Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e38382e302f32332d3234203d3e20313338383431.roa
File:                     3131302e3233322e38382e302f32332d3234203d3e20313338383431.roa (raw, json)
Hash identifier:          SbUba4tzqK+YrTcy9FFmtuw7/z7BDjoDlafvW+sPxGA=
Subject key identifier:   31:B3:E5:15:D8:DA:8B:BF:37:16:DC:91:4A:6E:58:B4:FA:5F:E3:31
Certificate issuer:       /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial:       43507BFC5DACD0EC88D90E40430CA921C94B6DB1
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e38382e302f32332d3234203d3e20313338383431.roa
Signing time:             Fri 25 Jul 2025 06:01:31 +0000
ROA not before:           Fri 25 Jul 2025 05:56:31 +0000
ROA not after:            Fri 24 Jul 2026 06:01:31 +0000
asID:                     138841
IP address blocks:        110.232.88.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
                          rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 09:06:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:50:7b:fc:5d:ac:d0:ec:88:d9:0e:40:43:0c:a9:21:c9:4b:6d:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
        Validity
            Not Before: Jul 25 05:56:31 2025 GMT
            Not After : Jul 24 06:01:31 2026 GMT
        Subject: CN=31B3E515D8DA8BBF3716DC914A6E58B4FA5FE331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6e:46:85:70:37:10:55:f9:55:50:00:54:3a:
                    98:c2:31:67:75:06:15:b5:1d:9d:01:5d:94:64:98:
                    e1:30:92:a2:72:dd:89:ad:86:ee:4a:cf:75:2b:3f:
                    9b:8f:88:97:35:56:89:59:aa:62:d6:3e:e7:51:26:
                    7a:31:d8:26:d1:22:73:1f:50:a4:60:3d:24:05:26:
                    1f:84:38:b4:6c:0e:90:f5:aa:45:4e:ec:8f:d9:6f:
                    91:27:0c:09:84:22:d7:d3:47:7b:d3:16:f7:43:0c:
                    50:13:e4:bd:28:6f:b6:bc:0d:5c:4d:0b:11:d5:db:
                    73:17:d7:df:7b:84:cc:75:06:b2:49:4b:23:f5:67:
                    86:b4:83:2f:12:11:b7:59:2c:ad:f4:f2:b6:87:c6:
                    2e:3d:49:39:10:65:30:2b:b2:c3:6a:70:c0:16:a6:
                    4a:62:8c:5d:dd:11:41:f5:37:fa:3b:28:61:2e:01:
                    22:9c:24:c0:b6:78:17:40:45:9d:aa:e1:66:d9:6d:
                    5e:45:58:9e:7b:17:18:41:ac:ec:9b:9f:74:e9:82:
                    f3:f4:c8:f8:5c:d0:74:ae:62:a7:d7:98:63:69:a0:
                    b0:3c:e4:ee:6c:84:cd:4a:45:d7:96:8d:e7:75:ec:
                    7b:49:7a:57:41:70:6d:a9:73:41:fb:f6:52:59:11:
                    59:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B3:E5:15:D8:DA:8B:BF:37:16:DC:91:4A:6E:58:B4:FA:5F:E3:31
            X509v3 Authority Key Identifier:
                keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e38382e302f32332d3234203d3e20313338383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:a1:0d:5a:e3:51:26:bc:5f:f2:75:d0:0f:7f:ac:c8:43:0d:
         4a:80:c6:4f:28:f0:17:80:1b:93:d9:b1:ee:26:69:e4:8b:ed:
         83:39:37:59:16:79:1e:9d:ab:bb:10:a6:e8:3b:fe:c6:a5:b8:
         8d:44:08:55:03:36:70:4f:b2:71:44:a1:2d:4b:33:ab:dd:f8:
         09:2b:72:1a:e6:f3:42:c8:64:8e:86:25:bd:48:cd:26:33:9d:
         9d:9d:d7:d4:30:b1:87:3e:09:9e:a1:4b:94:30:e1:46:8d:a9:
         76:51:4c:28:e5:65:f6:2c:7e:bf:9c:d1:7c:35:4d:5c:11:f4:
         22:a9:80:60:86:31:d2:49:6f:eb:46:60:15:52:c5:86:49:bf:
         74:80:1b:60:ea:10:72:7f:24:ae:a9:e2:0f:14:68:f6:c9:0d:
         48:4b:f0:0b:3c:4e:16:4d:fa:a4:a2:09:e3:a3:6f:0b:2a:09:
         b0:ec:a7:12:9e:03:7e:cd:e3:6c:83:cc:b7:4b:04:d3:2e:04:
         91:07:4c:65:a3:30:b8:1d:76:38:fa:a6:1f:47:73:fe:dd:db:
         b5:c0:2a:62:a6:6f:b6:d0:5f:cb:8c:3a:2c:b0:6e:6f:b6:6d:
         25:39:68:b0:0e:c5:fb:2a:82:e4:73:e2:0a:11:ae:21:88:b5:
         8c:33:27:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 18:27:08 2025 by rpki-client