Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3137362e302f32332d3233203d3e203234353330.roa
File:                     3131392e31302e3137362e302f32332d3233203d3e203234353330.roa (raw, json)
Hash identifier:          S3PnnDo3bpk/h32qa0719tbKJRYJXLZ4OjHskLExhpM=
Subject key identifier:   87:FF:15:04:B4:7D:D7:83:10:66:6C:84:C3:68:CD:88:4F:5A:96:60
Certificate issuer:       /CN=6F6A3530198A9B7657A636FECCFB39F3BF71FB40
Certificate serial:       10F2BCEF4315024DA9D14DFB93B1056CE1EDB3AE
Authority key identifier: 6F:6A:35:30:19:8A:9B:76:57:A6:36:FE:CC:FB:39:F3:BF:71:FB:40
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3137362e302f32332d3233203d3e203234353330.roa
Signing time:             Tue 05 Aug 2025 13:00:02 +0000
ROA not before:           Tue 05 Aug 2025 12:55:02 +0000
ROA not after:            Tue 04 Aug 2026 13:00:02 +0000
asID:                     24530
IP address blocks:        119.10.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.crl
                          rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 Aug 2025 19:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:f2:bc:ef:43:15:02:4d:a9:d1:4d:fb:93:b1:05:6c:e1:ed:b3:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F6A3530198A9B7657A636FECCFB39F3BF71FB40
        Validity
            Not Before: Aug  5 12:55:02 2025 GMT
            Not After : Aug  4 13:00:02 2026 GMT
        Subject: CN=87FF1504B47DD78310666C84C368CD884F5A9660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:28:3c:32:55:d9:89:bf:6b:6c:0e:88:62:9b:
                    ba:b0:89:16:cb:87:00:59:e3:a6:61:20:2e:8a:c8:
                    77:fc:e2:a5:ff:9d:51:9e:20:e4:2b:83:46:30:3a:
                    0e:5d:1d:ca:0e:cf:0c:ce:cc:15:ac:d7:d3:14:9b:
                    96:a0:f7:ca:b1:25:49:d9:92:79:91:fd:f9:39:fa:
                    0a:15:a3:c6:03:33:62:8d:41:e4:7d:62:16:ec:4f:
                    c0:36:6d:00:dc:09:9d:e8:e2:d0:1e:3f:fb:7e:19:
                    dd:58:21:08:8d:76:83:36:ab:fd:fa:37:9a:21:ed:
                    4b:0d:ca:2e:65:ff:42:e1:df:7d:3b:17:04:f2:d0:
                    cc:48:54:65:2a:13:91:62:51:12:b2:aa:86:75:26:
                    b5:88:41:54:0f:c4:c6:cd:45:f7:8d:5a:90:d5:0c:
                    1d:5a:e0:98:8c:3e:af:67:4b:52:be:d8:90:97:c6:
                    12:4e:fb:bb:ae:56:4e:ba:02:5e:05:ab:0b:4f:ae:
                    10:6f:1b:73:ab:f3:22:36:7c:ea:7c:c0:61:21:96:
                    ff:1b:54:f8:2b:5a:ab:0c:08:dd:7a:19:2c:13:6e:
                    78:10:67:88:ad:6e:d6:7a:32:66:5d:69:99:d0:a1:
                    33:16:a2:6f:12:28:63:a8:ca:5a:d9:fa:48:54:93:
                    49:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:FF:15:04:B4:7D:D7:83:10:66:6C:84:C3:68:CD:88:4F:5A:96:60
            X509v3 Authority Key Identifier:
                keyid:6F:6A:35:30:19:8A:9B:76:57:A6:36:FE:CC:FB:39:F3:BF:71:FB:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3137362e302f32332d3233203d3e203234353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.10.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:9c:0d:b3:75:3e:0a:95:d8:87:db:db:96:27:97:ae:13:68:
         c0:1c:7c:bd:c5:87:3a:5f:02:8e:55:a1:09:d6:14:c0:d1:14:
         1b:d9:77:5d:e3:e7:d3:6d:b0:ac:46:a3:94:09:ae:af:35:c4:
         9a:8a:1b:61:40:d7:4d:e1:b5:e1:49:d9:13:c2:6e:32:03:dc:
         f3:51:24:85:df:13:d5:e0:20:a5:a0:d0:98:f5:1a:2f:ab:8e:
         ee:51:f0:bc:10:48:b8:b6:7e:01:87:8f:6f:d4:16:6b:d2:75:
         19:35:a7:af:c1:da:47:a9:20:89:f3:d3:69:35:41:34:44:41:
         4b:ea:d1:e7:6f:5d:d0:31:99:d1:c5:8b:d8:f9:ae:22:d1:0e:
         e4:98:4b:c2:86:ec:e0:b2:10:8b:91:33:01:fe:4f:07:e7:d8:
         03:7c:7a:72:cc:c7:a7:0b:af:03:a7:04:24:da:e7:f5:91:69:
         86:1c:44:1d:91:bc:c8:b1:8e:25:a1:25:df:b2:7f:db:4a:eb:
         88:2f:d5:6d:69:21:40:56:a9:fc:b8:ea:8c:b2:00:19:69:e6:
         f9:d9:97:48:74:a8:17:e5:bf:34:8a:42:6c:f4:86:9b:37:82:
         a8:26:aa:b1:e7:3a:8f:91:94:2f:d5:36:8e:20:71:32:7e:5d:
         ba:05:da:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:10:18 2025 by rpki-client