Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e33312e302f32342d3234203d3e203234353235.roa
File:                     3230332e3135332e33312e302f32342d3234203d3e203234353235.roa (raw, json)
Hash identifier:          /4lb4Z37/cUnq1D3Tm9+pIUQFiwDrs2V/99uJSaCNDo=
Subject key identifier:   F6:AC:37:09:00:F1:F9:1F:D3:34:98:25:0F:81:E4:76:D0:F2:AC:F2
Certificate issuer:       /CN=ADCB9F9DF56E90B39B5344118194104F46A83702
Certificate serial:       11A3F77E413EADD6AACC17C97BB400763D9B429A
Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e33312e302f32342d3234203d3e203234353235.roa
Signing time:             Sat 03 May 2025 09:00:04 +0000
ROA not before:           Sat 03 May 2025 08:55:04 +0000
ROA not after:            Sat 02 May 2026 09:00:04 +0000
asID:                     24525
IP address blocks:        203.153.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl
                          rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 May 2025 02:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a3:f7:7e:41:3e:ad:d6:aa:cc:17:c9:7b:b4:00:76:3d:9b:42:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702
        Validity
            Not Before: May  3 08:55:04 2025 GMT
            Not After : May  2 09:00:04 2026 GMT
        Subject: CN=F6AC370900F1F91FD33498250F81E476D0F2ACF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d8:4a:bc:6c:81:94:7d:83:7e:c4:38:94:58:
                    31:93:df:cf:72:39:64:bd:b1:fc:64:6e:5b:5c:25:
                    8c:e4:e1:c5:4d:d2:30:fc:8a:10:81:18:59:98:3e:
                    da:18:f5:fa:05:ec:5a:8b:f5:de:cd:75:1d:c9:54:
                    c8:87:27:f4:08:54:35:6f:9a:0d:6c:f3:f7:23:9c:
                    18:e7:5a:27:ec:4a:e1:a2:2e:9e:1f:98:4e:f1:31:
                    37:d4:77:4d:b5:fd:cf:5d:d4:3a:9c:ec:2f:36:ab:
                    35:18:ff:d0:7b:0c:4f:d3:e2:1b:5c:a4:cd:4b:32:
                    20:48:dc:7f:67:3d:1e:e7:31:2f:84:3a:3d:5e:fb:
                    14:80:64:90:08:ad:c7:ff:a8:6f:5e:ed:fb:d1:6b:
                    dd:09:e9:0d:b8:7c:8b:dc:a7:5a:4d:88:06:68:2b:
                    25:df:cd:21:d0:15:6a:2d:6f:95:60:f4:3a:27:2c:
                    49:99:66:ef:78:41:d0:60:29:de:2b:83:50:65:1d:
                    b6:72:4d:fa:fb:82:07:2d:40:23:5a:9c:8f:29:ae:
                    fe:35:cc:bc:32:b5:c3:00:14:5a:a8:01:de:a7:9c:
                    d7:7e:8f:6a:58:c9:10:cc:6e:c3:16:be:d8:5e:f7:
                    19:24:cc:5a:d1:b8:17:05:a9:f5:7c:80:fd:0e:f4:
                    a2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:AC:37:09:00:F1:F9:1F:D3:34:98:25:0F:81:E4:76:D0:F2:AC:F2
            X509v3 Authority Key Identifier:
                keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e33312e302f32342d3234203d3e203234353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.153.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:9f:5f:78:34:3f:eb:73:08:22:3d:6a:51:b7:dc:d3:02:19:
         85:e1:82:fa:85:7a:9d:62:1c:a9:6f:f4:ac:8d:77:41:23:36:
         e3:76:20:1b:67:55:bd:9e:d4:10:af:e0:fd:1d:e0:6e:26:d8:
         1d:e3:03:36:b1:f2:43:28:34:47:7d:ce:05:6f:64:38:25:b6:
         80:ad:61:46:9f:95:c7:1b:b1:94:ee:43:a4:0d:1d:14:30:65:
         63:2c:1e:02:19:83:7e:ef:d0:52:32:c1:8b:76:d4:e9:88:63:
         12:20:e8:c1:c6:82:fb:18:e9:2e:d4:9b:c5:0b:26:f5:5f:43:
         8c:d2:de:28:22:a4:9f:5e:b9:1b:8d:ec:61:8f:a7:ab:65:0e:
         d6:f1:76:d5:47:c3:4e:20:63:e7:cf:c9:91:9c:ac:7e:a8:b4:
         bf:b6:44:60:db:9d:08:24:be:a0:20:91:fb:5a:48:3b:d4:04:
         4a:b5:b4:b7:2a:0b:11:9e:cf:a4:9e:ae:46:b0:47:89:fc:61:
         21:d5:a9:a2:a8:bb:5b:3e:30:47:e0:29:da:5c:e8:02:26:7f:
         f7:86:cf:a4:41:ec:6c:31:e0:b7:1a:bc:d5:c2:6c:d3:f5:fc:
         05:1d:64:24:b2:97:7b:23:d2:ea:ca:49:1f:5f:7e:26:e3:86:
         12:e4:b0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:46:35 2025 by rpki-client