Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e32352e302f32342d3234203d3e203234353235.roa
File:                     3230332e3135332e32352e302f32342d3234203d3e203234353235.roa (raw, json)
Hash identifier:          RA6sBe1Dva1MTsSljBDIoxnd/uaABYb0hdLGfIyuiDo=
Subject key identifier:   71:70:39:96:F1:1E:2D:13:65:D0:73:5B:FD:0E:75:63:90:BA:6F:E8
Certificate issuer:       /CN=ADCB9F9DF56E90B39B5344118194104F46A83702
Certificate serial:       169323462FFF3624009D76FF68FA6875E9F5C639
Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e32352e302f32342d3234203d3e203234353235.roa
Signing time:             Sat 03 May 2025 09:00:01 +0000
ROA not before:           Sat 03 May 2025 08:55:01 +0000
ROA not after:            Sat 02 May 2026 09:00:01 +0000
asID:                     24525
IP address blocks:        203.153.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl
                          rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 May 2025 02:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:93:23:46:2f:ff:36:24:00:9d:76:ff:68:fa:68:75:e9:f5:c6:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702
        Validity
            Not Before: May  3 08:55:01 2025 GMT
            Not After : May  2 09:00:01 2026 GMT
        Subject: CN=71703996F11E2D1365D0735BFD0E756390BA6FE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6a:08:bd:5c:d7:69:66:4d:a2:f2:91:14:15:
                    0b:5f:b0:8a:b3:a1:9b:cc:d7:82:93:f1:b0:5d:a8:
                    c0:82:f1:a5:8d:ae:93:3b:ac:e5:d8:fb:9d:ca:be:
                    7a:f2:50:62:22:38:57:3b:19:52:f5:8f:14:a9:dd:
                    db:bb:ef:2a:fa:a9:64:eb:a6:a9:e2:b7:44:84:c3:
                    6e:33:56:f4:3e:5a:b5:7c:7d:d5:c8:c3:cc:44:34:
                    b6:31:8d:79:31:46:20:7a:14:f4:91:f0:7d:a4:85:
                    f7:44:ff:f4:5d:62:f9:04:ef:fd:13:40:75:f1:a2:
                    76:9e:83:29:eb:b6:6e:b9:9d:88:cf:4d:e3:0a:eb:
                    11:d8:0a:94:fc:0f:fd:3f:ed:b1:c2:66:d1:8b:31:
                    40:e5:b9:95:d6:70:f5:f4:9e:e9:44:fd:e9:4f:3a:
                    87:c8:8a:e9:14:b8:f8:a0:86:89:d2:97:7e:df:dd:
                    59:e9:6d:4e:c5:af:b6:1b:f4:14:8e:f5:6b:63:fc:
                    90:66:9b:87:a5:96:a2:22:5f:30:87:0a:5e:bb:4f:
                    be:5f:13:e5:8d:73:84:db:d9:2c:8a:52:c8:13:20:
                    ec:72:61:98:a8:07:81:f5:f6:ff:7f:71:25:df:eb:
                    88:03:fc:3d:10:c9:8a:c0:88:ad:a2:44:ff:4a:b2:
                    2b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:70:39:96:F1:1E:2D:13:65:D0:73:5B:FD:0E:75:63:90:BA:6F:E8
            X509v3 Authority Key Identifier:
                keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e32352e302f32342d3234203d3e203234353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.153.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:98:72:64:15:5b:e7:1f:3b:76:c9:4c:e0:07:1e:6c:b5:f3:
         f0:8d:3b:b2:d6:cb:36:6c:96:73:93:b6:db:4f:78:10:a9:db:
         5f:28:42:df:e9:44:c7:c1:a3:ba:de:cc:56:d6:74:7f:43:a2:
         9f:86:7e:70:ad:d5:80:b0:ba:1a:ac:79:7a:9f:38:7f:53:da:
         b5:ba:5c:bb:51:5c:36:71:e7:9b:cd:c2:c3:70:3d:73:ab:65:
         21:f8:cb:7e:6e:8a:9c:81:81:fe:c8:90:2e:14:37:1f:ca:5d:
         14:6a:8c:f4:08:90:39:cb:97:b0:07:b3:00:82:de:2e:5f:a0:
         3e:29:e8:a3:04:df:a1:55:f1:0a:ad:29:3b:1f:fc:9c:cf:ad:
         c8:cd:02:67:38:26:ed:01:62:0a:b9:5c:83:bc:73:77:e4:19:
         7d:81:58:bf:aa:cc:28:af:50:fd:c6:44:37:46:37:1b:d8:b0:
         64:d8:d6:32:5f:d5:0d:55:da:ea:4d:1f:b3:8a:b4:fd:fb:f3:
         2b:6f:38:1b:65:ad:4f:8b:2a:0a:88:d2:5a:dd:23:c6:e6:3e:
         ed:25:24:91:7f:d0:80:39:c7:3d:d8:f2:f5:53:c3:7c:64:a7:
         71:bf:26:a1:62:a5:a8:7b:de:6d:bb:34:65:8a:bc:df:ad:0e:
         5d:8a:a2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:27:02 2025 by rpki-client