Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3138312e302f32342d3234203d3e203234353330.roa
File:                     3131392e31302e3138312e302f32342d3234203d3e203234353330.roa (raw, json)
Hash identifier:          FSO0Y0oE5E+QxO8NZtomznWLLZGcBEd061bIqJ6ZnDk=
Subject key identifier:   4C:AD:A7:1B:AA:2D:F2:4B:44:7D:C2:7B:1F:2A:8E:4F:D0:55:1B:42
Certificate issuer:       /CN=6F6A3530198A9B7657A636FECCFB39F3BF71FB40
Certificate serial:       70A52E6D0B29E29BF98B1778F0A153CE72CB4648
Authority key identifier: 6F:6A:35:30:19:8A:9B:76:57:A6:36:FE:CC:FB:39:F3:BF:71:FB:40
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3138312e302f32342d3234203d3e203234353330.roa
Signing time:             Tue 05 Aug 2025 14:00:01 +0000
ROA not before:           Tue 05 Aug 2025 13:55:01 +0000
ROA not after:            Tue 04 Aug 2026 14:00:01 +0000
asID:                     24530
IP address blocks:        119.10.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.crl
                          rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 Aug 2025 19:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a5:2e:6d:0b:29:e2:9b:f9:8b:17:78:f0:a1:53:ce:72:cb:46:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F6A3530198A9B7657A636FECCFB39F3BF71FB40
        Validity
            Not Before: Aug  5 13:55:01 2025 GMT
            Not After : Aug  4 14:00:01 2026 GMT
        Subject: CN=4CADA71BAA2DF24B447DC27B1F2A8E4FD0551B42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4b:eb:f6:29:5d:da:df:9a:1b:a0:65:f6:a3:
                    8a:de:82:46:15:6d:f9:f5:a6:6d:f8:b3:ab:66:fc:
                    23:7f:ac:5a:d5:9d:a4:ea:68:96:e7:9e:c6:9d:bf:
                    4e:4a:f0:eb:46:01:0d:ef:58:c8:e2:bc:11:9a:ac:
                    a2:d8:2a:d7:06:10:8c:72:5a:72:9c:fd:cb:24:c7:
                    a4:f6:61:57:46:9a:44:a0:32:97:5f:3d:f3:e2:8f:
                    97:e6:8f:a5:39:38:08:b2:7f:15:39:c3:3a:96:3b:
                    eb:7d:8e:eb:d3:eb:99:74:c3:5a:da:1e:d0:24:24:
                    52:01:80:da:d0:9d:6d:ca:23:55:60:52:72:43:8a:
                    2f:e4:12:6d:49:32:fc:27:ac:09:9b:b7:84:75:99:
                    94:6e:d8:77:0e:cc:43:4d:da:18:17:a7:30:09:7b:
                    05:9c:6f:e2:b2:96:6a:c9:96:60:12:37:40:2f:2d:
                    54:25:56:4d:3d:b3:b0:83:8c:1a:ef:ef:57:fb:9c:
                    e0:47:e7:6e:15:bc:bf:10:93:95:a5:af:a5:25:f1:
                    2f:87:15:9f:ca:9b:9e:03:8b:b5:23:67:42:7e:b4:
                    97:8c:6d:77:eb:52:fc:20:dc:fa:b7:a2:d4:01:7f:
                    0d:7a:2f:00:f2:09:ad:f4:31:79:63:87:e1:d2:14:
                    37:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:AD:A7:1B:AA:2D:F2:4B:44:7D:C2:7B:1F:2A:8E:4F:D0:55:1B:42
            X509v3 Authority Key Identifier:
                keyid:6F:6A:35:30:19:8A:9B:76:57:A6:36:FE:CC:FB:39:F3:BF:71:FB:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3138312e302f32342d3234203d3e203234353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.10.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:df:aa:d9:39:38:b0:78:cd:80:c4:94:ef:d7:53:d4:d1:70:
         bd:53:3d:2d:40:b1:31:34:4d:83:2c:2a:1f:0f:a9:eb:9a:a0:
         68:52:8e:0c:f0:75:e3:1b:3a:1b:b1:8c:be:20:69:99:e6:83:
         66:24:cd:27:8a:f5:08:76:66:39:4a:56:99:2c:df:c2:30:d8:
         c8:a9:c8:e4:1f:bb:dd:7f:a3:b5:bc:1e:65:44:39:7e:0e:57:
         f6:26:38:95:49:ac:7a:1c:15:7d:f4:95:4d:c9:8a:e0:6f:c2:
         64:2e:11:31:d9:f6:09:9f:35:d6:4f:2a:0a:97:9b:2b:20:a1:
         c2:d6:78:9c:da:13:71:27:20:22:19:e0:bc:ef:1e:5a:13:9c:
         85:a0:f3:f8:3a:7c:00:1f:f9:2a:d7:31:3c:51:92:b9:cd:a0:
         fc:92:f4:b9:9c:51:5b:1a:12:48:bb:63:1a:e1:6c:1b:2e:72:
         9a:95:64:d5:6f:c6:ed:a5:12:89:fe:25:f1:cf:93:40:a2:05:
         02:14:e6:fe:f9:a8:e2:71:cd:0a:97:b5:3a:94:44:4a:57:9f:
         29:2e:84:9d:ea:a7:6b:d4:41:d6:76:e4:c0:49:9d:d7:a5:57:
         e0:7c:74:23:27:93:65:96:22:0a:11:db:8f:4f:2c:94:f9:9d:
         08:f5:30:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:10:14 2025 by rpki-client