Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e32372e302f32342d3234203d3e203234353235.roa
File:                     3230332e3135332e32372e302f32342d3234203d3e203234353235.roa (raw, json)
Hash identifier:          VNHQb6ZDy7Sl9qdEyjEdax/L2Yp7PucTK6fhmMcZTvg=
Subject key identifier:   83:A5:A2:6F:07:05:90:33:EE:19:4C:6A:36:EF:55:F4:2E:DE:AA:28
Certificate issuer:       /CN=ADCB9F9DF56E90B39B5344118194104F46A83702
Certificate serial:       664D59BEBADB00D239C74D703502D541C3E3CCF2
Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e32372e302f32342d3234203d3e203234353235.roa
Signing time:             Sat 03 May 2025 09:00:04 +0000
ROA not before:           Sat 03 May 2025 08:55:04 +0000
ROA not after:            Sat 02 May 2026 09:00:04 +0000
asID:                     24525
IP address blocks:        203.153.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl
                          rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 May 2025 02:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:4d:59:be:ba:db:00:d2:39:c7:4d:70:35:02:d5:41:c3:e3:cc:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702
        Validity
            Not Before: May  3 08:55:04 2025 GMT
            Not After : May  2 09:00:04 2026 GMT
        Subject: CN=83A5A26F07059033EE194C6A36EF55F42EDEAA28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:94:44:da:09:96:9b:15:b7:6e:ad:dd:78:8a:
                    09:8a:e6:4d:6e:b0:70:4e:1f:ed:e8:77:dd:bd:15:
                    8f:8a:01:8f:bf:c2:13:f1:f5:a3:3c:6b:85:cf:41:
                    8f:27:24:0e:12:79:a2:4c:c0:fd:07:2d:4e:9e:0d:
                    86:ba:0c:ae:c9:59:08:32:ab:02:c7:12:33:a2:b4:
                    18:64:60:f8:26:64:3a:2c:7d:77:56:b0:20:ab:17:
                    49:f4:c7:24:35:90:90:80:08:5a:ca:f2:1a:98:5e:
                    3d:79:72:c1:bd:85:f3:3e:c4:3d:c8:52:7f:6e:a7:
                    5c:f0:cf:fa:8d:27:28:f6:22:a5:e1:79:1a:42:05:
                    97:d2:02:ac:b4:f4:60:21:ae:f9:b7:1c:19:bd:9d:
                    cb:34:c1:eb:48:2e:15:3e:37:c4:04:2d:cd:8c:12:
                    3e:70:89:47:72:6f:c3:59:42:6f:1a:ca:1c:1c:57:
                    70:44:53:b7:77:8d:1f:57:0b:d7:f3:81:ec:c3:78:
                    96:2c:41:1d:11:ef:de:c8:ac:23:ac:c1:48:f5:31:
                    c6:e5:42:2a:cb:3f:17:af:1b:24:ae:47:d0:7f:9c:
                    f0:71:ca:ed:a0:6d:64:4a:9a:b9:dc:8d:1b:91:ef:
                    a3:30:85:9a:e1:7f:bf:51:66:3e:d0:4a:45:a8:10:
                    2e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A5:A2:6F:07:05:90:33:EE:19:4C:6A:36:EF:55:F4:2E:DE:AA:28
            X509v3 Authority Key Identifier:
                keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e32372e302f32342d3234203d3e203234353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.153.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:8c:ca:01:5f:1f:b7:4a:22:1e:c6:3b:09:ea:8f:52:47:1c:
         95:64:4d:93:c8:13:b2:77:b6:c2:db:b6:4b:2f:4a:6e:05:df:
         79:bb:d1:97:f8:16:d4:e6:11:37:ec:8f:d1:57:f4:94:86:b4:
         0c:80:3b:e0:47:5f:d0:04:5a:73:32:2f:69:b4:d4:35:2d:6d:
         22:32:5c:ea:cb:6a:d1:c7:84:6e:cf:2f:4d:67:ce:db:36:41:
         29:c3:32:7b:ff:c3:d1:d4:23:f6:cd:09:f3:64:7a:6e:87:2c:
         ed:04:45:ea:1d:53:18:ab:fb:b1:11:bc:1c:6f:77:8f:7d:d7:
         f6:85:e6:83:1c:77:6a:82:02:51:00:70:77:4f:0b:31:68:e2:
         d9:28:3f:3b:57:2b:45:f1:e8:88:43:c7:e4:53:a3:8e:d5:c5:
         6c:cb:f3:73:7c:fa:84:2e:8b:df:40:a8:ba:f4:e8:47:52:c7:
         81:ad:6b:12:cd:f4:45:1a:e5:f1:1a:45:e8:96:93:c5:74:18:
         6d:30:6e:4a:58:02:de:63:83:9a:08:b7:29:0b:71:bd:ce:4e:
         36:39:b7:76:19:cc:c7:5d:08:25:05:18:da:32:19:22:c0:5f:
         c0:25:27:85:93:84:c8:f8:77:49:8c:08:29:22:9d:c3:e1:63:
         5f:91:96:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:16:29 2025 by rpki-client