Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134342e302f32342d3234203d3e20313430343831.roa
File:                     3131302e37362e3134342e302f32342d3234203d3e20313430343831.roa (raw, json)
Hash identifier:          l79vjEoCDRYp7Imq4o09nFUUOawBLUlHdvJpjB5kQuE=
Subject key identifier:   27:17:51:C5:6C:91:9B:DC:C3:4C:DC:00:51:92:B4:C3:A1:66:AF:50
Certificate issuer:       /CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
Certificate serial:       5ED9BDD03CB284260107E020E29382E1CC573C59
Authority key identifier: 0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134342e302f32342d3234203d3e20313430343831.roa
Signing time:             Sat 02 Aug 2025 17:00:00 +0000
ROA not before:           Sat 02 Aug 2025 16:55:00 +0000
ROA not after:            Sat 01 Aug 2026 17:00:00 +0000
asID:                     140481
IP address blocks:        110.76.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl
                          rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 10 Aug 2025 13:43:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:d9:bd:d0:3c:b2:84:26:01:07:e0:20:e2:93:82:e1:cc:57:3c:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
        Validity
            Not Before: Aug  2 16:55:00 2025 GMT
            Not After : Aug  1 17:00:00 2026 GMT
        Subject: CN=271751C56C919BDCC34CDC005192B4C3A166AF50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a5:bc:15:48:e0:72:f3:bd:54:62:54:8c:72:
                    44:58:9b:0c:58:79:29:d8:08:d1:ba:2f:75:27:04:
                    83:bd:f2:ea:35:12:fe:11:c3:b9:4f:a8:88:65:21:
                    47:98:7a:7b:44:c2:15:23:dd:60:2e:18:bc:0d:89:
                    f5:2e:f2:46:64:68:21:c1:9b:1c:00:8f:03:65:7f:
                    24:f0:a0:c1:2a:29:53:8a:e1:1c:b9:a8:f0:cc:65:
                    04:00:35:7f:a8:8d:12:91:32:78:3b:dd:2c:88:dd:
                    67:4e:83:5f:4d:a1:ea:af:08:ad:e4:d3:7f:2e:6f:
                    64:4c:4a:59:ba:5f:64:b9:68:4d:86:f6:11:0e:46:
                    34:49:78:7c:ea:d1:c7:59:ea:87:c7:41:0b:8a:3a:
                    02:a0:36:ee:25:4c:41:6f:9b:2a:6e:45:97:54:61:
                    53:6c:e6:97:c1:0d:f9:62:0d:01:4f:ac:68:17:8c:
                    ac:f9:35:52:97:07:63:38:3d:d5:f7:db:69:c0:fb:
                    6d:a9:bd:45:1c:4d:64:09:60:64:c2:10:99:9e:eb:
                    42:df:c9:6a:b8:5c:02:8c:ea:1d:44:73:1d:06:47:
                    b6:f3:81:96:35:9e:65:24:15:2a:74:1c:01:52:12:
                    9f:06:a2:25:88:a1:50:4f:ef:93:be:e5:d1:6f:7a:
                    43:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:17:51:C5:6C:91:9B:DC:C3:4C:DC:00:51:92:B4:C3:A1:66:AF:50
            X509v3 Authority Key Identifier:
                keyid:0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134342e302f32342d3234203d3e20313430343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.76.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:3e:f3:1a:9b:21:ae:49:35:24:cc:17:b1:9b:6d:47:a7:3d:
         ac:bd:e7:b0:da:cf:e4:1e:65:bf:0f:73:2a:a6:3e:33:77:65:
         4a:89:67:34:59:3a:8b:ff:48:5a:c7:ea:fb:a9:cd:c7:13:77:
         d5:2b:1f:69:f4:ef:15:09:53:18:e1:03:31:ed:0e:13:ba:d5:
         0c:95:c1:f1:22:2f:13:28:5d:c7:87:52:86:25:c9:4e:12:3c:
         2c:e9:e9:6d:94:b0:24:d9:7e:9b:d0:a7:2f:07:52:fa:6a:62:
         86:f1:7a:d0:19:78:4f:9e:50:84:81:5a:c5:2e:15:c7:58:20:
         a1:b5:46:c5:8d:f6:3d:5b:f0:a9:a0:6f:a7:45:45:d0:b8:ba:
         f3:b4:e0:a9:07:11:ed:c4:d0:f7:7c:4d:99:f5:37:41:60:c4:
         f3:2f:83:21:ea:f6:27:6c:8e:6a:dc:e4:fc:f2:0b:ad:8e:56:
         4d:36:74:99:17:ec:44:e1:b9:d5:e8:c2:a5:44:88:ab:17:b5:
         85:b9:93:4b:43:0c:4d:cf:59:90:70:94:d6:c5:d9:db:24:19:
         07:d6:31:68:e9:7a:5c:a6:b1:16:0b:6f:3b:8e:1b:00:35:21:
         81:a9:bf:9f:dd:50:a0:07:de:10:a5:da:43:53:f1:d4:e0:99:
         ec:4f:b4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:44:11 2025 by rpki-client