Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/3230322e3138302e34382e302f32342d3234203d3e203338313435.roa
File:                     3230322e3138302e34382e302f32342d3234203d3e203338313435.roa (raw, json)
Hash identifier:          ZG5lRIgVPPnPalDKOSGSXgvgYYzSif5pGZ3BPHLpeQc=
Subject key identifier:   C6:28:1A:36:0E:D0:D5:DF:7E:AD:C6:29:AB:6C:5C:A1:1E:43:02:30
Certificate issuer:       /CN=365454AF0090F9E623861AF2120855412F7447D1
Certificate serial:       132F2C4EBB14C729D7C5186BD0136CD3CC753340
Authority key identifier: 36:54:54:AF:00:90:F9:E6:23:86:1A:F2:12:08:55:41:2F:74:47:D1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/365454AF0090F9E623861AF2120855412F7447D1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/3230322e3138302e34382e302f32342d3234203d3e203338313435.roa
Signing time:             Thu 14 Aug 2025 08:00:00 +0000
ROA not before:           Thu 14 Aug 2025 07:55:00 +0000
ROA not after:            Thu 13 Aug 2026 08:00:00 +0000
asID:                     38145
IP address blocks:        202.180.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/365454AF0090F9E623861AF2120855412F7447D1.crl
                          rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/365454AF0090F9E623861AF2120855412F7447D1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/365454AF0090F9E623861AF2120855412F7447D1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Aug 2025 03:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:2f:2c:4e:bb:14:c7:29:d7:c5:18:6b:d0:13:6c:d3:cc:75:33:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=365454AF0090F9E623861AF2120855412F7447D1
        Validity
            Not Before: Aug 14 07:55:00 2025 GMT
            Not After : Aug 13 08:00:00 2026 GMT
        Subject: CN=C6281A360ED0D5DF7EADC629AB6C5CA11E430230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ba:2d:b5:2f:3b:2e:72:fc:74:d2:6a:84:59:
                    cb:20:3b:a2:cf:61:64:8e:08:c0:de:ea:d4:c8:90:
                    f6:10:1a:13:85:5b:c9:5a:55:e9:05:c3:8a:b7:3b:
                    ed:7f:e3:91:51:1d:f6:3e:0f:92:7a:54:dd:7d:a0:
                    94:8b:70:d8:97:f8:f8:0a:07:57:f1:bc:f8:60:63:
                    7c:d7:6b:12:72:b3:02:2f:b0:30:6f:79:96:6b:ba:
                    f0:0d:fd:1c:eb:56:02:a4:ac:e8:42:8f:b9:ea:a9:
                    d9:c0:64:fa:90:4a:74:bd:14:24:1a:f2:47:9c:74:
                    e4:d8:ba:32:4b:40:e7:3c:ee:7b:b7:40:a7:13:e9:
                    52:64:95:92:78:b0:16:45:43:b7:2d:1c:89:d7:9d:
                    1d:36:78:14:9f:47:08:a4:fd:a6:80:70:34:4b:09:
                    72:09:ec:86:23:92:fa:40:0f:b2:09:8c:b6:a5:41:
                    57:23:bd:b4:eb:14:d6:27:20:10:7b:9c:1c:44:38:
                    65:e1:3c:0a:4d:88:b1:01:bd:90:1c:cd:a8:aa:86:
                    f7:30:13:98:97:9b:1b:71:1a:2a:ee:02:93:aa:73:
                    af:4e:18:69:df:e0:e7:71:84:50:70:6c:93:a9:55:
                    6d:d9:df:a4:ba:c9:df:a1:35:5d:ff:0d:3d:cf:23:
                    d6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:28:1A:36:0E:D0:D5:DF:7E:AD:C6:29:AB:6C:5C:A1:1E:43:02:30
            X509v3 Authority Key Identifier:
                keyid:36:54:54:AF:00:90:F9:E6:23:86:1A:F2:12:08:55:41:2F:74:47:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/365454AF0090F9E623861AF2120855412F7447D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/365454AF0090F9E623861AF2120855412F7447D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/3230322e3138302e34382e302f32342d3234203d3e203338313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.180.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:e2:b4:96:71:4c:ae:0e:3e:ae:79:0b:8b:b6:10:3b:6d:f5:
         96:d9:1e:d0:e5:d8:8c:04:b5:de:dd:c1:ed:72:0f:89:26:51:
         9f:1e:74:5c:9a:33:c5:8e:7f:4c:71:c9:2c:9f:2f:5d:7e:af:
         00:d7:cd:c9:d8:c9:8a:a0:fc:b4:76:0d:b6:b9:23:13:ff:df:
         62:79:38:b4:c4:5e:ad:5d:f6:6f:44:af:e8:93:dc:72:e8:16:
         58:de:0c:f4:6e:35:a0:58:a1:69:29:73:07:39:d5:b5:8d:45:
         1e:03:40:db:44:ee:a3:ca:c7:67:eb:a9:d1:1f:6c:86:00:d0:
         87:67:c4:eb:a1:05:be:92:c0:47:3c:33:66:a7:46:42:f9:63:
         36:51:40:2c:42:70:5f:81:51:42:15:3a:b8:b6:0a:f9:a7:21:
         08:6b:73:30:38:0e:fb:19:fc:54:d1:80:42:ad:b5:b7:50:7a:
         5d:47:b6:9e:16:1d:f8:f6:d9:80:7a:63:5c:aa:3b:24:7f:75:
         a4:3c:a1:22:49:c4:58:3e:99:04:96:8b:da:29:08:0a:ed:b6:
         6e:23:c8:92:eb:62:b0:d4:2c:a0:7c:fc:ab:a7:44:72:08:44:
         69:a9:eb:95:61:1f:23:fa:51:02:2a:2b:c4:7b:e4:dd:0a:54:
         c6:1f:9c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:59:59 2025 by rpki-client