Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132372e302f32342d3234203d3e2034373837.roa
File:                     3131342e3139392e3132372e302f32342d3234203d3e2034373837.roa (raw, json)
Hash identifier:          /qd7R7/A/8nx19nMWdaKA5JSYFALCdu6Zs4LZY8wFPY=
Subject key identifier:   E1:51:BC:4C:5A:1F:05:6F:2A:22:29:41:9A:C2:CB:26:02:6F:24:5B
Certificate issuer:       /CN=ADCB9F9DF56E90B39B5344118194104F46A83702
Certificate serial:       329AAAE7DC4F8507306E09299FE9D2AA914E3F4C
Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132372e302f32342d3234203d3e2034373837.roa
Signing time:             Tue 05 Aug 2025 02:57:33 +0000
ROA not before:           Tue 05 Aug 2025 02:52:33 +0000
ROA not after:            Tue 04 Aug 2026 02:57:33 +0000
asID:                     4787
IP address blocks:        114.199.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl
                          rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 10 Aug 2025 22:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:9a:aa:e7:dc:4f:85:07:30:6e:09:29:9f:e9:d2:aa:91:4e:3f:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702
        Validity
            Not Before: Aug  5 02:52:33 2025 GMT
            Not After : Aug  4 02:57:33 2026 GMT
        Subject: CN=E151BC4C5A1F056F2A2229419AC2CB26026F245B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:72:12:4c:2e:64:e2:7b:23:cc:4b:ab:db:d1:
                    58:c1:4f:e6:d2:f3:9f:76:fd:3d:24:04:76:d0:41:
                    58:d8:c7:85:68:c7:e3:7f:a2:23:97:38:8a:6b:13:
                    53:dd:18:15:58:30:58:38:60:85:ba:cd:5b:f6:9a:
                    1b:1d:07:3e:61:6a:02:cd:24:a8:94:57:12:cc:44:
                    f5:bf:28:b2:6a:b3:de:fb:53:94:75:b4:c4:75:26:
                    39:f4:4e:70:67:76:e4:a7:e0:5d:8c:05:87:ed:2d:
                    f5:e6:a5:a2:10:3b:8a:e7:1f:bb:ba:5e:28:94:13:
                    3c:bc:a8:3d:d7:7b:0e:0e:75:76:02:5b:46:5c:41:
                    f1:c3:c0:4d:b9:6e:29:0f:91:62:f8:01:74:df:3f:
                    5a:d7:ee:c7:39:46:5d:34:fe:60:2a:e7:60:8b:4f:
                    fc:04:de:7d:f3:b2:46:1a:ea:06:10:45:c8:a7:82:
                    02:21:84:67:7f:12:6b:38:5e:12:f9:1b:fd:4e:7a:
                    4f:ac:d6:cd:09:f6:06:1d:7b:08:47:0d:78:90:27:
                    c5:c7:d0:2e:61:d5:6e:ec:84:fd:7f:8b:8e:67:16:
                    61:2b:d7:6d:3b:19:75:47:f0:90:27:d8:13:e9:f7:
                    9b:95:3e:41:de:94:da:74:3c:98:1b:63:3a:c4:2a:
                    67:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:51:BC:4C:5A:1F:05:6F:2A:22:29:41:9A:C2:CB:26:02:6F:24:5B
            X509v3 Authority Key Identifier:
                keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132372e302f32342d3234203d3e2034373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.199.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:dd:f8:6b:df:28:ca:43:7d:83:c7:68:ee:4a:71:c3:30:6c:
         70:25:d0:53:68:4d:da:7d:e8:ac:ed:3d:a2:49:92:25:db:58:
         8c:12:0f:86:79:18:35:93:d7:45:55:c8:74:d4:ae:a4:6f:66:
         d2:8b:bc:f0:e4:10:27:dc:62:a3:6d:47:23:c3:3b:a3:20:98:
         30:5e:d9:b7:f6:5e:af:68:bc:12:f5:1b:9a:7e:8f:21:32:36:
         14:63:38:59:0d:fc:91:b1:a6:45:b6:9a:6d:13:50:d8:c6:fd:
         82:4d:fa:8e:0a:09:b9:53:45:06:fc:63:0a:0e:17:7e:2f:ca:
         17:2e:36:69:4a:5e:dc:4d:59:39:60:74:11:9a:88:80:11:62:
         b9:9d:c2:64:4b:8c:bb:6e:08:51:f5:31:58:e4:c7:4c:77:4c:
         35:22:0c:b0:c8:5f:76:08:2c:82:1a:ac:a2:c6:db:5f:db:c4:
         c0:47:74:7d:6f:b6:58:17:ac:46:dd:f3:69:a2:49:aa:4c:38:
         94:25:b3:0a:06:26:45:ab:8b:9a:d3:85:0b:ff:b9:77:87:34:
         b0:a4:93:c5:d0:e2:f8:73:ad:3f:e5:7e:9f:9c:d2:6c:4e:89:
         d6:44:8c:e1:c8:35:9a:b2:3f:a4:cc:b9:68:3b:64:c9:ee:58:
         e5:bb:7d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 23:58:15 2025 by rpki-client