94:7e:09:63:ec:e4:73:0a:0e:9f:
                    9f:b7:23:a7:a9:5f:24:85:01:75:65:b0:66:c8:86:
                    b1:ba:5a:97:00:63:f0:fb:f2:c7:17:0f:3a:66:f4:
                    b0:af:81:50:ef:4d:85:97:bc:73:7c:98:b8:7a:b6:
                    c0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:EF:76:62:D2:F1:75:E0:77:DC:70:6A:BF:88:1A:A1:A7:E3:CB:15
            X509v3 Authority Key Identifier:
                keyid:50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3230322e3135322e3230362e302f32342d3234203d3e203633383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.152.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:33:76:bc:51:bc:86:aa:60:e8:a2:24:91:64:f0:f1:1b:1e:
         b5:be:d3:9c:51:b3:67:54:3d:3c:66:63:08:4c:08:e0:35:59:
         f8:fa:ba:35:03:02:dd:13:09:0d:06:76:59:29:dc:bc:fc:c1:
         08:b8:73:94:d0:e5:83:19:39:d2:22:ee:bf:d4:11:d9:7c:54:
         d5:fc:76:4f:82:da:21:85:aa:cc:77:7c:e8:5e:d4:d6:21:9f:
         ef:4e:8f:6d:54:92:c1:e2:2f:42:9f:f6:2c:94:61:a9:3a:5b:
         fb:3f:23:0f:86:f6:7f:87:f6:95:03:fc:3c:eb:ca:ca:a3:a1:
         ff:f1:84:e1:13:94:6f:a3:57:6b:d5:64:be:e2:9c:c1:7f:8c:
         cc:3a:09:a0:f7:ca:85:6f:c2:98:64:67:e3:17:6e:df:cd:62:
         a8:48:4f:c5:79:b4:8f:0d:64:13:bf:69:ed:ee:88:67:fc:7b:
         9b:39:dc:05:c2:f9:a5:0f:cf:9e:56:6b:9c:5d:6e:66:50:52:
         6e:ff:67:51:27:6a:cb:60:57:09:52:81:f7:be:e6:0e:ab:05:
         32:35:b2:ed:85:9b:a2:b1:1a:02:b5:ea:ee:7f:19:4c:f6:fa:
         1d:e0:aa:9a:38:70:34:0b:0d:ca:a8:ca:68:f5:85:9c:c4:47:
         bb:2a:62:4f
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUYz+x4RVhxvTHNaSTlzmdszNFV4IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTA1OENCQzVBRjIxMjgwNTQ2ODg3REVGNkNGQTQzNDFB
OEY5OTE1MDAeFw0yNTA2MTAwMzQwMTRaFw0yNjA2MDkwMzQ1MTRaMDMxMTAvBgNV
BAMTKEVGRUY3NjYyRDJGMTc1RTA3N0RDNzA2QUJGODgxQUExQTdFM0NCMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV9uGlwtLj/jvbCqq8js391T+q
CboQYHFfYhwMgFCn9nwJvEx+habxYkrqjWIHtarIDJlpyuBUg6xYOiwFrtLg+G32
+SxVxyrdYu/I3AUpCxH4K3rhe3HKQewdkzwMtznlm9koZ7UDgYDgTLl3bWLFE0K5
pnoYjYLtZCyn6N0SyZyc+AVWsTFEECOdnzyz6ckw8Iye8Qc2uAlPHD0o6P4MY8Li
hSlY47+pZ9aZuDd4TSuhGpKeQFXTNZAfg3J9PSmUpOFGzAu7lH4JY+zkcwoOn5+3
I6epXySFAXVlsGbIhrG6WpcAY/D78scXDzpm9LCvgVDvTYWXvHN8mLh6tsD3AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU7+92YtLxdeB33HBqv4gaoafjyxUwHwYDVR0j
BBgwFoAUUFjLxa8hKAVGiH3vbPpDQaj5kVAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
OGUzYjM5Yy1kYTExLTQ1ZWUtYWFiMy01Y2IxNGVjNDQ3MGMvMC81MDU4Q0JDNUFG
MjEyODA1NDY4ODdERUY2Q0ZBNDM0MUE4Rjk5MTUwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTA1OENCQzVBRjIxMjgwNTQ2ODg3REVGNkNGQTQzNDFBOEY5
OTE1MC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q4ZTNiMzljLWRhMTEtNDVlZS1h
YWIzLTVjYjE0ZWM0NDcwYy8wLzMyMzAzMjJlMzEzNTMyMmUzMjMwMzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAypjOMA0GCSqG
SIb3DQEBCwUAA4IBAQA/M3a8UbyGqmDooiSRZPDxGx61vtOcUbNnVD08ZmMITAjg
NVn4+ro1AwLdEwkNBnZZKdy8/MEIuHOU0OWDGTnSIu6/1BHZfFTV/HZPgtohharM
d3zoXtTWIZ/vTo9tVJLB4i9Cn/YslGGpOlv7PyMPhvZ/h/aVA/w868rKo6H/8YTh
E5Rvo1dr1WS+4pzBf4zMOgmg98qFb8KYZGfjF27fzWKoSE/FebSPDWQTv2nt7ohn
/HubOdwFwvmlD8+eVmucXW5mUFJu/2dRJ2rLYFcJUoH3vuYOqwUyNbLthZuisRoC
terufxlM9vod4KqaOHA0Cw3KqMpo9YWcxEe7KmJP
-----END CERTIFICATE-----
Generated at Tue Jun 17 12:43:31 2025 by rpki-client