Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e37322e302f32342d3234203d3e203233363739.roa
File:                     3131302e3233322e37322e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier:          Quu87uI8wkyQOj3N6Abx561DSF9gThrQW+TBc6We0HY=
Subject key identifier:   EF:C7:C3:C0:C1:B3:43:9E:50:CF:6B:9B:71:05:2A:DA:BF:99:01:D2
Certificate issuer:       /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial:       11A28614A4B31B157F8878F084E36F8972C9E2CA
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e37322e302f32342d3234203d3e203233363739.roa
Signing time:             Fri 11 Jul 2025 11:02:23 +0000
ROA not before:           Fri 11 Jul 2025 10:57:23 +0000
ROA not after:            Fri 10 Jul 2026 11:02:23 +0000
asID:                     23679
IP address blocks:        110.232.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
                          rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 09:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a2:86:14:a4:b3:1b:15:7f:88:78:f0:84:e3:6f:89:72:c9:e2:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
        Validity
            Not Before: Jul 11 10:57:23 2025 GMT
            Not After : Jul 10 11:02:23 2026 GMT
        Subject: CN=EFC7C3C0C1B3439E50CF6B9B71052ADABF9901D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:00:2b:65:57:ec:3f:80:2b:99:a8:c4:48:9d:
                    a1:7a:2b:92:f6:03:6f:25:0d:89:e2:5f:ac:f4:51:
                    10:a6:38:57:d3:4f:66:e8:cf:79:2e:4d:bc:97:0d:
                    09:1c:59:da:b0:e3:7c:30:d8:99:13:56:43:0f:c2:
                    2e:4a:4c:4d:1f:6b:a7:a7:88:f5:26:a5:ba:07:de:
                    94:22:a4:d1:ff:2c:ff:ed:30:b4:a8:9b:06:c3:93:
                    0b:9d:93:ba:b9:55:f0:24:f8:41:ef:30:43:bc:51:
                    56:da:c2:d1:3e:70:9f:0d:d0:f8:26:88:19:7c:a4:
                    f7:0f:23:f5:56:1c:d3:f2:7b:c9:96:bb:88:87:f0:
                    a5:47:38:46:19:b3:ce:93:77:6f:31:9b:ce:3b:98:
                    a8:2a:12:d2:3f:38:bc:09:2d:1d:7f:4d:66:97:b1:
                    bf:e0:1a:c7:b4:fb:f6:67:e4:37:05:19:fa:46:b9:
                    cf:ab:72:a6:6b:53:76:fb:76:9c:10:6d:37:84:c0:
                    6d:96:6b:e5:42:29:7e:48:05:aa:b3:00:52:b4:99:
                    9b:6f:c3:43:db:00:6e:c4:45:6e:89:03:25:5c:19:
                    23:1c:b7:63:f9:89:ba:be:02:aa:8e:34:c2:b7:16:
                    71:c4:b7:13:b3:f4:49:54:7b:3f:02:17:db:71:02:
                    0a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C7:C3:C0:C1:B3:43:9E:50:CF:6B:9B:71:05:2A:DA:BF:99:01:D2
            X509v3 Authority Key Identifier:
                keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e37322e302f32342d3234203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:28:c6:30:d6:a1:86:14:ba:ae:c0:7b:ac:ef:f4:08:c9:51:
         66:7d:14:2d:0d:ed:6d:dc:ab:2f:87:55:3f:d2:a9:80:cc:81:
         39:07:a7:6f:93:8e:a1:72:b3:b2:6f:bd:01:d7:03:7f:d4:ea:
         1c:54:56:87:b0:4c:b8:53:41:45:ac:67:d9:b0:03:f9:2c:ab:
         b0:0c:ab:fd:a8:17:4e:af:19:31:7c:d6:31:bf:c2:9f:d5:bd:
         09:84:2b:27:26:16:4f:c6:78:a9:8a:51:09:65:81:9a:23:3d:
         1e:17:8d:98:1e:5b:99:d6:82:6a:3e:8f:ea:dd:4c:40:2a:b1:
         ff:73:38:e4:38:6a:02:24:3f:5c:86:5a:09:92:93:1c:1d:9e:
         96:6a:85:b9:d3:04:48:f1:8c:03:d6:08:e2:ff:e0:90:14:5e:
         8c:76:3e:0c:78:cb:9c:d0:8b:9d:95:c2:c1:6a:49:f2:b1:86:
         cf:db:42:26:09:d0:a4:37:2c:db:3b:00:b9:e5:03:03:e0:a7:
         d8:f0:f4:c5:78:53:2b:c7:52:e1:98:de:30:68:17:0d:bd:7e:
         d9:11:93:46:58:f1:0f:7d:e2:1f:0d:79:0f:bd:4b:d1:37:8d:
         a2:7f:14:d1:da:78:6c:bc:ff:d1:31:2f:65:ec:3c:9f:93:ab:
         5e:77:62:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 18:27:08 2025 by rpki-client