Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3131312e36372e37332e302f32342d3234203d3e203536323333.roa
File:                     3131312e36372e37332e302f32342d3234203d3e203536323333.roa (raw, json)
Hash identifier:          LN/QrtLQN7eBHDeVxv+de8QzLZrhiGE5e9eCTFW2W9s=
Subject key identifier:   FB:27:34:C4:87:E1:3A:45:E2:13:93:31:81:C2:CD:F6:44:09:6B:E1
Certificate issuer:       /CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
Certificate serial:       3C6A90355EE88CBB1566FA85AD6635F24780BC5F
Authority key identifier: BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3131312e36372e37332e302f32342d3234203d3e203536323333.roa
Signing time:             Mon 09 Jun 2025 12:00:01 +0000
ROA not before:           Mon 09 Jun 2025 11:55:01 +0000
ROA not after:            Mon 08 Jun 2026 12:00:01 +0000
asID:                     56233
IP address blocks:        111.67.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl
                          rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 15:59:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:6a:90:35:5e:e8:8c:bb:15:66:fa:85:ad:66:35:f2:47:80:bc:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
        Validity
            Not Before: Jun  9 11:55:01 2025 GMT
            Not After : Jun  8 12:00:01 2026 GMT
        Subject: CN=FB2734C487E13A45E213933181C2CDF644096BE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:de:12:18:ca:cf:a6:eb:14:29:09:7a:b8:7b:
                    b4:d3:b4:b9:73:77:a5:83:7b:bc:a4:ef:1b:98:99:
                    5f:e6:f2:3b:01:8f:5d:d9:f3:4b:47:cb:7d:12:46:
                    86:1f:4a:9a:f9:44:6c:84:90:d6:ab:87:24:11:98:
                    19:3a:cc:95:71:88:2e:50:bc:fd:1e:ac:7b:4d:65:
                    ba:ba:89:9d:3c:15:90:4a:d5:d0:0c:cc:36:74:93:
                    84:da:6c:46:b9:ed:ff:d4:08:1b:49:0a:a9:f9:7d:
                    ac:34:a2:6c:99:af:e3:05:3f:3e:51:f3:11:10:2a:
                    cb:b8:d9:8e:40:de:8b:be:d7:b4:0d:79:7c:a3:39:
                    ed:6c:c3:e6:58:e5:6c:ea:92:08:e4:31:61:5a:5f:
                    82:d4:78:77:b8:2c:fd:d7:45:92:c8:2d:2d:09:74:
                    33:e4:c8:cc:e5:50:64:47:d5:67:a2:a1:8a:73:3a:
                    33:11:e8:e7:25:c7:b8:23:c0:02:13:de:64:6e:ed:
                    09:8a:22:7f:59:2d:44:4f:f2:96:1b:37:a2:af:84:
                    de:0e:d0:11:40:c7:c0:3c:dd:aa:40:0b:29:3e:df:
                    e0:df:c0:2b:ce:87:6a:d1:96:36:70:ec:91:d9:b5:
                    98:8f:70:ed:ce:0f:fa:65:94:52:b7:f7:16:f3:0e:
                    e4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:27:34:C4:87:E1:3A:45:E2:13:93:31:81:C2:CD:F6:44:09:6B:E1
            X509v3 Authority Key Identifier:
                keyid:BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3131312e36372e37332e302f32342d3234203d3e203536323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.67.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:ba:0d:1f:31:74:10:ea:5b:3a:e7:3b:8b:a7:21:13:b0:c0:
         89:a4:e5:4f:5e:42:cc:da:02:c5:e7:8c:8b:53:68:fd:99:ed:
         74:68:1e:a7:cf:8d:9f:75:20:dc:45:8d:7a:bb:ea:42:38:ac:
         6b:f0:37:07:eb:35:a9:64:95:45:29:74:12:00:77:4f:de:92:
         90:60:e7:a1:59:35:06:1d:01:04:28:30:91:1c:86:55:d5:1f:
         dc:b8:aa:61:f5:28:76:11:9f:28:a9:8c:74:c9:64:2c:0b:29:
         d1:ed:f3:63:45:6e:f9:fe:36:e0:32:9f:d3:47:c4:80:01:ad:
         38:87:9f:78:72:9b:e3:ca:8e:46:62:0e:3a:83:84:5c:ec:ea:
         a7:8e:ec:10:bf:d1:38:25:1e:70:32:e2:e4:f9:ca:17:a5:5f:
         26:11:76:6e:32:5b:b6:4a:29:f4:69:d7:d4:ed:51:3d:d0:9c:
         6d:96:3d:fe:d3:72:58:0f:00:bc:5d:9c:52:9a:2e:43:a6:11:
         24:87:d7:90:21:d8:95:d4:87:5c:83:f1:cb:4a:05:a3:24:27:
         43:0a:bc:2b:cb:f4:00:8e:84:b8:3b:37:ad:f3:89:d6:d4:28:
         62:0b:17:e7:fa:5b:a1:f2:73:56:29:25:f9:c6:17:28:3e:8d:
         15:40:eb:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 18:39:30 2025 by rpki-client