Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3138302e3137382e39352e302f32342d3234203d3e203435373232.roa
File:                     3138302e3137382e39352e302f32342d3234203d3e203435373232.roa (raw, json)
Hash identifier:          9KZ9F45elzM13kws/U0IoAzbbI/YdymyAIpoe5+fMUI=
Subject key identifier:   66:47:3D:01:0C:47:70:95:76:51:A7:BC:C2:65:F3:3C:75:81:31:FD
Certificate issuer:       /CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
Certificate serial:       1EAFC74A1F151CC906C37C0816B59E90920AC122
Authority key identifier: 51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3138302e3137382e39352e302f32342d3234203d3e203435373232.roa
Signing time:             Mon 02 Jun 2025 02:02:51 +0000
ROA not before:           Mon 02 Jun 2025 01:57:51 +0000
ROA not after:            Mon 01 Jun 2026 02:02:51 +0000
asID:                     45722
IP address blocks:        180.178.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl
                          rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 09:08:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:af:c7:4a:1f:15:1c:c9:06:c3:7c:08:16:b5:9e:90:92:0a:c1:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
        Validity
            Not Before: Jun  2 01:57:51 2025 GMT
            Not After : Jun  1 02:02:51 2026 GMT
        Subject: CN=66473D010C4770957651A7BCC265F33C758131FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8d:f3:48:16:0e:b7:71:f7:09:27:8d:56:ea:
                    d1:35:6f:42:a1:18:84:f7:c1:6d:c3:94:93:70:4a:
                    6a:ac:61:9e:fe:d7:6c:92:35:c1:69:42:c8:ea:6e:
                    ba:04:d7:82:eb:27:1f:92:31:e5:53:70:db:a4:d0:
                    c9:a8:86:f4:21:7e:c5:fc:22:66:f9:89:16:d6:d0:
                    e8:81:94:7c:82:bd:33:bd:4d:bc:66:30:c0:9f:67:
                    81:88:fe:92:fd:99:ff:e0:84:be:d7:e6:81:4c:79:
                    55:bb:7e:88:25:ce:fc:c6:1b:d9:ed:d2:0d:f7:0f:
                    75:28:7c:e7:99:70:4e:1c:cc:3f:73:57:e1:de:e3:
                    6a:b5:72:98:9d:c2:96:d8:bb:9d:3b:60:00:91:cd:
                    f3:d4:e1:8c:08:e1:32:aa:07:4c:ee:cc:4a:e8:8c:
                    36:4a:28:7c:79:07:8e:a3:29:8a:35:10:39:2b:ce:
                    f5:c9:81:35:2d:81:e5:46:a5:f3:20:60:9d:14:20:
                    ca:f5:38:a9:20:6d:74:5e:75:c7:d2:37:28:e2:c1:
                    75:b0:c0:3c:f8:fd:1d:46:63:bb:0b:1b:dd:94:39:
                    14:d3:7a:8a:e7:93:41:6e:28:c0:66:2b:50:c2:8f:
                    13:af:e5:d8:3e:49:dd:ab:63:b8:7b:c8:d6:76:fa:
                    be:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:47:3D:01:0C:47:70:95:76:51:A7:BC:C2:65:F3:3C:75:81:31:FD
            X509v3 Authority Key Identifier:
                keyid:51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3138302e3137382e39352e302f32342d3234203d3e203435373232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.178.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:ce:82:7b:27:70:fe:3e:d7:c0:50:bb:73:7a:fb:f3:af:f1:
         5d:0f:a6:80:48:88:4b:d7:ab:ca:07:dc:c8:17:cc:6d:fe:8e:
         e2:a2:76:0a:2c:7b:17:0e:65:73:dd:cd:69:b7:51:90:79:b4:
         99:cc:56:fb:c3:0f:f9:ed:4c:fc:5a:e9:a9:37:1b:1e:ac:46:
         b4:b9:42:69:ad:38:8a:83:79:d6:a9:8b:b1:e4:3a:09:ec:4d:
         77:09:17:f2:ce:80:67:3a:13:d8:2e:ed:47:58:91:94:c0:bf:
         a4:52:3d:dc:df:fd:1a:c7:36:80:81:c7:1a:69:dc:51:e7:a6:
         5d:7f:b0:e0:d5:ea:25:93:5b:75:84:33:6e:a9:22:55:97:cb:
         56:9e:da:6a:07:b1:c5:94:72:1e:c6:e3:b0:51:2c:51:bb:12:
         13:e0:2e:a6:b6:3a:9b:92:ad:4f:c5:82:95:d4:e6:c2:47:c1:
         30:06:28:c9:42:43:42:7b:e3:11:cd:f6:21:76:de:f8:73:c7:
         0c:14:3e:c6:70:8f:ec:d0:bc:d8:53:f9:33:db:06:03:ea:5d:
         23:d4:ef:59:34:56:ed:0c:bd:0b:9d:f1:6f:c7:de:46:30:12:
         94:22:37:3e:4f:73:f6:4c:a3:c0:ed:ac:95:48:b4:5e:c8:f0:
         60:f7:ef:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:18:27 2025 by rpki-client