Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/3230322e39332e33302e302f32342d3234203d3e203233393532.roa
File:                     3230322e39332e33302e302f32342d3234203d3e203233393532.roa (raw, json)
Hash identifier:          UrTuhs6hr6z8RmxXE0waBTEObzjTqxDo0ru50RV8iPg=
Subject key identifier:   C6:0B:E0:2C:99:83:FD:BD:51:5C:CD:FC:99:4F:01:DF:66:79:08:69
Certificate issuer:       /CN=F389B5570A768F4811B6377427EE5A9710A3078F
Certificate serial:       6CC2553822D3866A6DC127012387919FC2B0791A
Authority key identifier: F3:89:B5:57:0A:76:8F:48:11:B6:37:74:27:EE:5A:97:10:A3:07:8F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F389B5570A768F4811B6377427EE5A9710A3078F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/3230322e39332e33302e302f32342d3234203d3e203233393532.roa
Signing time:             Thu 19 Jun 2025 14:45:34 +0000
ROA not before:           Thu 19 Jun 2025 14:40:34 +0000
ROA not after:            Thu 18 Jun 2026 14:45:34 +0000
asID:                     23952
IP address blocks:        202.93.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.crl
                          rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F389B5570A768F4811B6377427EE5A9710A3078F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Jul 2025 21:15:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c2:55:38:22:d3:86:6a:6d:c1:27:01:23:87:91:9f:c2:b0:79:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F389B5570A768F4811B6377427EE5A9710A3078F
        Validity
            Not Before: Jun 19 14:40:34 2025 GMT
            Not After : Jun 18 14:45:34 2026 GMT
        Subject: CN=C60BE02C9983FDBD515CCDFC994F01DF66790869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0b:5f:05:0a:83:69:cb:9f:4b:75:16:b4:c8:
                    dc:7e:db:5f:76:33:d5:c0:5a:00:c1:9e:0f:bb:95:
                    12:d6:be:b1:80:dd:59:ef:c9:e9:bc:c6:a7:85:fc:
                    05:01:c8:cc:fe:4a:a3:ee:23:64:cd:ba:6a:70:2c:
                    b0:ac:07:51:96:52:be:b0:70:de:9c:9a:1c:d9:0d:
                    df:e4:80:1a:06:fc:73:ae:ed:ae:ec:59:6a:50:a6:
                    0f:13:88:ba:ff:f0:cc:3a:e2:57:f9:f9:21:d9:02:
                    1c:6c:86:88:9d:84:b3:82:75:c5:a3:c4:08:c2:fc:
                    8a:0e:76:94:f3:68:11:7a:47:cb:be:82:92:c4:e0:
                    63:2a:ba:58:26:32:81:fd:f5:74:38:62:b1:fa:b0:
                    39:70:7d:d2:1a:43:44:b8:68:65:2a:ca:2b:35:5c:
                    2f:c6:d3:8d:58:5c:5d:67:87:ce:ae:da:e1:a2:31:
                    e9:bd:81:a5:2a:a5:cd:0c:d7:8c:c2:2e:6b:73:98:
                    09:57:22:27:57:43:a8:90:91:02:c9:6d:a9:f7:17:
                    c7:3d:38:61:ee:aa:f5:95:67:90:84:fd:6a:bd:5f:
                    6a:8a:d0:4e:e2:21:1c:51:51:3c:2f:8c:fa:8e:07:
                    0e:9f:bc:6c:0d:df:d5:bc:1e:6f:ec:ac:26:6f:11:
                    e4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:0B:E0:2C:99:83:FD:BD:51:5C:CD:FC:99:4F:01:DF:66:79:08:69
            X509v3 Authority Key Identifier:
                keyid:F3:89:B5:57:0A:76:8F:48:11:B6:37:74:27:EE:5A:97:10:A3:07:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F389B5570A768F4811B6377427EE5A9710A3078F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/3230322e39332e33302e302f32342d3234203d3e203233393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:ba:63:0f:22:cd:a7:1c:1c:af:70:21:b4:49:a9:5d:5b:36:
         5b:32:14:28:d8:b4:94:ae:8e:47:e7:7b:fd:ac:e7:2b:f9:ab:
         f4:64:b9:d8:3d:f0:49:c3:d4:f2:ea:4d:21:7e:86:41:ce:fd:
         0d:d6:e2:51:f6:ff:7c:29:0a:b7:a7:de:fb:9e:ba:90:e7:23:
         07:bb:55:0c:90:3a:d2:a8:c6:11:ec:4a:3c:49:6d:16:8f:13:
         1a:f1:87:6c:97:e2:b8:33:4e:8c:48:c4:b5:27:99:6c:75:46:
         2e:84:12:27:32:59:bc:34:c5:5c:c8:25:07:19:a4:10:84:91:
         5a:d8:37:e0:bc:76:cc:86:8c:69:91:93:bf:2d:75:09:fd:c2:
         39:72:34:d9:07:21:27:09:ac:31:d5:f2:35:82:5b:1c:f4:36:
         da:5b:ee:5d:b1:da:d0:fc:d1:c4:8d:c3:cd:3e:b0:55:c8:8c:
         f6:5e:94:b0:54:5b:9e:14:65:00:1f:4b:86:66:3e:2a:86:cb:
         6e:5e:55:b9:39:5d:f9:cf:52:02:37:d2:07:fe:d5:a6:31:92:
         cd:99:69:5e:db:8e:c2:98:bd:3d:4d:b1:b2:e7:e4:b8:84:b1:
         b7:b7:75:d9:6b:1d:c3:0d:f5:c0:20:eb:f5:de:f7:d6:f3:2b:
         74:ab:fa:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:13:57 2025 by rpki-client