Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/3230322e3138332e302e302f31392d3139203d3e203338313630.roa
File:                     3230322e3138332e302e302f31392d3139203d3e203338313630.roa (raw, json)
Hash identifier:          MEztuZqZgD3unDvE9UbT7j2miLRVC0ZWnvrCm6yOt54=
Subject key identifier:   55:C2:68:F7:8A:D0:93:16:09:D0:B7:15:31:F4:B9:6F:3B:EB:DB:C7
Certificate issuer:       /CN=732F46D74C7A8C5D888A7091A706F3A09EFE96A3
Certificate serial:       78FF3D3BB458962C910ADA0463D68D657C32AE1F
Authority key identifier: 73:2F:46:D7:4C:7A:8C:5D:88:8A:70:91:A7:06:F3:A0:9E:FE:96:A3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/3230322e3138332e302e302f31392d3139203d3e203338313630.roa
Signing time:             Thu 17 Apr 2025 04:16:40 +0000
ROA not before:           Thu 17 Apr 2025 04:11:40 +0000
ROA not after:            Thu 16 Apr 2026 04:16:40 +0000
asID:                     38160
IP address blocks:        202.183.0.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl
                          rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 02:40:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:ff:3d:3b:b4:58:96:2c:91:0a:da:04:63:d6:8d:65:7c:32:ae:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732F46D74C7A8C5D888A7091A706F3A09EFE96A3
        Validity
            Not Before: Apr 17 04:11:40 2025 GMT
            Not After : Apr 16 04:16:40 2026 GMT
        Subject: CN=55C268F78AD0931609D0B71531F4B96F3BEBDBC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:27:21:47:bb:24:1c:6d:0e:7e:22:8c:5c:c1:
                    8d:b7:f7:69:bd:e2:58:6c:88:d7:60:e5:42:68:eb:
                    32:b7:cc:2e:34:da:5a:3b:fc:d7:29:8b:32:c4:c3:
                    3a:01:2a:e2:f1:11:1e:65:3b:17:47:69:ce:63:7f:
                    57:f2:1b:8b:d8:6d:2d:7e:ed:9a:7a:43:b4:8d:db:
                    d5:f1:0c:c5:e6:cd:88:b2:2a:f7:42:6b:b0:ef:c6:
                    ed:8c:fe:aa:cc:a9:82:b4:8a:1d:d3:38:d2:e9:1f:
                    20:22:08:46:60:15:21:2c:70:1f:27:af:54:95:25:
                    d2:b6:bf:6c:f6:01:58:72:de:6a:ec:b7:e5:e0:e9:
                    ee:99:d3:33:30:6c:fe:5a:09:55:1e:bd:57:58:76:
                    c9:b6:cc:f4:c2:ff:a1:3f:87:18:b7:62:b2:6a:10:
                    ba:f8:02:4f:48:b5:fd:8e:6a:37:b0:02:91:87:b5:
                    b9:43:33:34:62:8b:64:3a:b5:72:2d:95:c1:c0:cd:
                    a1:62:42:80:6b:c1:e6:9f:49:7c:e8:a1:50:b1:82:
                    41:b9:9c:cb:a9:d1:0d:69:df:aa:70:a8:7d:10:66:
                    0a:59:46:a9:42:e2:5a:db:aa:c0:f9:19:c0:57:56:
                    84:5e:3b:54:87:11:97:d5:60:59:77:bc:12:d7:d0:
                    a6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C2:68:F7:8A:D0:93:16:09:D0:B7:15:31:F4:B9:6F:3B:EB:DB:C7
            X509v3 Authority Key Identifier:
                keyid:73:2F:46:D7:4C:7A:8C:5D:88:8A:70:91:A7:06:F3:A0:9E:FE:96:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/3230322e3138332e302e302f31392d3139203d3e203338313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.183.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         12:96:3e:61:49:70:55:e4:92:bc:f0:7d:ee:6f:31:a5:31:ab:
         32:fd:fe:26:58:0f:8a:1a:ee:2a:32:0c:1f:1f:21:33:89:d2:
         3b:0a:5b:8e:fc:57:58:08:eb:b4:99:18:5b:75:b1:2a:2b:ab:
         78:8e:b8:cd:ed:1e:ad:d5:e7:90:98:72:1f:5f:98:4b:88:4d:
         59:e0:5a:7a:30:d2:2b:af:e9:8e:a9:3a:8d:6e:f4:f4:e8:62:
         b7:ae:f9:b1:68:f8:29:12:81:ec:af:09:ef:26:bb:ee:4a:18:
         74:8c:b1:b6:55:ea:35:7a:b8:04:56:c1:0e:f3:7f:33:80:11:
         c4:f9:58:0b:85:cc:c6:9f:ac:8d:44:ba:7c:8a:f2:e6:eb:99:
         88:35:64:17:fc:d5:49:d2:48:3f:c2:91:3b:70:97:01:34:f5:
         85:06:90:31:f4:dc:24:db:d8:d3:db:89:a6:e4:ac:31:3b:cc:
         85:06:c1:72:19:c1:86:de:66:5c:64:ca:7b:a2:54:23:53:81:
         43:08:0a:24:7f:2b:43:c3:07:49:ea:dd:e3:27:20:7e:6b:de:
         28:9c:c4:26:3c:13:82:84:1b:5d:89:e7:c1:65:21:55:f4:79:
         86:cd:e0:8d:1a:d5:ee:0e:fe:90:8f:c1:1f:87:1c:17:92:80:
         3a:6e:c2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 22:12:03 2025 by rpki-client on console.sobornost.net