Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e32322e302f32342d3234203d3e203436303435.roa
File:                     3132322e3132382e32322e302f32342d3234203d3e203436303435.roa (raw, json)
Hash identifier:          ebM/F6KIH60LQhN77naN07o0NG2yDX1tXydmaED/mYQ=
Subject key identifier:   B9:62:BB:12:4E:D8:27:50:7C:E5:65:23:17:A4:D9:FB:B6:46:36:E7
Certificate issuer:       /CN=00EE953FD699788668C724460F4D8D420238194F
Certificate serial:       43C2D591D6E04232D94E282CE7E929BEC68C94AE
Authority key identifier: 00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e32322e302f32342d3234203d3e203436303435.roa
Signing time:             Tue 20 May 2025 07:02:58 +0000
ROA not before:           Tue 20 May 2025 06:57:58 +0000
ROA not after:            Tue 19 May 2026 07:02:58 +0000
asID:                     46045
IP address blocks:        122.128.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl
                          rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 03:10:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:c2:d5:91:d6:e0:42:32:d9:4e:28:2c:e7:e9:29:be:c6:8c:94:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00EE953FD699788668C724460F4D8D420238194F
        Validity
            Not Before: May 20 06:57:58 2025 GMT
            Not After : May 19 07:02:58 2026 GMT
        Subject: CN=B962BB124ED827507CE5652317A4D9FBB64636E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a3:35:fa:38:5d:16:32:03:a5:9c:e3:98:b0:
                    e0:e1:6a:53:bb:a7:9f:25:f6:fc:96:25:5c:b6:49:
                    8f:88:13:e0:bd:45:f9:0d:bf:d0:2b:c3:0f:11:08:
                    ba:14:29:33:7c:08:3e:a1:89:f0:2b:aa:9e:a7:47:
                    02:ec:b3:07:d4:31:1b:8d:6b:94:bc:9a:25:9f:a3:
                    d6:a6:4d:bb:a0:a5:8c:8d:4a:68:18:73:a4:6b:ca:
                    ca:e4:bb:69:e3:2e:cb:49:0f:10:38:c2:7f:48:95:
                    10:d5:2e:1f:28:23:54:3b:43:8b:fb:03:6f:fe:87:
                    f8:01:98:73:cd:f5:7b:4f:77:e2:ea:a9:c3:8a:eb:
                    38:93:4d:c3:2d:38:23:7b:30:90:1a:98:78:d5:ac:
                    43:dc:43:88:a0:6a:d1:ec:6d:1c:a6:45:46:46:8a:
                    7b:33:5f:a4:e6:10:21:2f:6d:38:36:01:24:8c:1b:
                    18:7c:f2:29:fb:4e:c2:54:5c:a0:ff:d0:fc:56:a6:
                    20:70:b0:9e:43:18:33:cd:6b:fb:01:68:d8:30:9a:
                    80:80:fa:f2:17:d2:9d:40:06:23:3f:01:79:85:dc:
                    d3:c7:89:fc:db:bc:c3:46:f6:49:06:27:42:87:07:
                    31:28:ad:b1:03:82:5e:33:a8:cc:2a:0b:1f:63:75:
                    3a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:62:BB:12:4E:D8:27:50:7C:E5:65:23:17:A4:D9:FB:B6:46:36:E7
            X509v3 Authority Key Identifier:
                keyid:00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e32322e302f32342d3234203d3e203436303435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.128.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:b4:bb:f3:f4:5a:7c:33:1f:35:20:4c:e2:a3:cc:33:51:32:
         4e:1f:66:dc:b3:9f:ec:e4:55:a2:8e:ed:01:df:fb:0a:f3:bc:
         d6:77:7d:b2:ca:c8:cb:8d:2e:47:69:64:3f:4e:48:9e:b1:ea:
         cb:f2:79:e0:cd:f9:17:df:2b:f2:6d:7d:16:eb:e1:36:a2:84:
         cc:a8:3d:06:38:36:27:05:e2:57:04:99:e5:a5:0d:37:dd:d3:
         c8:ca:e0:b9:80:5c:94:9f:bb:f1:a1:43:8c:ec:84:dd:43:0f:
         ba:13:0a:a0:52:de:d5:f0:3b:e7:4a:44:36:a6:1d:31:ba:5a:
         2f:fc:f9:2b:c9:28:11:fa:e6:29:41:8a:a4:2d:f3:14:6a:5c:
         5e:6a:fe:5a:80:f6:f5:91:47:e6:94:52:eb:02:22:5c:33:e1:
         bb:0e:6e:e6:16:e6:45:57:29:86:69:54:55:da:ce:6a:95:11:
         41:37:a0:ae:1e:08:47:6a:82:16:f8:7f:38:f0:22:4b:e9:c7:
         3d:11:cf:63:19:63:b7:8d:8c:2a:f2:36:d7:69:90:47:00:bd:
         1f:62:22:57:ac:6c:0a:f7:bf:21:85:1a:14:6f:da:16:cf:cf:
         1f:ed:f8:96:4a:03:26:44:66:a8:1a:cd:8c:44:83:08:e1:6a:
         9c:ad:32:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:01:25 2025 by rpki-client