Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/3230322e3138302e34392e302f32342d3234203d3e203338313435.roa
File:                     3230322e3138302e34392e302f32342d3234203d3e203338313435.roa (raw, json)
Hash identifier:          48G8rWgbkd9q0EBSK1XNOH/9+qJpc8zHTn5QZMpRRfs=
Subject key identifier:   A7:5C:B8:94:53:7A:70:0E:2F:CF:78:F3:76:C7:EB:13:88:71:E2:01
Certificate issuer:       /CN=365454AF0090F9E623861AF2120855412F7447D1
Certificate serial:       1444D06ED1664EEEAAC0F2B2BAB7A67C8F04C68C
Authority key identifier: 36:54:54:AF:00:90:F9:E6:23:86:1A:F2:12:08:55:41:2F:74:47:D1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/365454AF0090F9E623861AF2120855412F7447D1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/3230322e3138302e34392e302f32342d3234203d3e203338313435.roa
Signing time:             Thu 14 Aug 2025 06:00:00 +0000
ROA not before:           Thu 14 Aug 2025 05:55:00 +0000
ROA not after:            Thu 13 Aug 2026 06:00:00 +0000
asID:                     38145
IP address blocks:        202.180.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/365454AF0090F9E623861AF2120855412F7447D1.crl
                          rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/365454AF0090F9E623861AF2120855412F7447D1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/365454AF0090F9E623861AF2120855412F7447D1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Aug 2025 03:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:44:d0:6e:d1:66:4e:ee:aa:c0:f2:b2:ba:b7:a6:7c:8f:04:c6:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=365454AF0090F9E623861AF2120855412F7447D1
        Validity
            Not Before: Aug 14 05:55:00 2025 GMT
            Not After : Aug 13 06:00:00 2026 GMT
        Subject: CN=A75CB894537A700E2FCF78F376C7EB138871E201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:43:aa:d3:24:9e:ff:41:2f:57:04:a0:fd:b1:
                    5b:0d:75:c6:06:c7:7b:3b:96:e5:a6:b4:02:a0:e6:
                    a7:41:9b:4c:43:27:60:b9:10:e5:6b:c4:a3:2a:7a:
                    43:83:cd:68:34:7e:5d:ba:13:e6:ab:d5:46:cb:31:
                    37:1f:94:c7:f6:53:76:ec:da:10:b7:e1:0a:89:6f:
                    63:85:5d:d2:af:a5:96:23:2b:3d:ad:4c:5f:3c:21:
                    26:18:a9:25:a8:77:12:1b:1d:d0:5b:e1:50:5b:5e:
                    6c:4f:eb:2f:c8:06:0c:e3:5a:11:12:bf:07:44:39:
                    6a:02:96:4f:1a:75:3e:55:4e:ac:62:75:c5:1c:cb:
                    1e:92:cf:ee:c5:a9:5c:23:02:b8:fc:2b:1b:73:4b:
                    d9:37:c1:ef:dc:47:42:32:f4:ce:2a:fc:06:14:5d:
                    45:be:cd:e2:e8:c9:cb:5e:07:79:67:c5:47:7e:bf:
                    0b:0d:5e:9f:3b:66:ff:95:8b:64:19:5b:45:06:52:
                    34:c4:bf:a8:57:ba:f2:74:41:7d:f6:78:25:ef:3e:
                    3b:49:ef:ec:bc:2a:ef:28:ad:2d:1e:ca:b7:57:d6:
                    23:45:d3:2c:0e:5a:c0:6d:34:bc:66:7f:ba:d7:17:
                    3c:6b:2c:77:17:5f:6a:03:ff:7b:e9:ad:8c:8c:23:
                    37:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:5C:B8:94:53:7A:70:0E:2F:CF:78:F3:76:C7:EB:13:88:71:E2:01
            X509v3 Authority Key Identifier:
                keyid:36:54:54:AF:00:90:F9:E6:23:86:1A:F2:12:08:55:41:2F:74:47:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/365454AF0090F9E623861AF2120855412F7447D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/365454AF0090F9E623861AF2120855412F7447D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/3230322e3138302e34392e302f32342d3234203d3e203338313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.180.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:cb:47:b9:91:a0:1e:26:40:cd:d7:42:74:b4:1f:8d:8c:8a:
         2f:9f:42:4e:a4:e1:18:79:f6:38:00:21:2c:3a:a4:f8:67:01:
         08:8a:eb:34:55:fb:5c:1c:3f:d5:3f:78:6e:3f:3e:d6:76:96:
         da:da:1e:ba:cd:e2:32:56:e4:09:f4:66:2d:79:69:a1:f8:32:
         b2:ce:2a:c6:22:45:cc:0d:f8:c2:54:cd:ee:89:ca:b3:57:3d:
         be:ff:29:7d:3a:f2:c3:61:16:50:10:c5:22:f3:49:77:65:f5:
         8f:0d:3e:37:77:1d:58:04:ba:9b:1c:cf:89:15:1f:41:80:11:
         55:0a:e8:cf:78:f2:83:7d:2c:a7:72:94:e6:ba:ab:aa:1b:fa:
         5c:e1:d5:88:02:82:52:e5:1d:f8:30:8b:a1:25:97:05:63:dd:
         dc:94:0a:92:75:86:ac:f1:83:34:f3:0d:e0:50:af:ca:d5:61:
         2a:1f:7a:ce:1d:dd:73:c2:e8:5c:29:09:d0:51:65:c4:7a:d5:
         2c:d2:99:d9:8c:22:09:7e:92:01:02:4f:b2:98:81:91:82:1c:
         a6:5d:7c:2f:18:ec:ef:cf:f6:bd:a1:50:f9:76:7a:1e:94:ca:
         74:49:38:9c:7c:10:2e:2e:f3:09:e2:57:ec:2f:e5:8f:b5:39:
         ff:b5:1a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:39:16 2025 by rpki-client