Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3131302e35302e38302e302f32312d3234203d3e203137363730.roa
File:                     3131302e35302e38302e302f32312d3234203d3e203137363730.roa (raw, json)
Hash identifier:          ENs+ad22cCNfPNiUGh8Crfa5TLmxtOCxc9FzlyRTptI=
Subject key identifier:   F4:25:02:01:D1:AC:EE:96:B5:F2:3B:01:88:D4:0D:F7:1E:75:C7:AB
Certificate issuer:       /CN=89402655017312B8CFCB367BA82966AA21E11F90
Certificate serial:       67AA591F431B01B78B98FC9EF956D8CE693194A5
Authority key identifier: 89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3131302e35302e38302e302f32312d3234203d3e203137363730.roa
Signing time:             Sun 06 Jul 2025 18:00:00 +0000
ROA not before:           Sun 06 Jul 2025 17:55:00 +0000
ROA not after:            Sun 05 Jul 2026 18:00:00 +0000
asID:                     17670
IP address blocks:        110.50.80.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl
                          rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Jul 2025 17:27:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:aa:59:1f:43:1b:01:b7:8b:98:fc:9e:f9:56:d8:ce:69:31:94:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89402655017312B8CFCB367BA82966AA21E11F90
        Validity
            Not Before: Jul  6 17:55:00 2025 GMT
            Not After : Jul  5 18:00:00 2026 GMT
        Subject: CN=F4250201D1ACEE96B5F23B0188D40DF71E75C7AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:4f:ee:80:e2:77:bc:76:f0:99:b2:f4:c7:80:
                    a6:1e:5b:c9:20:1f:f0:59:92:8c:f7:6f:89:53:d3:
                    99:d1:9d:5b:3f:a1:2c:31:37:fd:00:73:e2:bf:9b:
                    91:63:c5:22:2c:00:55:d6:00:c9:f6:53:5f:c1:0a:
                    58:18:b0:b8:87:a6:8d:44:7c:cb:ac:20:12:cd:03:
                    c4:54:bb:98:e3:f1:0e:54:2b:78:e2:ea:2e:da:ef:
                    ee:62:7b:5e:3d:8f:58:75:b0:4a:06:d2:a5:24:37:
                    54:36:ad:02:c9:c2:03:a2:61:2b:d5:c0:e8:0d:d9:
                    71:e4:25:25:4f:87:3f:48:a3:eb:81:c1:58:69:54:
                    a6:ae:4a:48:63:8e:6c:19:0f:7b:53:7d:7a:c5:1f:
                    33:69:fe:86:cb:f5:62:5a:49:de:f4:7e:94:ab:e6:
                    2b:f7:ad:34:9a:3c:24:91:db:3e:a4:4d:47:bb:1d:
                    88:f7:27:60:df:81:c2:d9:82:f2:a6:35:be:51:51:
                    60:67:8f:82:1e:82:2b:90:51:e6:03:87:8e:1b:3f:
                    67:c2:f5:81:17:3a:b7:1a:be:3f:5a:2e:ef:10:74:
                    60:32:b5:f8:ef:70:13:71:16:e9:b1:e1:e7:92:2c:
                    ca:5a:0d:8b:76:d7:1d:95:45:86:3f:80:b7:2b:81:
                    f3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:25:02:01:D1:AC:EE:96:B5:F2:3B:01:88:D4:0D:F7:1E:75:C7:AB
            X509v3 Authority Key Identifier:
                keyid:89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3131302e35302e38302e302f32312d3234203d3e203137363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.50.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9c:a5:f6:26:19:10:70:9a:d2:90:26:b4:ee:87:6f:89:de:90:
         57:25:41:1f:38:46:34:f6:aa:e4:2c:9f:54:a0:11:5c:d8:ff:
         ea:0c:94:75:50:f7:a5:1c:65:49:34:4e:c6:9d:54:e9:38:ef:
         4b:ab:28:a2:ba:0e:04:db:07:a2:7c:55:80:b7:b8:6d:64:7f:
         fb:f4:db:02:69:71:ea:6c:a8:80:9e:bf:65:96:e7:21:bc:3f:
         80:69:d7:5b:d0:80:a6:54:f4:d7:54:8e:2d:c9:c2:35:86:3f:
         61:28:aa:bc:cf:1b:b7:95:00:45:44:d3:1c:2b:1a:39:8f:4f:
         dd:d6:b9:8a:3e:63:3a:ad:6a:b2:82:97:65:70:25:a0:ab:10:
         2d:ee:a2:49:4e:2e:0b:79:5f:14:82:38:f5:fc:85:21:27:1c:
         01:2f:55:0d:3e:9e:ee:d3:5c:a4:91:3c:a0:83:8b:5b:5a:5c:
         29:df:c2:12:e9:6a:11:b3:cb:bc:98:62:3a:df:1d:ae:3b:52:
         55:f9:cb:c3:45:3d:67:f5:4b:fb:53:6c:40:3e:49:a4:3a:d5:
         97:ab:d8:89:eb:d2:ef:92:b6:e9:ea:22:a7:76:76:43:63:8d:
         0f:4f:60:0e:49:47:18:3a:15:29:27:2d:32:56:de:7f:65:c1:
         f1:88:a2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:24:59 2025 by rpki-client