Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3138302e302f32332d3233203d3e203234353330.roa
File:                     3131392e31302e3138302e302f32332d3233203d3e203234353330.roa (raw, json)
Hash identifier:          p+DpmKJhIyyseWNa2/4oKQXWFGVKwgVjH/x87I/yLKQ=
Subject key identifier:   6A:A7:E3:6D:DC:0F:A3:FC:54:B6:70:16:25:C7:92:63:9B:36:AA:DD
Certificate issuer:       /CN=6F6A3530198A9B7657A636FECCFB39F3BF71FB40
Certificate serial:       330E408E14F9C5DE992711979E8470883DD6E61F
Authority key identifier: 6F:6A:35:30:19:8A:9B:76:57:A6:36:FE:CC:FB:39:F3:BF:71:FB:40
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3138302e302f32332d3233203d3e203234353330.roa
Signing time:             Tue 05 Aug 2025 13:00:01 +0000
ROA not before:           Tue 05 Aug 2025 12:55:01 +0000
ROA not after:            Tue 04 Aug 2026 13:00:01 +0000
asID:                     24530
IP address blocks:        119.10.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.crl
                          rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 Aug 2025 19:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:0e:40:8e:14:f9:c5:de:99:27:11:97:9e:84:70:88:3d:d6:e6:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F6A3530198A9B7657A636FECCFB39F3BF71FB40
        Validity
            Not Before: Aug  5 12:55:01 2025 GMT
            Not After : Aug  4 13:00:01 2026 GMT
        Subject: CN=6AA7E36DDC0FA3FC54B6701625C792639B36AADD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:35:c6:5c:d6:c0:97:06:e1:87:85:23:e0:00:
                    e8:7f:41:10:3e:a7:0d:54:ab:7c:a3:ff:f0:48:5b:
                    12:c2:c5:1a:e6:85:38:30:75:64:64:ad:a0:00:4e:
                    cd:88:a0:bc:75:6f:19:c9:96:1d:b2:88:86:26:fe:
                    90:40:78:04:7e:9f:cf:78:b7:7b:1b:09:ad:fa:e5:
                    56:6b:7d:c3:60:17:5a:11:08:fb:53:26:b2:b0:12:
                    68:73:ca:28:8f:0c:83:6b:19:7f:a3:d2:c3:5f:ca:
                    43:90:cd:9b:39:79:9d:83:6d:0b:69:bd:15:f9:9f:
                    f4:77:7c:a4:23:37:71:c6:d8:fa:d9:4a:29:32:94:
                    b8:ea:0c:ea:ae:ea:37:95:74:c6:f9:4e:4c:3e:03:
                    91:aa:ab:97:73:c3:b7:3c:44:a3:33:6f:bd:71:a7:
                    3f:bf:42:ea:78:18:18:cb:4e:87:5d:96:e6:77:2d:
                    c4:23:f2:85:c5:1a:ff:2b:d0:c8:60:d3:09:23:92:
                    70:c3:b4:9d:06:49:40:79:62:7a:29:d4:88:65:2e:
                    2e:64:1d:ef:8e:90:b3:8d:0c:af:27:7b:bc:71:e3:
                    ed:37:df:a5:c5:9b:c3:fd:23:d3:e5:a8:82:83:96:
                    a7:29:7e:b8:a4:58:ef:fc:a9:f6:7e:a2:5f:6c:c9:
                    3c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A7:E3:6D:DC:0F:A3:FC:54:B6:70:16:25:C7:92:63:9B:36:AA:DD
            X509v3 Authority Key Identifier:
                keyid:6F:6A:35:30:19:8A:9B:76:57:A6:36:FE:CC:FB:39:F3:BF:71:FB:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3138302e302f32332d3233203d3e203234353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.10.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:f8:44:09:46:94:a9:d1:39:02:53:bf:5e:4e:32:59:87:5b:
         3e:0a:05:9c:bf:f7:54:88:29:3b:aa:fc:11:b2:59:cc:1b:03:
         88:89:20:65:fc:e3:80:3a:87:47:a4:f6:4f:bb:58:53:83:39:
         5c:f3:3b:1e:9c:70:7e:6b:0e:11:6b:4d:92:9c:3f:25:12:c2:
         1f:4a:59:b1:78:f4:a2:9d:ab:ae:01:a1:07:4c:e5:8b:e2:3b:
         53:a4:d8:19:a4:d6:ef:df:fa:44:a4:77:d8:c1:5f:da:b0:fe:
         a4:6e:df:c6:d6:8a:68:48:25:8c:2c:f8:d5:3d:18:f9:e6:e2:
         0f:01:cf:32:b9:ba:fe:97:51:22:a4:50:dd:0a:d6:d2:1f:04:
         ef:20:d9:a5:af:34:f4:54:c8:c4:7a:93:e0:2d:ae:e9:75:b5:
         af:1f:f8:10:ec:1a:ba:63:4e:07:04:02:9d:62:68:ef:6d:ea:
         8a:14:0d:e2:f5:4e:93:07:5b:1c:2e:95:f5:8a:52:40:ae:cc:
         dc:79:f0:18:95:9b:ea:fb:bf:8e:82:1e:37:35:13:f3:3a:52:
         fc:48:6e:ad:c8:d6:90:60:32:3c:71:51:08:7c:fe:a2:73:39:
         5a:5c:ea:08:23:8c:14:3d:98:af:57:fb:80:20:9b:0b:90:5f:
         b2:51:b7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:09:55 2025 by rpki-client