Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3137342e302f32332d3233203d3e203435373235.roa
File:                     3230322e3135302e3137342e302f32332d3233203d3e203435373235.roa (raw, json)
Hash identifier:          P6E4qcRf4KYQyvZ7AMZmZFaBs6o4L0ILx70mhGz8FoA=
Subject key identifier:   07:C5:2B:0B:1D:26:71:F7:83:6B:40:15:14:E1:31:EE:3C:D3:5F:CF
Certificate issuer:       /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial:       55C6449D1DCE1EDFA80C8F4DD0F9716BBE617AF2
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3137342e302f32332d3233203d3e203435373235.roa
Signing time:             Sun 06 Apr 2025 15:15:27 +0000
ROA not before:           Sun 06 Apr 2025 15:10:27 +0000
ROA not after:            Sun 05 Apr 2026 15:15:27 +0000
asID:                     45725
IP address blocks:        202.150.174.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl
                          rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 17:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:c6:44:9d:1d:ce:1e:df:a8:0c:8f:4d:d0:f9:71:6b:be:61:7a:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
        Validity
            Not Before: Apr  6 15:10:27 2025 GMT
            Not After : Apr  5 15:15:27 2026 GMT
        Subject: CN=07C52B0B1D2671F7836B401514E131EE3CD35FCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:36:c8:f9:a1:9f:df:06:d9:9d:d9:44:b7:6e:
                    4c:1a:4f:78:95:53:31:19:20:8b:dd:08:38:03:7b:
                    ad:45:ae:ec:ab:53:f6:9b:67:48:01:27:bc:7a:53:
                    68:8f:ed:14:9e:e1:c6:7a:f8:1d:95:fb:e8:51:64:
                    42:9a:e0:81:15:69:2c:d3:18:c7:37:c3:37:e9:7e:
                    59:44:0a:d5:19:7f:78:5e:f4:cb:cf:9e:d8:12:d7:
                    08:8b:35:29:06:c5:74:78:66:93:90:5d:02:3e:73:
                    a7:e1:b6:d9:5b:8f:06:65:2f:77:a3:82:d7:00:28:
                    8a:be:76:da:e0:80:97:8e:19:17:18:13:d1:99:0c:
                    02:16:9d:bd:fc:d5:61:e8:f4:6c:1f:18:7c:55:a3:
                    1c:6f:f4:96:67:2b:14:ff:ed:24:ad:fa:9e:d1:b7:
                    a3:04:45:a0:80:e6:a3:0a:0a:bd:ab:d0:37:96:65:
                    55:e3:9d:7a:62:84:08:dc:a6:7b:28:90:5f:4b:83:
                    89:87:cc:06:8d:56:1b:05:da:0a:c2:78:fa:37:f6:
                    ce:a0:68:8e:c6:79:59:ca:d1:5e:4e:4c:cd:59:80:
                    7a:67:88:2d:39:58:ed:d7:16:bf:5b:c5:f7:4f:18:
                    45:37:98:7c:57:04:47:b1:89:05:12:c9:6c:90:f8:
                    e7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C5:2B:0B:1D:26:71:F7:83:6B:40:15:14:E1:31:EE:3C:D3:5F:CF
            X509v3 Authority Key Identifier:
                keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3137342e302f32332d3233203d3e203435373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.150.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d1:75:00:91:67:0e:55:60:29:0e:1c:e1:dd:1c:96:c3:d2:d1:
         40:37:09:47:ff:05:e0:2e:a5:76:95:02:f9:1f:cf:ec:e8:ff:
         e8:89:2b:89:67:b6:be:73:3d:9f:05:bd:90:2e:b0:f2:4d:ce:
         b5:54:bc:d5:03:89:a1:54:e3:76:fb:7b:a7:a2:36:19:06:6a:
         c0:d6:60:8e:4f:1b:d8:b1:66:7c:cc:9f:20:18:54:56:a2:f9:
         15:c7:8b:56:a7:42:e5:c7:69:fd:07:b0:03:78:ad:46:88:55:
         07:b6:a2:b4:e8:5b:12:b1:14:f6:42:5f:0d:dd:18:9e:a4:2b:
         27:0c:36:d3:95:87:6f:12:7f:7c:71:95:56:0c:da:f0:4d:fa:
         aa:17:e1:01:16:af:32:97:6a:94:24:59:31:b2:e9:62:62:cc:
         3e:ef:ba:f6:76:70:20:65:b9:9b:f8:93:6a:e1:48:f2:a6:17:
         a3:2d:f0:6e:fc:15:69:0a:aa:29:0f:2d:b4:28:83:8e:3d:29:
         bf:4b:a0:74:82:6f:0c:fc:8f:9b:ef:db:66:0a:ca:db:5b:70:
         90:67:55:f2:c8:b2:15:2e:d4:f6:70:7c:51:e0:9a:4e:80:d0:
         a1:47:7b:ff:34:77:66:e8:e1:65:f4:cd:65:33:b8:33:32:f0:
         43:ef:3f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 15:50:03 2025 by rpki-client on console.sobornost.net