Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3138302e302f32342d3234203d3e203234353330.roa
File:                     3131392e31302e3138302e302f32342d3234203d3e203234353330.roa (raw, json)
Hash identifier:          aY7R6sIlB8zC8lK0bJsmb4g2LfdT6vBk/rUgwZoGBa8=
Subject key identifier:   53:D6:B2:C2:19:AC:5A:BC:11:B4:A6:6B:11:7C:1A:69:5F:8D:A5:0A
Certificate issuer:       /CN=6F6A3530198A9B7657A636FECCFB39F3BF71FB40
Certificate serial:       4314936D2D2029DF23467CD79D3726EC94101DF4
Authority key identifier: 6F:6A:35:30:19:8A:9B:76:57:A6:36:FE:CC:FB:39:F3:BF:71:FB:40
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3138302e302f32342d3234203d3e203234353330.roa
Signing time:             Tue 05 Aug 2025 13:00:01 +0000
ROA not before:           Tue 05 Aug 2025 12:55:01 +0000
ROA not after:            Tue 04 Aug 2026 13:00:01 +0000
asID:                     24530
IP address blocks:        119.10.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.crl
                          rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 10 Aug 2025 22:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:14:93:6d:2d:20:29:df:23:46:7c:d7:9d:37:26:ec:94:10:1d:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F6A3530198A9B7657A636FECCFB39F3BF71FB40
        Validity
            Not Before: Aug  5 12:55:01 2025 GMT
            Not After : Aug  4 13:00:01 2026 GMT
        Subject: CN=53D6B2C219AC5ABC11B4A66B117C1A695F8DA50A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1b:f4:1d:7f:01:8a:99:e8:34:a7:1e:1b:64:
                    33:db:3f:4e:82:62:55:9c:7d:b6:88:2a:dd:ae:c9:
                    f1:7a:ef:6b:9e:87:a8:1e:28:36:b4:6c:4b:37:2e:
                    a3:eb:30:aa:59:a4:ee:04:8e:1b:be:fa:7d:05:74:
                    fd:8e:82:19:c0:c7:73:34:17:3f:f7:d4:82:16:5a:
                    28:dc:f6:ad:8c:fd:d4:02:98:f8:40:b8:7c:e9:4b:
                    92:35:8c:3b:f8:85:94:8d:d6:34:56:87:a4:9d:1e:
                    e1:21:5b:16:af:6a:2c:9c:16:7f:fc:97:94:ea:48:
                    28:4a:72:68:bc:82:79:3e:22:88:66:8d:72:3e:bc:
                    1b:a0:93:01:ac:74:25:c2:15:84:a6:9e:56:e8:8a:
                    4d:35:3a:5a:60:77:7a:bf:86:83:d5:58:f8:75:dd:
                    9f:2b:e0:1b:67:60:6f:1b:7d:d4:76:23:ca:97:6c:
                    9c:8d:7a:92:3d:00:55:a6:c1:83:e4:83:7b:1a:c0:
                    8e:dd:94:f4:1e:c0:42:ac:9b:87:13:c9:3a:da:d2:
                    1d:eb:96:17:be:c1:b9:1d:95:87:5a:a5:4e:3f:fd:
                    65:45:8f:3a:bc:e8:0a:63:8f:d5:09:1a:bc:77:0b:
                    58:d1:8c:68:c6:fd:d2:ef:31:fc:b6:68:ba:23:df:
                    cc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D6:B2:C2:19:AC:5A:BC:11:B4:A6:6B:11:7C:1A:69:5F:8D:A5:0A
            X509v3 Authority Key Identifier:
                keyid:6F:6A:35:30:19:8A:9B:76:57:A6:36:FE:CC:FB:39:F3:BF:71:FB:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3138302e302f32342d3234203d3e203234353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.10.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:2a:4c:9c:28:b3:b7:a9:5d:dc:ea:13:13:aa:57:97:d2:1c:
         c9:a7:fe:2a:e2:68:a8:9f:60:b0:13:87:a0:ec:a8:ee:20:c7:
         99:9d:5f:5c:39:74:22:bc:df:74:35:f6:cc:b6:95:34:ca:2d:
         ca:54:91:6e:f4:b3:62:64:5a:38:89:53:58:a1:c2:ba:82:5b:
         09:91:bb:56:7e:d5:06:98:ed:1d:70:46:57:b3:32:56:fd:53:
         e8:ac:39:38:11:e3:e8:33:1a:c4:70:c1:84:36:7f:b8:f5:cf:
         2b:7e:55:86:22:3b:08:24:61:e3:0f:a1:61:1e:68:d9:22:9c:
         8e:2f:56:93:7b:18:75:8c:1b:1e:bc:b0:08:df:06:6e:92:6c:
         71:d3:31:1c:5f:15:39:c8:9b:9b:99:0b:db:61:0a:7d:af:7e:
         e9:bb:2c:e4:1e:50:ce:6b:89:db:c6:7b:0e:46:d3:f1:e5:9f:
         9c:36:79:9f:69:99:7e:e9:9f:d8:91:44:fe:b0:a5:c2:1e:35:
         3e:2f:c5:88:a8:97:3c:cd:63:3c:5c:1e:fe:25:25:78:81:4e:
         65:95:6d:6c:a7:aa:75:c5:a9:68:e2:f8:11:0c:20:5b:2b:65:
         22:2e:d8:46:8a:7d:c7:25:1c:70:38:5e:70:21:62:ce:e4:ad:
         8f:26:66:d7
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUQxSTbS0gKd8jRnzXnTcm7JQQHfQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkY2QTM1MzAxOThBOUI3NjU3QTYzNkZFQ0NGQjM5RjNC
RjcxRkI0MDAeFw0yNTA4MDUxMjU1MDFaFw0yNjA4MDQxMzAwMDFaMDMxMTAvBgNV
BAMTKDUzRDZCMkMyMTlBQzVBQkMxMUI0QTY2QjExN0MxQTY5NUY4REE1MEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAG/QdfwGKmeg0px4bZDPbP06C
YlWcfbaIKt2uyfF672ueh6geKDa0bEs3LqPrMKpZpO4Ejhu++n0FdP2OghnAx3M0
Fz/31IIWWijc9q2M/dQCmPhAuHzpS5I1jDv4hZSN1jRWh6SdHuEhWxavaiycFn/8
l5TqSChKcmi8gnk+IohmjXI+vBugkwGsdCXCFYSmnlboik01Olpgd3q/hoPVWPh1
3Z8r4BtnYG8bfdR2I8qXbJyNepI9AFWmwYPkg3sawI7dlPQewEKsm4cTyTra0h3r
lhe+wbkdlYdapU4//WVFjzq86Apjj9UJGrx3C1jRjGjG/dLvMfy2aLoj38yBAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUU9aywhmsWrwRtKZrEXwaaV+NpQowHwYDVR0j
BBgwFoAUb2o1MBmKm3ZXpjb+zPs5879x+0AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
NDIzNDRiZS1mOWZiLTQ2MzQtOTJkNi04OTRkZDUzOGNhZGYvMC82RjZBMzUzMDE5
OEE5Qjc2NTdBNjM2RkVDQ0ZCMzlGM0JGNzFGQjQwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkY2QTM1MzAxOThBOUI3NjU3QTYzNkZFQ0NGQjM5RjNCRjcx
RkI0MC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA0MjM0NGJlLWY5ZmItNDYzNC05
MmQ2LTg5NGRkNTM4Y2FkZi8wLzMxMzEzOTJlMzEzMDJlMzEzODMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzNDM1MzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHcKtDANBgkqhkiG
9w0BAQsFAAOCAQEARypMnCizt6ld3OoTE6pXl9Icyaf+KuJoqJ9gsBOHoOyo7iDH
mZ1fXDl0IrzfdDX2zLaVNMotylSRbvSzYmRaOIlTWKHCuoJbCZG7Vn7VBpjtHXBG
V7MyVv1T6Kw5OBHj6DMaxHDBhDZ/uPXPK35VhiI7CCRh4w+hYR5o2SKcji9Wk3sY
dYwbHrywCN8GbpJscdMxHF8VOcibm5kL22EKfa9+6bss5B5QzmuJ28Z7DkbT8eWf
nDZ5n2mZfumf2JFE/rClwh41Pi/FiKiXPM1jPFwe/iUleIFOZZVtbKeqdcWpaOL4
EQwgWytlIi7YRop9xyUccDhecCFizuStjyZm1w==
-----END CERTIFICATE-----
Generated at Thu Aug 7 23:58:08 2025 by rpki-client