Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3137382e302f32332d3233203d3e203234353330.roa
File:                     3131392e31302e3137382e302f32332d3233203d3e203234353330.roa (raw, json)
Hash identifier:          11ytqm87EXuJJJyyy+fopfBgXM7xUvbK/ExZ0yNqnN8=
Subject key identifier:   C0:FA:60:07:2D:98:EA:46:41:9D:17:94:76:1D:11:F1:EB:45:E0:6D
Certificate issuer:       /CN=6F6A3530198A9B7657A636FECCFB39F3BF71FB40
Certificate serial:       1E4B82F927ECF111D032BCEBFF38A1C4C6563EC5
Authority key identifier: 6F:6A:35:30:19:8A:9B:76:57:A6:36:FE:CC:FB:39:F3:BF:71:FB:40
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3137382e302f32332d3233203d3e203234353330.roa
Signing time:             Tue 05 Aug 2025 13:00:01 +0000
ROA not before:           Tue 05 Aug 2025 12:55:01 +0000
ROA not after:            Tue 04 Aug 2026 13:00:01 +0000
asID:                     24530
IP address blocks:        119.10.178.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.crl
                          rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 Aug 2025 19:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:4b:82:f9:27:ec:f1:11:d0:32:bc:eb:ff:38:a1:c4:c6:56:3e:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F6A3530198A9B7657A636FECCFB39F3BF71FB40
        Validity
            Not Before: Aug  5 12:55:01 2025 GMT
            Not After : Aug  4 13:00:01 2026 GMT
        Subject: CN=C0FA60072D98EA46419D1794761D11F1EB45E06D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:74:6d:e7:b4:22:50:9f:7c:d0:ff:25:30:d9:
                    e3:fa:1b:9d:42:8d:5e:ae:61:4c:23:e4:d1:96:b7:
                    75:fd:72:a3:e7:f3:fc:0c:77:d7:e5:74:72:b7:66:
                    96:9e:b4:47:96:31:c9:b9:14:22:75:24:f1:73:bf:
                    7a:c6:f9:e8:82:92:6d:b2:3e:a5:51:53:ea:88:90:
                    ee:b3:5e:b3:c7:19:57:ae:14:98:87:e3:a3:79:91:
                    df:70:42:dc:7a:82:24:4d:05:f3:0b:45:7a:65:42:
                    d8:ad:c5:c4:8f:34:f4:26:e3:d4:9c:d9:32:f8:3f:
                    8e:3d:7d:12:7b:79:ed:c1:3b:d7:d0:c4:1b:93:1c:
                    c8:c4:22:3b:18:56:03:a3:8b:3d:d7:1e:c5:40:4d:
                    99:e0:52:e6:a2:c7:99:00:3b:07:b4:94:36:fd:c3:
                    f2:49:3d:57:a9:a8:c7:83:f6:46:f0:77:5f:54:0d:
                    ac:41:d7:ed:f1:be:24:9a:ec:d8:cb:fd:da:58:37:
                    f2:e3:c0:90:91:44:67:10:72:73:d3:4f:40:e4:c8:
                    b7:41:36:fe:c1:33:68:d9:21:80:b9:0e:d2:d3:28:
                    20:21:2a:d9:b6:72:95:f9:9f:46:8d:23:42:c1:f1:
                    81:65:7f:55:69:f8:1a:60:e6:99:0d:cb:92:3a:7e:
                    4a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:FA:60:07:2D:98:EA:46:41:9D:17:94:76:1D:11:F1:EB:45:E0:6D
            X509v3 Authority Key Identifier:
                keyid:6F:6A:35:30:19:8A:9B:76:57:A6:36:FE:CC:FB:39:F3:BF:71:FB:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3137382e302f32332d3233203d3e203234353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.10.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:65:77:2e:8a:75:74:9a:6f:5d:37:60:b7:84:7e:e2:59:4c:
         59:30:ff:f4:4c:a1:4d:91:72:ff:0d:8b:00:9e:bb:80:93:29:
         a8:fb:46:9a:a9:c6:f0:64:ab:c8:86:da:e9:5a:cb:d1:1a:83:
         30:e2:e6:f3:28:2b:59:e5:fc:a2:6c:63:d5:74:11:7a:d2:91:
         4e:cd:85:10:1b:3f:2b:26:c2:6b:d0:34:c2:38:dc:f3:b8:b8:
         7b:56:83:c0:82:c4:aa:41:0d:23:6a:5d:2a:84:5d:27:21:1a:
         81:70:1a:50:69:15:4a:b8:1c:53:e7:f1:ac:94:74:1c:6f:b7:
         cc:3d:e0:f7:27:0d:a7:f6:ef:c1:de:15:1f:57:1f:8b:dd:a1:
         96:73:39:9c:01:00:44:d3:1d:a6:1b:5d:2d:aa:8c:ab:c7:44:
         25:8e:e3:13:8d:62:e7:53:d3:33:0a:5d:9e:c0:2b:dc:15:de:
         63:da:2c:05:16:ae:81:a2:b9:87:eb:06:a4:48:a7:f3:a3:6f:
         3a:ee:16:5b:98:90:3d:3e:78:80:ea:34:44:e3:6c:20:73:72:
         b2:e2:90:20:87:5c:62:b2:b2:e4:cc:35:18:58:7d:08:ee:a6:
         66:cd:b4:8c:6d:48:9f:0e:d7:dd:5c:b6:4a:b2:6d:67:1f:39:
         b8:75:d6:e6
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUHkuC+Sfs8RHQMrzr/zihxMZWPsUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkY2QTM1MzAxOThBOUI3NjU3QTYzNkZFQ0NGQjM5RjNC
RjcxRkI0MDAeFw0yNTA4MDUxMjU1MDFaFw0yNjA4MDQxMzAwMDFaMDMxMTAvBgNV
BAMTKEMwRkE2MDA3MkQ5OEVBNDY0MTlEMTc5NDc2MUQxMUYxRUI0NUUwNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCadG3ntCJQn3zQ/yUw2eP6G51C
jV6uYUwj5NGWt3X9cqPn8/wMd9fldHK3ZpaetEeWMcm5FCJ1JPFzv3rG+eiCkm2y
PqVRU+qIkO6zXrPHGVeuFJiH46N5kd9wQtx6giRNBfMLRXplQtitxcSPNPQm49Sc
2TL4P449fRJ7ee3BO9fQxBuTHMjEIjsYVgOjiz3XHsVATZngUuaix5kAOwe0lDb9
w/JJPVepqMeD9kbwd19UDaxB1+3xviSa7NjL/dpYN/LjwJCRRGcQcnPTT0DkyLdB
Nv7BM2jZIYC5DtLTKCAhKtm2cpX5n0aNI0LB8YFlf1Vp+Bpg5pkNy5I6fkqtAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUwPpgBy2Y6kZBnReUdh0R8etF4G0wHwYDVR0j
BBgwFoAUb2o1MBmKm3ZXpjb+zPs5879x+0AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
NDIzNDRiZS1mOWZiLTQ2MzQtOTJkNi04OTRkZDUzOGNhZGYvMC82RjZBMzUzMDE5
OEE5Qjc2NTdBNjM2RkVDQ0ZCMzlGM0JGNzFGQjQwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkY2QTM1MzAxOThBOUI3NjU3QTYzNkZFQ0NGQjM5RjNCRjcx
RkI0MC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA0MjM0NGJlLWY5ZmItNDYzNC05
MmQ2LTg5NGRkNTM4Y2FkZi8wLzMxMzEzOTJlMzEzMDJlMzEzNzM4MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzIzNDM1MzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAXcKsjANBgkqhkiG
9w0BAQsFAAOCAQEAZWV3Lop1dJpvXTdgt4R+4llMWTD/9EyhTZFy/w2LAJ67gJMp
qPtGmqnG8GSryIba6VrL0RqDMOLm8ygrWeX8omxj1XQRetKRTs2FEBs/KybCa9A0
wjjc87i4e1aDwILEqkENI2pdKoRdJyEagXAaUGkVSrgcU+fxrJR0HG+3zD3g9ycN
p/bvwd4VH1cfi92hlnM5nAEARNMdphtdLaqMq8dEJY7jE41i51PTMwpdnsAr3BXe
Y9osBRaugaK5h+sGpEin86NvOu4WW5iQPT54gOo0RONsIHNysuKQIIdcYrKy5Mw1
GFh9CO6mZs20jG1Inw7X3Vy2SrJtZx85uHXW5g==
-----END CERTIFICATE-----
Generated at Thu Aug 7 20:10:02 2025 by rpki-client