Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3131312e36372e37362e302f32342d3234203d3e203536323333.roa
File:                     3131312e36372e37362e302f32342d3234203d3e203536323333.roa (raw, json)
Hash identifier:          q6kGIkTw1IEwFZ8E1rrhCKF72eKLzmU0iFvN+CMeGms=
Subject key identifier:   E3:0D:39:AA:F4:F4:84:42:09:AC:EB:4A:C0:7D:85:7B:14:40:82:FF
Certificate issuer:       /CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
Certificate serial:       70229ECFD27CF4E1B48A1AEA78512266EB0178FD
Authority key identifier: BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3131312e36372e37362e302f32342d3234203d3e203536323333.roa
Signing time:             Mon 09 Jun 2025 14:00:01 +0000
ROA not before:           Mon 09 Jun 2025 13:55:01 +0000
ROA not after:            Mon 08 Jun 2026 14:00:01 +0000
asID:                     56233
IP address blocks:        111.67.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl
                          rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 15:59:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:22:9e:cf:d2:7c:f4:e1:b4:8a:1a:ea:78:51:22:66:eb:01:78:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
        Validity
            Not Before: Jun  9 13:55:01 2025 GMT
            Not After : Jun  8 14:00:01 2026 GMT
        Subject: CN=E30D39AAF4F4844209ACEB4AC07D857B144082FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ca:3e:0c:77:0a:23:78:94:4c:51:ae:6a:01:
                    9e:bf:9e:c5:23:c7:0e:7e:ef:a0:94:39:7e:c6:9c:
                    48:96:e8:e9:0e:88:a4:4b:9d:bf:86:33:d6:9e:a4:
                    ed:85:93:ce:04:23:ca:7a:f6:ac:e7:b1:83:1b:ac:
                    29:b4:1a:da:99:4c:c6:66:c6:6a:d8:67:d3:14:e9:
                    52:7e:b2:18:68:cc:74:aa:0e:58:a1:fe:f7:62:61:
                    8b:03:35:95:cc:bb:83:df:6c:e9:b5:c2:fe:23:54:
                    ff:03:18:46:f2:e9:e6:df:83:e9:4b:70:92:4a:74:
                    71:4a:97:d9:25:bf:d2:86:f5:6b:4b:5d:95:02:55:
                    56:1c:86:8b:31:95:91:c4:e9:77:df:ad:e2:5c:eb:
                    e8:c5:4f:a6:77:fc:5c:c5:74:61:ca:fc:3c:59:ef:
                    74:b6:65:83:da:e3:74:80:b0:8a:86:df:03:e4:1d:
                    bb:52:db:71:20:30:86:2d:15:78:bb:82:69:41:cf:
                    b5:3d:55:ea:12:27:be:63:c3:d0:f1:7d:09:0a:0f:
                    f8:76:db:23:0a:21:0e:8f:d2:ed:f4:8a:eb:bc:88:
                    7a:9b:d0:fc:8f:30:73:4b:ad:96:67:9c:ef:db:92:
                    26:4f:5d:5d:e7:cf:d6:69:67:6e:ed:b0:99:99:c9:
                    72:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:0D:39:AA:F4:F4:84:42:09:AC:EB:4A:C0:7D:85:7B:14:40:82:FF
            X509v3 Authority Key Identifier:
                keyid:BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3131312e36372e37362e302f32342d3234203d3e203536323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.67.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:5d:fe:48:f0:8c:dc:e6:13:90:7a:5b:57:29:e7:57:f4:01:
         16:14:f8:87:1c:d0:e2:3c:33:2b:0b:29:3a:4e:ee:90:d4:ef:
         48:21:9b:e0:ba:ff:de:19:38:40:1e:ea:33:21:46:d0:e2:81:
         ef:18:a8:0b:a2:bf:16:c2:a1:c1:32:77:5e:7b:66:74:c8:27:
         7d:0c:38:9a:e1:a6:72:48:e0:fd:e2:6f:e0:4b:f9:04:50:fa:
         45:ae:1d:43:e0:6b:52:e2:f2:85:1d:d7:33:82:86:4b:9f:b2:
         e2:cc:67:75:2a:21:1a:49:ed:47:04:76:2b:a1:58:69:f9:b5:
         29:a2:9e:53:75:3c:58:1a:fe:de:00:fb:a9:a6:2a:ed:08:6c:
         5b:d2:78:67:94:26:a7:81:b1:ff:41:af:8a:65:8f:34:d6:98:
         c8:a7:e7:cd:65:db:05:13:a6:20:ca:2e:d7:c9:46:ee:8a:04:
         d3:36:66:fa:a0:56:6c:c6:25:f4:a9:48:6a:35:18:0d:92:f8:
         3f:e9:b4:af:50:85:dc:52:7f:53:26:d9:57:eb:65:9b:66:8a:
         8a:49:45:b3:85:a3:3b:5c:0f:77:bc:da:39:cb:d9:ee:49:52:
         01:6e:b8:78:c3:b7:12:b6:87:7e:79:39:a3:46:01:ee:63:83:
         58:8e:8a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:29:36 2025 by rpki-client