Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e37312e302f32342d3234203d3e203233363739.roa
File:                     3131302e3233322e37312e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier:          jeVsGv0tZg4eB1Px9MK54BUbsBpFbUwH5swMm25T+b4=
Subject key identifier:   F0:0B:46:27:A9:6D:1A:06:15:33:44:26:D3:64:9C:7C:10:48:C3:41
Certificate issuer:       /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial:       3B89F310E1237F23419EB3A5DFF043716E645B6C
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e37312e302f32342d3234203d3e203233363739.roa
Signing time:             Fri 11 Jul 2025 11:02:22 +0000
ROA not before:           Fri 11 Jul 2025 10:57:22 +0000
ROA not after:            Fri 10 Jul 2026 11:02:22 +0000
asID:                     23679
IP address blocks:        110.232.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
                          rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 09:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:89:f3:10:e1:23:7f:23:41:9e:b3:a5:df:f0:43:71:6e:64:5b:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
        Validity
            Not Before: Jul 11 10:57:22 2025 GMT
            Not After : Jul 10 11:02:22 2026 GMT
        Subject: CN=F00B4627A96D1A0615334426D3649C7C1048C341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:70:db:e5:64:e4:3a:43:d3:6e:d8:46:1e:ea:
                    18:70:e6:8b:3e:6a:b1:ce:af:64:63:09:09:7d:ae:
                    b7:f5:63:f5:39:44:e2:7d:b4:df:13:cd:e3:05:de:
                    d0:2a:82:d9:05:de:6c:dd:d4:41:d6:bf:b7:9b:50:
                    ce:1e:25:81:48:1b:e2:91:67:2c:c7:92:65:1b:7f:
                    23:6f:28:c1:f9:b4:7d:db:a8:f1:cf:b4:cf:23:28:
                    e8:a6:77:75:71:c2:42:e9:2c:67:d7:c0:72:b7:a2:
                    78:33:dd:6e:51:b7:5f:52:db:fe:e1:ca:d0:b0:d3:
                    ea:7a:7a:c0:49:22:6f:b4:7b:bd:5a:50:88:1c:aa:
                    72:8a:aa:a0:65:3d:72:bb:5f:c3:39:ea:11:97:f8:
                    92:04:8d:d3:85:bd:4e:57:55:7e:a7:7c:46:09:56:
                    a6:a2:c1:25:f8:62:b5:7d:35:b7:4c:07:81:45:55:
                    a5:d6:bd:ae:06:25:b8:f1:44:d7:23:74:09:27:c1:
                    3c:83:a2:dc:5b:9e:fd:d9:9b:5c:5c:97:ac:09:77:
                    2e:dd:39:40:38:a9:7d:4c:8c:39:e6:bd:40:48:74:
                    2a:37:c5:b2:cf:0a:20:b1:b3:76:ec:0e:ac:03:64:
                    a4:0d:46:fe:a4:b9:24:cd:50:78:c2:2f:fd:a3:d1:
                    11:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:0B:46:27:A9:6D:1A:06:15:33:44:26:D3:64:9C:7C:10:48:C3:41
            X509v3 Authority Key Identifier:
                keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e37312e302f32342d3234203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:6b:f5:eb:2b:f2:eb:62:04:2c:6c:6c:cc:7f:14:7f:3d:37:
         f4:8e:fc:48:29:43:a5:88:bf:d4:90:38:1e:c3:0d:7c:33:a2:
         53:63:c6:bd:34:a5:b6:4c:21:68:df:b1:d9:47:59:cf:0d:ec:
         f0:4e:04:85:c5:92:ee:6a:8b:4a:86:1c:93:6b:73:60:7e:2d:
         0f:9b:47:ed:3f:fe:40:d5:fb:ce:6d:30:34:27:ba:c1:d5:88:
         7f:e7:99:94:4b:16:76:2c:93:74:4f:1c:18:9e:db:26:66:d2:
         18:03:0c:48:1f:c6:70:b8:68:33:73:a3:32:5d:f6:fb:d4:32:
         98:3a:1b:df:b5:6f:58:cb:1c:16:fa:36:35:9b:56:7e:c4:d1:
         e4:4a:28:9e:bf:e9:96:49:bd:d9:81:b6:c8:4f:8b:13:bd:a5:
         79:cf:2a:60:0b:23:f2:88:76:8f:69:a0:32:7b:31:8c:96:35:
         1d:82:fa:fc:dc:7c:f2:3a:93:40:43:ba:99:fb:25:5d:d7:b9:
         1d:f3:99:80:1a:67:c8:89:ac:25:aa:57:08:40:80:68:c4:8e:
         2e:d8:e8:d3:38:3b:71:be:84:ee:7a:cf:ff:b0:bf:18:c7:bb:
         37:04:01:46:44:c0:fb:8b:8d:9e:cf:2c:e3:c8:8a:7b:a0:ac:
         1c:89:71:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 18:24:28 2025 by rpki-client