Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e32342e302f32342d3234203d3e203234353235.roa
File:                     3230332e3135332e32342e302f32342d3234203d3e203234353235.roa (raw, json)
Hash identifier:          2t/tR4FwnY9mtcgV6zTc0+m7RjqW5ATBvAg5ZlC7aRQ=
Subject key identifier:   3B:FE:11:5A:61:51:02:90:DA:80:42:F4:6D:31:CE:87:38:72:45:05
Certificate issuer:       /CN=ADCB9F9DF56E90B39B5344118194104F46A83702
Certificate serial:       69A03BED30DFB36DA046190DA80FF6AF65A12CCC
Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e32342e302f32342d3234203d3e203234353235.roa
Signing time:             Sat 03 May 2025 09:00:02 +0000
ROA not before:           Sat 03 May 2025 08:55:02 +0000
ROA not after:            Sat 02 May 2026 09:00:02 +0000
asID:                     24525
IP address blocks:        203.153.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl
                          rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 May 2025 02:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:a0:3b:ed:30:df:b3:6d:a0:46:19:0d:a8:0f:f6:af:65:a1:2c:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702
        Validity
            Not Before: May  3 08:55:02 2025 GMT
            Not After : May  2 09:00:02 2026 GMT
        Subject: CN=3BFE115A61510290DA8042F46D31CE8738724505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6e:a9:e6:14:c2:a5:98:18:bf:a2:3e:f0:45:
                    bf:59:70:a5:9f:8b:d7:8c:fb:6a:b4:bc:b8:c1:2b:
                    df:ff:68:9e:e3:78:92:4a:3a:28:ae:03:26:6d:7f:
                    e1:3f:fa:f2:cb:5d:7e:de:4c:2c:95:da:16:27:5f:
                    50:52:3d:e1:c2:eb:2a:aa:eb:24:4a:c7:77:41:15:
                    8e:2e:28:7d:eb:82:bd:eb:05:e1:39:b2:97:7b:d4:
                    0d:a0:07:fa:8c:68:2e:ad:7d:76:81:c2:86:25:01:
                    eb:6e:63:1e:27:ed:c7:51:b4:2a:92:e0:3d:57:ee:
                    0c:a6:5b:05:fb:b5:ea:09:c1:aa:3e:fd:5c:82:35:
                    d9:b5:a5:e0:1b:55:0e:e0:1b:06:0d:c4:ab:0a:db:
                    a9:6e:06:5e:0e:ad:a4:0c:37:d3:ba:9c:08:a4:1d:
                    61:fa:f6:d7:8e:af:91:0e:cc:b9:b9:fa:2d:7d:69:
                    9f:08:8a:68:de:83:7f:4c:5e:a3:ce:06:8d:0f:93:
                    6a:10:ae:b9:07:e7:63:45:5d:d8:e5:0d:83:5a:2b:
                    09:13:2a:5e:05:2c:60:b6:8a:b4:07:db:51:b5:6a:
                    6f:f9:c0:7b:a9:15:10:20:c5:c4:0c:39:0e:16:ae:
                    de:a8:13:ea:1a:64:78:d6:29:17:52:a5:08:97:c9:
                    cd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:FE:11:5A:61:51:02:90:DA:80:42:F4:6D:31:CE:87:38:72:45:05
            X509v3 Authority Key Identifier:
                keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e32342e302f32342d3234203d3e203234353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.153.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:b9:8e:ac:f3:f6:aa:d9:eb:87:76:8b:73:91:e7:31:93:eb:
         74:a7:74:ff:8b:07:76:73:ed:44:9c:82:ac:2c:ec:07:2b:71:
         a4:62:35:40:b0:57:75:86:bf:4d:b4:f2:49:1d:ba:9b:1a:a8:
         0f:95:0c:98:1b:56:02:bc:27:24:45:7a:0a:26:43:76:c2:84:
         e4:5c:f4:50:b8:df:4a:9b:15:14:30:5d:54:0f:4b:38:52:70:
         89:c3:ad:e9:57:b4:54:10:b1:e5:e2:74:31:c3:95:08:5f:cb:
         c2:bc:c4:c3:90:4d:05:f5:cd:33:87:7c:5d:a4:6a:68:ae:32:
         c4:39:3e:6d:a2:4d:19:46:f9:0e:ce:73:99:fe:c6:fd:b2:7e:
         e5:39:ce:14:29:e1:40:9e:df:d8:d4:35:b3:58:30:cf:68:35:
         4c:78:38:c4:3a:a1:99:be:bd:4d:b5:a0:e5:e6:e9:b4:76:5b:
         3b:01:a4:d8:f5:90:51:7f:eb:19:18:e5:3e:91:b5:2e:91:16:
         7f:e1:9d:c6:77:d1:a4:05:20:b4:d5:6c:01:88:a6:09:c4:3d:
         7b:69:f6:01:87:0f:1c:dd:a2:c1:5b:98:c4:bc:ae:8f:16:00:
         c0:af:cd:4e:3f:98:bf:8a:aa:2f:3e:e6:b9:ec:cb:cd:61:1b:
         0a:71:d7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:19:34 2025 by rpki-client