Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/3131372e37342e3131362e302f32342d3234203d3e203338353233.roa
File:                     3131372e37342e3131362e302f32342d3234203d3e203338353233.roa (raw, json)
Hash identifier:          4k9C18S/gej3vBFzU0qeNrYGkLmZVXuYXMm+WSQ8DFw=
Subject key identifier:   E2:84:2E:8E:89:EF:C2:01:F0:22:AE:28:BD:AC:A0:E3:C1:94:82:D1
Certificate issuer:       /CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F
Certificate serial:       3476D45D7D7EC42A6280332FF38A3040FA52F3CF
Authority key identifier: 1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/3131372e37342e3131362e302f32342d3234203d3e203338353233.roa
Signing time:             Fri 04 Jul 2025 16:00:03 +0000
ROA not before:           Fri 04 Jul 2025 15:55:03 +0000
ROA not after:            Fri 03 Jul 2026 16:00:03 +0000
asID:                     38523
IP address blocks:        117.74.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl
                          rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 11 Aug 2025 03:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:76:d4:5d:7d:7e:c4:2a:62:80:33:2f:f3:8a:30:40:fa:52:f3:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F
        Validity
            Not Before: Jul  4 15:55:03 2025 GMT
            Not After : Jul  3 16:00:03 2026 GMT
        Subject: CN=E2842E8E89EFC201F022AE28BDACA0E3C19482D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:37:32:f5:17:eb:5d:99:e2:57:f6:f9:1c:3a:
                    c5:35:80:a5:b9:68:11:fc:5a:8a:c2:9a:d4:dd:17:
                    79:b1:99:2e:89:de:9a:43:a7:df:b4:ee:3a:8c:fc:
                    8c:7c:55:b7:2d:f8:68:f9:6d:0e:7e:19:c1:45:df:
                    99:59:08:f8:a8:30:42:e0:5d:30:49:a7:c4:de:8f:
                    9a:b3:18:b2:b8:7f:10:3c:65:47:86:ab:81:4b:75:
                    ce:6d:b8:d1:22:e3:a1:f0:de:79:68:ce:0c:35:34:
                    47:e8:37:3f:4e:7e:8d:1b:97:c8:8f:39:bc:43:af:
                    98:75:be:4f:4e:3a:22:32:f6:55:17:fa:d8:84:ea:
                    6a:cc:8c:21:ab:bd:b9:81:f9:a0:7c:e3:f7:ad:5d:
                    af:bb:da:5b:c3:ea:3b:2a:b2:dc:86:b4:53:0e:1c:
                    b5:51:dc:ae:b6:b2:a3:5e:f6:5e:9d:0e:dd:c9:16:
                    52:e4:c0:96:16:76:fa:12:f4:23:a9:bc:53:7e:9b:
                    a0:c0:49:89:58:3a:0f:26:bc:23:7d:f7:d6:9d:80:
                    79:99:46:49:18:b9:a3:3d:0d:15:93:d1:2b:73:34:
                    e9:1e:5c:08:e2:4c:de:a4:52:25:9a:b9:ed:49:3f:
                    d8:c0:bb:02:8d:58:72:a4:29:2e:94:fd:2b:f4:06:
                    4e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:84:2E:8E:89:EF:C2:01:F0:22:AE:28:BD:AC:A0:E3:C1:94:82:D1
            X509v3 Authority Key Identifier:
                keyid:1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/3131372e37342e3131362e302f32342d3234203d3e203338353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.74.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:17:69:75:c6:ed:d5:23:bc:1e:f6:e0:a6:43:06:f7:01:e0:
         7a:1c:c1:67:40:38:2a:d4:9b:66:10:18:8a:07:9a:7d:42:7f:
         cd:c4:ef:b4:1e:e0:8b:e8:53:75:7e:1a:72:68:39:a4:1d:9f:
         be:4e:e5:60:a5:bd:13:9d:18:f3:9b:ce:5c:6f:2e:64:fb:b0:
         36:ab:86:dc:75:12:cb:78:e6:b1:ad:65:5d:39:e1:03:3d:2c:
         85:b6:e9:36:d2:2d:29:a7:6d:96:39:1f:48:8a:3f:6c:84:09:
         d2:c1:dd:45:2d:a3:59:04:46:2a:7a:99:63:b5:ee:b1:cc:7e:
         b5:c3:84:bc:7d:6a:2b:20:8c:85:56:56:51:1b:79:0c:37:2a:
         e7:7a:1c:1d:5d:c1:f8:93:bd:c0:28:72:5f:e2:a9:59:91:64:
         3b:18:d7:ce:b5:36:ca:63:e6:65:df:ab:68:30:1b:69:7e:2d:
         29:49:5d:6d:f8:4e:1e:21:16:65:7d:d1:5d:75:92:df:9c:54:
         be:99:81:a0:81:65:bb:50:4a:d8:34:36:24:25:f7:3d:2e:68:
         cf:b9:41:6d:83:3e:77:fd:54:0b:cb:26:f0:01:1b:86:4b:09:
         c1:c6:31:58:a0:4e:76:75:0d:92:b5:b5:bf:30:35:d0:b4:21:
         fa:e2:2b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:16:40 2025 by rpki-client