Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/3230322e3135392e302e302f31382d3234203d3e2039333430.roa
File:                     3230322e3135392e302e302f31382d3234203d3e2039333430.roa (raw, json)
Hash identifier:          Juur4GxLWpPp32FXP5B1lQD8F+2wWzZU/lQ5cSimSag=
Subject key identifier:   80:D5:1F:26:4B:58:62:63:67:D3:03:46:4F:40:92:7B:9F:1C:8F:40
Certificate issuer:       /CN=B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308
Certificate serial:       5E31D88654DFFF460D9D0B004A20B517948868CF
Authority key identifier: B8:C2:A2:B1:B2:11:64:AF:8E:AE:E3:87:C7:D9:A5:D9:4D:4F:83:08
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/3230322e3135392e302e302f31382d3234203d3e2039333430.roa
Signing time:             Thu 19 Jun 2025 04:55:27 +0000
ROA not before:           Thu 19 Jun 2025 04:50:27 +0000
ROA not after:            Thu 18 Jun 2026 04:55:27 +0000
asID:                     9340
IP address blocks:        202.159.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl
                          rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Jul 2025 20:13:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:31:d8:86:54:df:ff:46:0d:9d:0b:00:4a:20:b5:17:94:88:68:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308
        Validity
            Not Before: Jun 19 04:50:27 2025 GMT
            Not After : Jun 18 04:55:27 2026 GMT
        Subject: CN=80D51F264B58626367D303464F40927B9F1C8F40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:12:cc:95:c5:0f:75:59:c5:91:b7:4f:6b:92:
                    34:34:81:98:aa:92:ba:8a:d7:24:c8:69:f4:21:8e:
                    de:b9:fc:1d:ec:1c:0f:c7:c7:c1:92:18:19:df:05:
                    33:37:ee:38:89:1a:51:8e:60:10:d4:c4:79:f8:c8:
                    77:c1:50:52:9e:bf:e3:d9:fa:cb:93:cf:36:31:a0:
                    75:16:de:c7:23:7a:10:2f:f5:45:53:d1:fa:28:80:
                    0a:31:a0:24:c3:28:93:d4:4a:c0:1a:d3:34:f5:fd:
                    28:19:71:87:de:62:74:98:bd:8d:24:74:09:76:6e:
                    55:65:a2:e7:28:9b:cf:40:e7:a0:62:e2:90:b8:5b:
                    c6:8d:98:fe:78:1d:86:9b:37:85:7d:6c:7c:ac:0f:
                    2a:44:56:45:a5:91:47:ed:70:22:53:2d:8e:f9:b0:
                    e1:f0:b7:70:8d:7b:2b:bc:cf:27:03:7d:72:e1:5e:
                    e6:d5:95:79:5d:c6:d7:18:fc:44:5e:8c:09:c3:b0:
                    e4:60:57:83:51:e0:9c:45:24:a3:ea:eb:27:ca:c0:
                    0b:35:08:e9:7a:1e:ce:7a:1d:89:94:e9:c5:ef:95:
                    e5:e3:52:7c:b3:03:09:90:b4:0c:5d:d3:0d:54:ca:
                    76:a4:b6:70:9f:cd:e1:ae:ad:ba:09:fc:90:86:24:
                    d2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D5:1F:26:4B:58:62:63:67:D3:03:46:4F:40:92:7B:9F:1C:8F:40
            X509v3 Authority Key Identifier:
                keyid:B8:C2:A2:B1:B2:11:64:AF:8E:AE:E3:87:C7:D9:A5:D9:4D:4F:83:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/3230322e3135392e302e302f31382d3234203d3e2039333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.159.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a6:e9:17:f7:a6:bf:0b:3f:86:2b:7c:e0:36:62:86:23:29:63:
         81:ce:cc:e2:3e:e6:eb:62:7a:46:23:18:82:ed:9d:f8:fe:20:
         82:0f:95:af:58:b0:fb:77:2f:ee:14:6a:cc:50:22:27:91:5d:
         11:e9:6d:ca:9c:0f:00:e7:5f:30:eb:6b:5d:a0:b6:1e:88:34:
         de:5e:0b:c9:a9:0a:6b:8d:3e:b5:a4:3c:6f:23:64:ae:88:70:
         df:30:19:2c:fd:0c:c7:ef:77:63:77:f6:b2:73:aa:88:97:70:
         66:2e:20:a0:7b:48:cb:eb:07:c7:e6:d7:51:0f:22:0e:6c:11:
         15:eb:11:c9:5e:4d:6c:32:c5:d5:f7:8f:08:a2:82:55:f8:90:
         85:75:0c:97:66:50:b4:06:06:9e:f5:d8:22:85:80:9e:77:69:
         7b:b6:ed:4f:2c:e6:f3:08:69:b9:37:ef:ce:a5:a0:04:f7:13:
         ef:8a:94:e4:a6:8a:8f:1b:44:dd:81:3b:d0:7a:a7:2b:23:d1:
         da:5f:69:11:85:6a:6d:76:cc:e6:30:af:be:eb:48:0a:c0:a0:
         0c:eb:d5:6a:02:ef:d1:d6:b6:a5:d0:3f:ac:59:62:c8:f2:fb:
         35:52:63:19:fd:ee:12:83:18:a3:25:f7:5d:ee:d0:65:7d:25:
         57:95:a8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 07:06:43 2025 by rpki-client