Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e34382e302f32302d3234203d3e203435333132.roa
File:                     3230322e38312e34382e302f32302d3234203d3e203435333132.roa (raw, json)
Hash identifier:          tAM+kYcU8oWOH4MCLwhnpkSVD6rkiwne2W+rJI1kUNE=
Subject key identifier:   0D:5E:57:ED:F5:A0:6B:9D:7F:E4:CC:DA:38:82:56:43:BF:30:2A:CC
Certificate issuer:       /CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
Certificate serial:       5DD8B7EE33E37CE775AABA976E21C5C92DD157C4
Authority key identifier: 15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e34382e302f32302d3234203d3e203435333132.roa
Signing time:             Wed 07 May 2025 07:02:52 +0000
ROA not before:           Wed 07 May 2025 06:57:52 +0000
ROA not after:            Wed 06 May 2026 07:02:52 +0000
asID:                     45312
IP address blocks:        202.81.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl
                          rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 May 2025 02:04:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d8:b7:ee:33:e3:7c:e7:75:aa:ba:97:6e:21:c5:c9:2d:d1:57:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
        Validity
            Not Before: May  7 06:57:52 2025 GMT
            Not After : May  6 07:02:52 2026 GMT
        Subject: CN=0D5E57EDF5A06B9D7FE4CCDA38825643BF302ACC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c7:87:d5:1c:57:57:a7:e6:b4:1f:8b:f7:28:
                    85:0c:f4:a5:ad:5a:b5:f9:df:f4:dc:e2:92:cf:11:
                    6b:fc:c7:7e:a2:f7:8b:49:aa:57:93:c5:69:49:cc:
                    63:60:5f:4d:6c:aa:33:db:8f:da:fb:eb:50:da:53:
                    cc:f7:f1:bb:af:ef:aa:a3:aa:94:ef:40:68:60:45:
                    85:ef:0c:57:0a:ec:a3:0b:bf:f8:60:78:93:e5:15:
                    0f:eb:1f:80:86:5b:84:b6:64:2c:09:0b:6e:d8:5a:
                    2b:61:c8:08:78:9f:67:90:9a:f9:d6:49:ba:03:65:
                    0a:85:21:e6:a5:9a:e1:c4:4e:12:7b:ed:66:ce:8f:
                    09:3b:5e:e2:79:69:41:fd:07:4a:2f:81:56:f7:f4:
                    de:02:ea:bd:fe:56:1a:80:9f:52:da:eb:a5:7e:5f:
                    76:e9:c1:74:a3:f1:e5:d1:1d:47:29:81:56:3e:3d:
                    3f:c4:92:bc:b5:c6:3b:4d:82:e4:6c:92:7b:71:92:
                    0b:16:72:60:3f:3f:eb:f6:44:a5:91:0e:d9:96:51:
                    4b:0c:2f:78:f0:94:b7:26:5c:e0:11:89:ae:c5:2d:
                    bb:41:64:ea:7e:d5:2e:04:36:4b:3e:ab:22:24:68:
                    99:9c:b4:44:19:5d:3f:5b:8b:0c:22:fe:47:a5:cc:
                    5e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5E:57:ED:F5:A0:6B:9D:7F:E4:CC:DA:38:82:56:43:BF:30:2A:CC
            X509v3 Authority Key Identifier:
                keyid:15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e34382e302f32302d3234203d3e203435333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.81.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c5:a7:27:35:fc:fc:20:53:4b:53:30:c1:83:3a:b7:a9:7d:97:
         bd:4f:ef:99:42:3e:db:89:ae:79:38:65:56:49:b2:77:5d:fe:
         8a:df:f2:ac:06:70:d7:ab:5e:ac:9e:98:a9:d5:6b:4e:4e:01:
         80:07:4c:8d:70:53:77:b2:3c:e4:83:6a:d7:1a:c6:56:c5:fe:
         01:8a:e0:d8:a3:b1:56:77:b4:2f:af:1a:94:53:83:2b:de:db:
         67:20:fe:27:b2:6c:f9:ca:e8:46:8c:82:5f:aa:a6:2d:c1:cc:
         18:6f:e5:fd:4f:96:d7:26:a0:d7:a0:31:dd:28:a1:e0:f3:41:
         59:56:c4:23:13:d8:01:8f:ec:7c:e4:9a:9d:cc:f5:cf:37:17:
         62:19:c7:80:8e:43:73:1c:07:2b:a4:01:e5:2b:ce:38:49:a0:
         e1:39:3c:49:2a:9a:c8:f9:8f:37:7f:16:77:63:6b:1e:d7:68:
         3d:77:95:1c:38:0b:c6:5c:68:b7:86:2b:d6:88:f7:b5:9f:fb:
         61:c4:0a:ed:09:d9:1b:e1:49:83:09:da:0c:d9:ae:c4:9a:08:
         0e:0b:88:32:1e:be:b2:2e:1f:07:de:53:6e:e9:b7:d1:a0:d7:
         3a:4e:4c:1a:a4:21:53:2d:80:f6:60:a6:f0:92:a6:3a:25:3d:
         5b:e8:ca:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:14:30 2025 by rpki-client