Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3230322e3135382e35302e302f32332d3234203d3e2034373837.roa
File:                     3230322e3135382e35302e302f32332d3234203d3e2034373837.roa (raw, json)
Hash identifier:          f6zbYylwme3jupFjo2qnWcX+FQ8SLrNxSPjQQ5cgX6A=
Subject key identifier:   DD:4D:6E:60:8A:0A:F1:E1:51:61:C3:D8:7E:8D:15:D1:E2:FF:73:70
Certificate issuer:       /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial:       5DA03F71C915DE4F46157A786E3A36709387FF62
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3230322e3135382e35302e302f32332d3234203d3e2034373837.roa
Signing time:             Wed 07 May 2025 12:44:43 +0000
ROA not before:           Wed 07 May 2025 12:39:43 +0000
ROA not after:            Wed 06 May 2026 12:44:43 +0000
asID:                     4787
IP address blocks:        202.158.50.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
                          rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 May 2025 00:31:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a0:3f:71:c9:15:de:4f:46:15:7a:78:6e:3a:36:70:93:87:ff:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
        Validity
            Not Before: May  7 12:39:43 2025 GMT
            Not After : May  6 12:44:43 2026 GMT
        Subject: CN=DD4D6E608A0AF1E15161C3D87E8D15D1E2FF7370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:44:fb:c5:72:2f:b8:ab:8a:01:7a:ce:fd:a8:
                    07:e4:40:58:ed:a5:37:75:be:f3:ef:c4:3c:73:c3:
                    5a:a8:05:a8:36:a3:df:e3:7b:0f:02:06:b3:d2:0a:
                    32:50:c0:60:85:4b:7b:51:ff:93:f4:cf:a3:a8:d2:
                    2f:2a:16:a2:d0:1f:51:60:48:4d:82:62:41:4f:e7:
                    bf:f2:66:59:74:67:1a:c3:3d:d4:47:b6:c6:3f:7a:
                    f9:9b:cc:87:76:a9:ff:93:97:6d:48:10:5d:a8:23:
                    53:3a:2c:86:01:98:84:28:4f:af:3d:d5:4e:01:47:
                    ea:36:67:b9:5a:ac:9b:83:da:fc:63:be:6b:e2:d9:
                    e8:96:d6:8f:87:55:bc:2e:e9:a6:aa:6b:5b:10:80:
                    31:7b:e7:e7:c9:91:bf:75:e7:f8:dd:3e:09:ef:5b:
                    9a:d2:02:e0:52:a1:04:07:4e:02:fb:b2:c7:bd:2e:
                    4d:7d:e4:ae:48:c7:fc:bf:c5:8a:c4:d7:b6:76:eb:
                    c0:6c:c2:6b:50:8d:78:eb:ec:0e:88:aa:fd:86:52:
                    b8:95:5f:0c:24:5c:93:41:1c:90:1c:66:43:ae:78:
                    f0:0f:ad:ea:44:2c:6b:67:44:59:22:c6:d8:ef:d2:
                    83:d5:91:14:70:00:d2:af:1f:cc:9a:4c:9d:a5:39:
                    63:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:4D:6E:60:8A:0A:F1:E1:51:61:C3:D8:7E:8D:15:D1:E2:FF:73:70
            X509v3 Authority Key Identifier:
                keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3230322e3135382e35302e302f32332d3234203d3e2034373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.158.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:6f:84:0f:23:d1:6a:cf:61:d0:d5:fa:73:2e:33:cd:86:65:
         80:fc:a1:43:0f:2c:6b:91:d4:d5:27:e0:24:43:7a:a6:f8:b9:
         21:ca:16:07:53:f3:72:55:8c:5e:88:62:6d:b9:b3:35:0d:43:
         e8:0c:6c:16:cd:ad:b4:ff:e4:22:38:eb:d0:e1:8c:60:3d:32:
         6d:44:95:5f:31:be:09:a9:07:5b:f0:82:3d:a7:fe:18:40:a1:
         18:41:87:55:07:72:d7:05:bd:e9:14:bb:79:56:fc:a1:fc:04:
         60:7c:cf:1e:c2:16:30:fb:40:a2:ce:26:eb:74:c6:8d:dc:0b:
         76:df:85:33:b3:48:5f:d8:e2:f4:07:84:bc:84:9b:dd:8c:64:
         b1:cd:ce:c8:69:06:ac:4e:cc:30:13:12:99:0f:83:95:ab:02:
         ec:ab:a8:56:6a:90:2a:32:c7:a7:51:fa:4b:80:2f:32:e8:39:
         be:19:cb:1b:b1:b8:0a:66:95:b5:c5:3c:c4:b4:00:f3:e3:44:
         1a:6e:e9:a1:f3:1f:75:04:e9:b3:93:a1:35:4e:92:89:59:b3:
         82:3d:57:85:7e:04:30:0f:fd:75:b9:2e:ec:71:4f:e0:55:85:
         f9:a3:f5:2d:e5:a4:62:5b:60:a2:cf:8f:13:0b:91:5d:8a:f8:
         35:f9:61:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:51:17 2025 by rpki-client