Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3138322e302f32332d3233203d3e203234353330.roa
File:                     3131392e31302e3138322e302f32332d3233203d3e203234353330.roa (raw, json)
Hash identifier:          JwO8DZo7wX1slETVKUwfJVx2x15fQvQ232wYQWt7QTk=
Subject key identifier:   9C:B3:31:D4:FE:95:61:61:5C:01:C4:7F:B7:CB:B9:88:21:83:98:A1
Certificate issuer:       /CN=6F6A3530198A9B7657A636FECCFB39F3BF71FB40
Certificate serial:       561D9621C94C1883E4593A8D45BAF4F8A8520505
Authority key identifier: 6F:6A:35:30:19:8A:9B:76:57:A6:36:FE:CC:FB:39:F3:BF:71:FB:40
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3138322e302f32332d3233203d3e203234353330.roa
Signing time:             Tue 05 Aug 2025 13:00:01 +0000
ROA not before:           Tue 05 Aug 2025 12:55:01 +0000
ROA not after:            Tue 04 Aug 2026 13:00:01 +0000
asID:                     24530
IP address blocks:        119.10.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.crl
                          rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 Aug 2025 19:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:1d:96:21:c9:4c:18:83:e4:59:3a:8d:45:ba:f4:f8:a8:52:05:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F6A3530198A9B7657A636FECCFB39F3BF71FB40
        Validity
            Not Before: Aug  5 12:55:01 2025 GMT
            Not After : Aug  4 13:00:01 2026 GMT
        Subject: CN=9CB331D4FE9561615C01C47FB7CBB988218398A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:59:cc:41:34:4d:82:97:db:0a:62:9b:b3:49:
                    e5:c4:1a:92:fb:1b:4d:b5:f6:87:97:7d:2d:2a:6c:
                    a6:d9:ea:78:51:3d:f8:17:7d:46:3a:44:3a:fa:62:
                    5f:00:aa:ba:d1:ad:fe:ce:0e:1c:b0:a0:01:f4:0b:
                    02:c3:78:bf:99:3e:84:d1:e7:7a:de:b0:4b:a7:19:
                    0e:6c:23:6c:9e:1c:49:b6:9b:8c:53:6f:c3:ca:ab:
                    86:5b:1d:c9:34:33:50:12:3a:03:15:df:02:ec:d5:
                    39:21:56:a1:51:12:b2:3a:2b:9b:2d:cc:c2:af:a4:
                    78:e4:d9:3c:8b:43:9f:a3:38:f5:54:52:10:67:8d:
                    d8:a2:27:bf:c3:39:f4:cc:75:b7:e4:83:e1:38:37:
                    4e:36:23:a0:6f:87:4e:80:67:8b:a8:bb:e8:b2:f4:
                    41:75:7c:87:c0:00:0a:18:de:df:65:6c:fe:84:47:
                    9c:54:44:42:8f:96:33:c2:03:46:f9:1a:28:cf:f8:
                    0a:ed:e3:9f:0c:2c:fd:c8:eb:f5:02:a7:12:0b:c4:
                    2c:a0:af:9b:ac:bd:c1:60:7f:98:35:62:69:52:cb:
                    88:e5:70:ee:09:c6:91:46:a8:7f:cb:6d:9d:5d:0a:
                    58:a9:fe:9e:9b:4d:a9:9d:71:6e:9b:0f:d5:fe:3f:
                    68:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B3:31:D4:FE:95:61:61:5C:01:C4:7F:B7:CB:B9:88:21:83:98:A1
            X509v3 Authority Key Identifier:
                keyid:6F:6A:35:30:19:8A:9B:76:57:A6:36:FE:CC:FB:39:F3:BF:71:FB:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3138322e302f32332d3233203d3e203234353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.10.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:8f:f4:a4:b4:d2:86:37:04:57:af:ca:42:4e:21:56:d6:49:
         d0:9d:26:c0:6b:dd:19:75:2b:9e:37:f6:ef:13:dd:6f:08:4e:
         b1:d7:d4:2a:21:bf:9b:3a:2e:f8:15:14:6b:cf:18:46:57:39:
         77:64:ef:32:0c:5d:ec:12:91:50:e5:e1:64:92:fd:5e:f9:f7:
         01:bc:80:8a:58:f5:6e:7a:c4:a7:48:00:e6:f8:0c:c7:1f:3b:
         fb:b8:96:c8:d9:22:cc:4e:a5:cb:07:cb:8c:c1:ed:b2:95:38:
         66:41:55:ac:54:9b:71:8e:23:8f:a6:3f:11:82:40:f8:ab:a6:
         6c:31:3e:e1:91:93:0a:43:91:12:0b:77:e1:be:47:00:f3:00:
         2f:6b:40:78:fd:d2:db:ad:95:e0:be:d3:fc:80:56:dd:3a:b3:
         f6:e8:6f:cc:33:0b:8d:72:f3:0e:ef:f0:10:03:a2:e9:5d:18:
         80:4d:98:a0:a5:67:61:01:af:8b:61:bb:df:64:20:d3:7d:36:
         dc:e3:b1:f0:3a:9b:af:ca:2e:4c:8f:de:b1:8e:70:09:77:be:
         01:61:8e:18:f1:60:34:7d:a7:10:34:a2:c1:84:8d:99:23:31:
         ac:15:8e:27:2f:d6:36:f1:5a:e3:f4:cc:6b:c4:88:a4:9b:f2:
         4f:ca:8c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:10:26 2025 by rpki-client