Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/3230322e39332e32382e302f32342d3234203d3e203233393532.roa
File:                     3230322e39332e32382e302f32342d3234203d3e203233393532.roa (raw, json)
Hash identifier:          JwKnQTdgTXzvOyRVd4mostiUpvJc30Z/4Hc/DZwjPkw=
Subject key identifier:   AD:DB:CF:F8:9C:8E:42:BF:5E:E9:AD:07:B3:7C:77:DF:9F:68:35:70
Certificate issuer:       /CN=F389B5570A768F4811B6377427EE5A9710A3078F
Certificate serial:       5CDD18716D82BE15A26D6FF6F323928C405C4A03
Authority key identifier: F3:89:B5:57:0A:76:8F:48:11:B6:37:74:27:EE:5A:97:10:A3:07:8F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F389B5570A768F4811B6377427EE5A9710A3078F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/3230322e39332e32382e302f32342d3234203d3e203233393532.roa
Signing time:             Thu 19 Jun 2025 14:43:33 +0000
ROA not before:           Thu 19 Jun 2025 14:38:33 +0000
ROA not after:            Thu 18 Jun 2026 14:43:33 +0000
asID:                     23952
IP address blocks:        202.93.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.crl
                          rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F389B5570A768F4811B6377427EE5A9710A3078F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Jul 2025 21:15:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:dd:18:71:6d:82:be:15:a2:6d:6f:f6:f3:23:92:8c:40:5c:4a:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F389B5570A768F4811B6377427EE5A9710A3078F
        Validity
            Not Before: Jun 19 14:38:33 2025 GMT
            Not After : Jun 18 14:43:33 2026 GMT
        Subject: CN=ADDBCFF89C8E42BF5EE9AD07B37C77DF9F683570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:51:56:c3:62:e6:45:ff:21:85:58:d6:b7:7c:
                    5a:d5:fd:06:34:1f:df:38:32:a2:17:d5:3f:4c:d9:
                    90:e5:f6:80:e3:7a:a6:2c:dc:44:05:a6:75:8b:98:
                    c9:99:cc:69:61:03:da:b6:06:23:af:40:e0:ce:87:
                    18:d1:c0:96:ca:63:6a:71:00:55:5a:b8:21:6d:28:
                    df:53:63:c8:57:80:69:21:da:e4:d5:97:a1:f6:91:
                    5b:83:04:b5:c2:e9:ae:b6:3f:67:cc:90:50:ae:aa:
                    b6:c9:d6:0b:cd:cf:35:b7:75:e5:9b:f8:51:6d:f2:
                    53:ef:7e:4c:6b:80:66:6d:b4:c4:7a:b9:00:ad:83:
                    35:bd:7b:1b:9f:0d:09:f0:ad:8c:78:76:26:6e:ee:
                    1d:69:84:41:61:8b:ef:c0:bc:5c:84:8c:84:5d:da:
                    9b:08:c1:b6:48:88:2d:81:34:08:f6:36:d2:ee:f5:
                    0b:16:3d:c5:f2:5f:0a:70:41:6d:b8:1c:7d:51:d0:
                    c0:57:f9:4f:ca:3a:e0:58:5a:62:d3:47:fe:dd:41:
                    66:7f:82:85:3e:77:cc:57:35:f2:6b:43:b0:2f:5c:
                    19:4f:b4:2e:8d:42:22:98:71:6b:09:c3:8b:18:28:
                    bd:1f:40:56:63:55:8d:4f:cf:5a:9f:ae:80:47:f0:
                    84:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:DB:CF:F8:9C:8E:42:BF:5E:E9:AD:07:B3:7C:77:DF:9F:68:35:70
            X509v3 Authority Key Identifier:
                keyid:F3:89:B5:57:0A:76:8F:48:11:B6:37:74:27:EE:5A:97:10:A3:07:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F389B5570A768F4811B6377427EE5A9710A3078F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/3230322e39332e32382e302f32342d3234203d3e203233393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:e3:5e:5a:55:61:10:d8:86:dc:2f:d8:0e:0d:ee:1c:93:dd:
         d4:90:60:d5:6a:b1:11:d4:0c:ec:d4:a3:16:93:d4:7b:ba:d2:
         fd:84:33:e1:37:8a:8b:50:34:2a:4f:0b:7a:f0:70:33:a6:ea:
         74:b0:56:5c:97:24:54:e7:37:19:b4:fd:6a:8f:76:25:cf:05:
         0e:d0:79:1f:2e:84:03:ff:11:63:bc:04:c2:05:ff:7a:bb:c7:
         af:2d:1a:32:c9:0b:30:0e:55:6f:be:77:92:22:ee:5d:68:45:
         34:80:da:90:53:5d:d3:26:69:df:b9:1d:ad:d4:11:80:84:5c:
         e2:85:b2:18:52:61:bb:a2:73:a7:92:29:0d:8c:21:70:e1:9a:
         b4:77:c1:bd:c8:2d:e7:43:55:fb:23:64:09:44:d6:84:6d:b5:
         80:9e:2e:cd:d5:be:4b:b3:47:b8:9f:aa:8c:d3:1a:18:4a:c5:
         24:fb:68:41:17:7a:f9:ce:3f:dd:f5:0a:2f:51:5e:9c:a3:b7:
         48:7f:29:e4:06:ae:c7:b4:9a:89:b4:3e:02:4e:2e:0c:a8:1f:
         36:88:54:41:39:c4:c9:8d:54:2d:b2:0c:c6:33:fc:9e:d9:0e:
         e7:02:60:7b:bb:53:ad:57:b9:9f:91:fe:2e:cd:55:2e:44:16:
         a7:3c:d6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:16:08 2025 by rpki-client