Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/3230322e3138302e35302e302f32342d3234203d3e203338313435.roa
File:                     3230322e3138302e35302e302f32342d3234203d3e203338313435.roa (raw, json)
Hash identifier:          bZX75iy9N+Ln9f4W1cEkOcocBbvC0fi1o2SUf4QjlZA=
Subject key identifier:   15:DA:BE:23:89:FE:25:C3:7E:7B:5D:B7:C8:43:AA:8F:41:F8:DF:1B
Certificate issuer:       /CN=365454AF0090F9E623861AF2120855412F7447D1
Certificate serial:       285AB1C253C02BF15AA4EAF444DD67631FCFB97F
Authority key identifier: 36:54:54:AF:00:90:F9:E6:23:86:1A:F2:12:08:55:41:2F:74:47:D1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/365454AF0090F9E623861AF2120855412F7447D1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/3230322e3138302e35302e302f32342d3234203d3e203338313435.roa
Signing time:             Thu 14 Aug 2025 05:00:00 +0000
ROA not before:           Thu 14 Aug 2025 04:55:00 +0000
ROA not after:            Thu 13 Aug 2026 05:00:00 +0000
asID:                     38145
IP address blocks:        202.180.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/365454AF0090F9E623861AF2120855412F7447D1.crl
                          rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/365454AF0090F9E623861AF2120855412F7447D1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/365454AF0090F9E623861AF2120855412F7447D1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Aug 2025 03:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:5a:b1:c2:53:c0:2b:f1:5a:a4:ea:f4:44:dd:67:63:1f:cf:b9:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=365454AF0090F9E623861AF2120855412F7447D1
        Validity
            Not Before: Aug 14 04:55:00 2025 GMT
            Not After : Aug 13 05:00:00 2026 GMT
        Subject: CN=15DABE2389FE25C37E7B5DB7C843AA8F41F8DF1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d4:9d:90:15:a4:d1:32:96:ad:f9:77:d0:31:
                    5f:78:78:70:f0:a8:75:7f:5c:ac:5c:62:e9:43:bb:
                    c3:11:b7:2c:e8:cb:22:67:07:00:e9:0e:57:73:cd:
                    ae:45:5a:63:10:68:45:11:f0:90:74:11:16:59:52:
                    ae:55:fc:7a:de:67:1a:30:a1:10:46:56:0d:37:cf:
                    ff:a4:9e:ea:2e:f3:7c:a2:fe:13:23:6a:55:4b:dc:
                    9f:fd:8a:7b:bf:f8:d6:e9:6b:9b:84:57:2e:d9:bb:
                    1e:db:80:e7:83:bd:88:0a:75:af:b0:1e:37:7f:d6:
                    a0:cf:e6:9d:1f:51:75:d3:a0:ff:2b:26:c8:34:ce:
                    6f:6e:c7:67:ce:75:74:fa:d8:7a:20:bf:47:ae:07:
                    fc:6e:8c:f1:c1:23:cb:77:4c:4d:8a:88:d1:2b:59:
                    fa:44:de:63:83:90:94:29:d0:b6:02:23:ea:80:55:
                    78:93:2a:19:c2:69:92:0f:1c:d3:4e:f1:d8:8d:61:
                    71:d5:9e:10:80:8a:b0:ad:c6:41:51:9c:44:66:93:
                    42:db:b9:e3:5d:15:0a:46:8a:01:90:1c:fb:ff:31:
                    8d:98:5e:56:5f:df:c3:5d:d2:65:5b:9a:6a:eb:0e:
                    32:0f:b9:79:46:ce:1e:4d:a0:72:13:26:61:9c:f3:
                    97:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:DA:BE:23:89:FE:25:C3:7E:7B:5D:B7:C8:43:AA:8F:41:F8:DF:1B
            X509v3 Authority Key Identifier:
                keyid:36:54:54:AF:00:90:F9:E6:23:86:1A:F2:12:08:55:41:2F:74:47:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/365454AF0090F9E623861AF2120855412F7447D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/365454AF0090F9E623861AF2120855412F7447D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/3230322e3138302e35302e302f32342d3234203d3e203338313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.180.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:78:21:25:b1:c1:a0:6f:a8:89:6f:c1:12:96:da:03:e0:6a:
         f1:eb:ac:3d:29:f3:c5:91:cc:ab:d8:08:9a:99:7e:79:13:7b:
         a2:be:85:ee:37:30:3a:b8:e3:04:39:f7:79:69:25:d5:03:63:
         69:9d:d4:a8:06:69:43:f2:10:fb:fa:cd:c6:6f:36:a0:52:df:
         c5:81:c6:f1:9a:b6:c2:89:3f:b7:38:a7:02:da:2e:0e:33:55:
         bf:b3:d4:d7:fe:32:82:7e:bd:de:8c:31:e5:62:0d:42:a0:09:
         20:ff:3b:8d:0f:81:f3:17:5c:17:c2:0d:59:cb:f6:24:4b:bb:
         6b:e5:8a:a2:ce:3d:27:df:07:5b:a0:3c:e5:89:87:45:b8:ce:
         19:62:a5:15:a2:58:19:a7:15:c1:24:e7:6c:2f:37:6f:37:e2:
         1b:0a:86:6b:ee:ec:23:2a:d6:4d:37:59:8a:ea:01:b4:4d:fc:
         82:5d:70:dd:dd:4c:51:cf:f0:59:ed:7c:9c:53:5e:b5:9b:51:
         f8:f2:0b:4f:12:a8:72:80:8a:22:f9:02:9a:e8:7b:49:04:da:
         3f:66:f1:c5:ad:58:24:16:f7:13:b4:93:95:cf:b5:15:13:f3:
         c3:60:08:5f:b6:fa:01:b9:6b:0e:f9:b2:64:11:07:68:d8:22:
         a1:b5:a0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:40:28 2025 by rpki-client