Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/3230322e35322e35322e302f32342d3234203d3e203436303537.roa
File:                     3230322e35322e35322e302f32342d3234203d3e203436303537.roa (raw, json)
Hash identifier:          4nFz268f/uJTcH9+bnn64I8vEEEHTwIdibCbTflD9+Y=
Subject key identifier:   A5:58:0C:A5:0B:55:EA:83:89:1A:28:3A:A1:8F:D2:61:65:06:DA:34
Certificate issuer:       /CN=717B1F47696EEFA7498BEB563D97EBD8515B883E
Certificate serial:       4C6664E7BB92F8898514E8BF1DE31E4AE7537F2C
Authority key identifier: 71:7B:1F:47:69:6E:EF:A7:49:8B:EB:56:3D:97:EB:D8:51:5B:88:3E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/717B1F47696EEFA7498BEB563D97EBD8515B883E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/3230322e35322e35322e302f32342d3234203d3e203436303537.roa
Signing time:             Wed 10 Sep 2025 15:00:00 +0000
ROA not before:           Wed 10 Sep 2025 14:55:00 +0000
ROA not after:            Wed 09 Sep 2026 15:00:00 +0000
asID:                     46057
IP address blocks:        202.52.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.crl
                          rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/717B1F47696EEFA7498BEB563D97EBD8515B883E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Oct 2025 07:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:66:64:e7:bb:92:f8:89:85:14:e8:bf:1d:e3:1e:4a:e7:53:7f:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=717B1F47696EEFA7498BEB563D97EBD8515B883E
        Validity
            Not Before: Sep 10 14:55:00 2025 GMT
            Not After : Sep  9 15:00:00 2026 GMT
        Subject: CN=A5580CA50B55EA83891A283AA18FD2616506DA34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:23:e1:f9:8c:3e:4a:f1:d3:81:7a:de:f1:07:
                    de:ea:84:c9:3d:2c:09:cb:c1:32:01:ba:aa:bb:c4:
                    7e:d1:71:cb:88:b4:41:05:ba:95:0c:c7:d9:07:3b:
                    cd:9e:4d:9b:75:ad:f5:2d:2a:ec:d6:a8:d9:2c:5b:
                    fc:22:3f:e3:bc:3e:7e:23:10:1b:fd:95:4d:a3:88:
                    3b:e5:62:13:f1:49:ed:5a:dd:90:50:6e:f1:80:ea:
                    d7:72:6c:55:fb:a7:e6:56:d8:38:85:3e:26:d5:bf:
                    d8:19:f7:d4:54:b0:fc:8c:e0:04:57:40:cb:bc:74:
                    8d:72:f7:80:db:8b:c7:36:11:b6:ac:da:ad:c6:d5:
                    ca:8c:02:d0:79:9f:bc:ff:50:0b:1f:50:99:50:1b:
                    18:dc:9a:14:1a:cd:7f:de:72:85:f1:02:68:3d:0c:
                    fe:80:56:90:33:69:b2:c5:c7:d3:c0:5e:99:9f:e9:
                    5a:c5:f6:e6:3c:e2:79:e0:61:4e:55:2c:21:3a:36:
                    ed:b2:82:ba:00:70:49:60:e5:ca:91:f6:2e:d8:e4:
                    6b:87:11:c7:50:ab:77:d3:a5:2a:b0:4d:f8:65:22:
                    4e:c6:8c:b4:24:ad:18:58:99:c3:b1:91:9e:8d:56:
                    2a:2a:50:15:b4:8d:48:c8:7e:dc:97:2c:20:8d:57:
                    2d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:58:0C:A5:0B:55:EA:83:89:1A:28:3A:A1:8F:D2:61:65:06:DA:34
            X509v3 Authority Key Identifier:
                keyid:71:7B:1F:47:69:6E:EF:A7:49:8B:EB:56:3D:97:EB:D8:51:5B:88:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/717B1F47696EEFA7498BEB563D97EBD8515B883E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/3230322e35322e35322e302f32342d3234203d3e203436303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.52.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:7b:32:da:da:a2:1f:c8:27:97:d9:53:ae:bb:7b:19:36:70:
         57:02:77:6f:b0:ba:e3:da:65:d8:1c:bf:18:e5:cc:10:73:a7:
         c4:aa:67:c2:c0:26:b7:4d:fb:58:88:53:2d:97:8a:b7:04:93:
         f9:44:39:d3:32:ac:86:d0:1f:47:e7:09:ba:b1:a3:71:10:2a:
         77:d1:df:7b:67:1a:43:92:76:cd:df:b1:f8:2c:e2:ae:df:13:
         09:82:49:05:bd:42:61:4f:64:11:dd:09:0d:09:ed:48:63:77:
         88:7c:c8:b8:4b:3c:e3:80:26:06:3a:09:ce:ae:1f:a8:17:c2:
         ab:87:4f:28:87:a7:b6:29:e9:0f:39:bb:8d:c1:08:dc:f9:5a:
         45:f3:18:5b:44:e2:c8:22:b8:9e:e0:72:1b:73:e6:1e:b6:a1:
         18:db:b4:96:6d:da:68:bc:cd:cf:93:45:d9:85:d9:94:d3:b1:
         48:0f:8f:77:dd:21:f0:51:f3:22:87:6d:f4:46:c7:54:7f:8a:
         69:ef:5a:8b:30:3e:3a:8e:be:39:68:f9:b9:c2:eb:1e:df:a4:
         c2:1a:f7:e0:cb:bc:cf:25:a4:d2:90:01:a1:12:7a:4c:d3:e3:
         aa:5f:4b:a8:2b:d6:13:ef:19:40:33:16:ab:10:8f:0c:6a:e8:
         d3:b0:3e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:08:53 2025 by rpki-client