Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e37392e302f32342d3234203d3e20313338383431.roa
File:                     3131302e3233322e37392e302f32342d3234203d3e20313338383431.roa (raw, json)
Hash identifier:          TAnEu/x6WZ1uhnztCUUC8OnagtGvHU4QeIYwQ9IppdA=
Subject key identifier:   A0:43:EA:FE:5D:4C:FE:56:D9:FF:9B:00:2C:B4:DC:29:F3:52:93:6B
Certificate issuer:       /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial:       75526CD31F81FFE63F2A8F37FF96110F7428E7A9
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e37392e302f32342d3234203d3e20313338383431.roa
Signing time:             Fri 25 Jul 2025 06:01:31 +0000
ROA not before:           Fri 25 Jul 2025 05:56:31 +0000
ROA not after:            Fri 24 Jul 2026 06:01:31 +0000
asID:                     138841
IP address blocks:        110.232.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
                          rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 09:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:52:6c:d3:1f:81:ff:e6:3f:2a:8f:37:ff:96:11:0f:74:28:e7:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
        Validity
            Not Before: Jul 25 05:56:31 2025 GMT
            Not After : Jul 24 06:01:31 2026 GMT
        Subject: CN=A043EAFE5D4CFE56D9FF9B002CB4DC29F352936B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:1d:2b:de:6c:b6:bb:a5:62:3c:c6:41:31:c5:
                    db:f1:ec:d0:0e:46:ce:9b:43:9e:84:78:a5:38:25:
                    28:0a:a0:3a:ba:4c:f1:f4:c2:7d:2b:60:5a:95:42:
                    86:c7:c2:62:7d:9d:13:3c:ee:c8:ac:24:0a:8d:71:
                    9b:34:13:ba:5f:55:01:c9:a3:8c:de:f8:2f:96:5f:
                    9c:af:36:8a:7e:36:b8:fe:0d:0d:6c:22:4c:9f:5b:
                    4b:a1:75:79:82:89:db:c3:ee:25:68:48:00:9a:13:
                    59:77:cf:10:df:ad:dc:39:1c:49:6c:5e:38:75:c2:
                    d9:8c:c1:6d:ce:fb:f8:b5:80:c1:2b:86:a3:21:67:
                    a3:fc:a0:94:68:09:9e:bc:47:d8:ff:f3:b8:e0:c1:
                    67:f2:41:21:65:2c:01:e1:1e:91:85:e3:e5:f8:47:
                    e6:85:33:c9:5e:da:6c:39:17:e4:0e:a5:f0:99:c2:
                    6a:9a:56:ac:f9:69:98:28:9c:25:8d:f8:d9:9e:3d:
                    84:0a:a8:8f:23:21:87:94:7a:92:ea:6c:ee:65:07:
                    73:14:26:aa:6c:98:b9:8f:e5:02:c6:c1:80:56:4a:
                    79:ee:d9:3f:59:9d:04:28:5f:b6:3a:c4:3c:63:78:
                    48:a1:eb:39:e0:36:7b:fa:91:e3:3f:27:99:4f:ea:
                    ac:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:43:EA:FE:5D:4C:FE:56:D9:FF:9B:00:2C:B4:DC:29:F3:52:93:6B
            X509v3 Authority Key Identifier:
                keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e37392e302f32342d3234203d3e20313338383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:0d:47:f4:44:6b:1e:71:21:7e:fd:6c:cc:72:6e:69:af:e1:
         f7:4d:63:3b:46:ef:44:9a:48:ba:e0:85:4c:43:60:a2:34:e3:
         70:a6:a5:e5:bb:25:7e:76:fa:7a:f7:3c:de:fd:49:7d:f7:de:
         64:cc:03:bc:5c:d1:dc:7b:90:bb:d0:b7:31:d8:5a:c7:c0:5f:
         5a:1b:2e:2d:23:2a:5e:58:17:46:ec:c0:86:35:1d:b6:5b:c4:
         12:04:13:65:94:4e:0a:9d:8c:e2:be:96:bc:17:f6:69:f0:81:
         05:90:08:9b:db:d0:5e:d3:e9:aa:1d:8d:f0:2f:ef:74:5e:34:
         3e:3b:87:3f:ff:dc:92:80:ef:9d:51:e3:77:2f:b1:15:a7:fa:
         67:43:a2:9a:83:7c:39:28:0b:fa:c2:f5:26:c7:5a:ec:76:bb:
         0a:5d:03:a5:ea:fe:6d:cb:ef:80:26:82:0f:dc:2d:28:1c:48:
         84:b4:a4:8e:bf:e3:e1:f5:20:d8:2b:e2:c1:c8:da:aa:46:1a:
         c3:37:32:e0:42:f5:88:ac:80:25:ab:77:0f:75:ae:4b:f4:9d:
         cb:ed:44:dc:67:b1:a4:69:76:44:c8:96:1b:d6:13:20:6e:bd:
         22:10:af:d0:34:cf:b4:61:26:c0:14:09:b9:44:13:78:c3:27:
         5b:eb:23:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 18:26:23 2025 by rpki-client