Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3137362e302f32342d3234203d3e203234353330.roa
File:                     3131392e31302e3137362e302f32342d3234203d3e203234353330.roa (raw, json)
Hash identifier:          8Fo7RjmoRrMefWn4FuuEuHyhOK49/fSzMpvF4qxS59U=
Subject key identifier:   88:DD:D1:3B:D9:48:39:CC:06:FC:91:E2:A8:8A:44:48:82:CF:01:7E
Certificate issuer:       /CN=6F6A3530198A9B7657A636FECCFB39F3BF71FB40
Certificate serial:       377BE94A50A23D9E061C6CD37B071F029D552E8D
Authority key identifier: 6F:6A:35:30:19:8A:9B:76:57:A6:36:FE:CC:FB:39:F3:BF:71:FB:40
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3137362e302f32342d3234203d3e203234353330.roa
Signing time:             Tue 05 Aug 2025 13:00:02 +0000
ROA not before:           Tue 05 Aug 2025 12:55:02 +0000
ROA not after:            Tue 04 Aug 2026 13:00:02 +0000
asID:                     24530
IP address blocks:        119.10.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.crl
                          rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 10 Aug 2025 22:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:7b:e9:4a:50:a2:3d:9e:06:1c:6c:d3:7b:07:1f:02:9d:55:2e:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F6A3530198A9B7657A636FECCFB39F3BF71FB40
        Validity
            Not Before: Aug  5 12:55:02 2025 GMT
            Not After : Aug  4 13:00:02 2026 GMT
        Subject: CN=88DDD13BD94839CC06FC91E2A88A444882CF017E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9d:a3:75:8c:7e:ff:fc:ea:cf:af:b2:38:60:
                    51:6f:1e:54:57:24:d8:af:c0:5a:b7:c3:06:71:dc:
                    65:6e:aa:15:3c:81:56:0d:56:0f:76:8f:e8:15:9f:
                    3e:c3:94:e8:3d:3c:ff:98:0d:53:a4:79:bb:bf:f5:
                    9b:3a:0f:cf:db:c7:ac:88:7a:1a:01:7f:8e:bf:f7:
                    8f:b8:95:1e:13:aa:ab:61:f6:9f:d5:f9:fc:ff:88:
                    0d:2d:7f:80:c3:9b:48:6d:54:7a:53:f1:12:5f:99:
                    e3:e2:54:9f:74:6e:99:11:e9:4e:a8:e5:79:54:b0:
                    4b:c0:74:a3:d0:35:a4:5b:1b:a5:6b:37:5a:d6:0f:
                    f7:e8:68:e0:ce:88:7f:e2:0f:1c:c0:8a:c6:62:07:
                    58:a3:cf:e6:a3:a6:ad:3f:21:54:1f:71:90:1a:2f:
                    98:ad:98:a0:6d:d1:a1:96:34:21:55:a8:e0:34:87:
                    79:cf:1c:59:6d:df:5e:e9:8c:e0:d1:17:9d:21:fe:
                    cc:9b:48:64:0e:b7:b6:e4:4c:10:0d:3c:4d:50:49:
                    c1:2c:39:67:69:14:18:75:b3:e0:64:5e:2a:bc:0b:
                    f4:89:fa:48:3c:da:1a:db:05:ad:9f:10:95:22:44:
                    15:18:16:7c:d4:73:d2:48:71:fd:9c:2a:2e:7f:ae:
                    a9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:DD:D1:3B:D9:48:39:CC:06:FC:91:E2:A8:8A:44:48:82:CF:01:7E
            X509v3 Authority Key Identifier:
                keyid:6F:6A:35:30:19:8A:9B:76:57:A6:36:FE:CC:FB:39:F3:BF:71:FB:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3137362e302f32342d3234203d3e203234353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.10.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:ce:df:83:b2:31:e9:62:ce:0a:dc:12:08:5c:82:b8:ad:2a:
         0b:12:8c:c2:90:2e:f4:9c:42:6f:58:20:d6:70:7a:a7:cd:21:
         31:f8:d2:1e:1f:4f:7b:3e:e4:13:16:05:71:ef:c4:f8:6b:e3:
         f6:36:2a:12:9b:9e:b8:10:62:6f:90:d3:a3:4e:14:cc:45:57:
         f4:22:8b:09:0d:68:d3:0c:57:4a:f1:c1:1b:42:ee:f7:54:bc:
         94:46:a8:1f:a5:6f:b2:60:b2:1f:8a:b3:f6:a1:97:0d:c5:96:
         8b:f2:c2:6e:d5:5b:93:56:10:ad:80:ce:b5:92:b0:89:22:65:
         63:e2:40:20:b6:6f:04:9a:0b:06:19:7e:17:4b:18:ba:03:28:
         1f:01:f5:96:36:79:51:63:91:0b:6d:00:83:45:7e:c2:f6:d2:
         c4:3d:15:76:14:70:ca:34:ae:0d:2f:7f:b7:12:1d:91:60:60:
         9b:77:3c:c5:60:8d:71:28:03:89:ae:71:b5:96:17:6a:a8:2c:
         9e:f8:22:43:a6:7c:76:3b:06:da:b0:24:60:e6:e0:06:38:a5:
         97:21:c4:3d:99:9b:e9:c6:73:ed:18:17:b7:97:e0:86:51:81:
         5e:9f:1e:18:24:f5:f2:8e:00:77:77:2d:59:b2:2f:4e:11:7c:
         84:20:8b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 23:55:52 2025 by rpki-client