Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/34332e3233302e3133302e302f32342d3234203d3e203233363739.roa
File:                     34332e3233302e3133302e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier:          5IMht0xKCCP0U9uwz1XPxOK7yxTeYdiQoJjjSz9Mxco=
Subject key identifier:   11:B7:33:10:36:1E:D7:6E:6F:BE:9D:F9:AC:D3:12:1B:52:B4:59:57
Certificate issuer:       /CN=084550E9619FF5ABD20864D9A6383053B59BF91E
Certificate serial:       2E362CB0A307A90D31CB36D33641FEB60BA1E751
Authority key identifier: 08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/34332e3233302e3133302e302f32342d3234203d3e203233363739.roa
Signing time:             Tue 15 Jul 2025 06:00:01 +0000
ROA not before:           Tue 15 Jul 2025 05:55:01 +0000
ROA not after:            Tue 14 Jul 2026 06:00:01 +0000
asID:                     23679
IP address blocks:        43.230.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl
                          rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Jul 2025 03:43:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:36:2c:b0:a3:07:a9:0d:31:cb:36:d3:36:41:fe:b6:0b:a1:e7:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084550E9619FF5ABD20864D9A6383053B59BF91E
        Validity
            Not Before: Jul 15 05:55:01 2025 GMT
            Not After : Jul 14 06:00:01 2026 GMT
        Subject: CN=11B73310361ED76E6FBE9DF9ACD3121B52B45957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:42:f6:0d:d4:8a:df:0b:af:b0:6e:a9:8d:99:
                    41:fc:06:2a:93:10:e2:fd:93:e0:b9:13:2c:af:d7:
                    ed:13:06:99:b0:ed:98:1f:26:82:42:8e:1f:22:68:
                    62:a5:b6:d3:44:38:1e:c5:b6:c5:37:42:3d:4d:2f:
                    78:64:2c:ff:36:81:f4:8d:46:b9:6f:0a:21:d4:e7:
                    fc:fb:6d:14:fa:7c:a3:80:46:36:00:ea:c1:4b:6f:
                    d0:57:ed:c8:17:78:69:32:eb:fb:c7:04:da:45:ec:
                    85:a0:c5:d2:a3:c5:fd:ae:cf:74:00:3d:96:40:b0:
                    ac:be:1c:1a:05:9e:34:91:49:91:b6:74:53:99:5e:
                    d4:56:18:b0:74:86:e2:90:ca:7c:a7:db:6d:8d:bf:
                    16:2c:93:57:48:7d:f7:d7:d3:74:b8:35:81:71:9c:
                    a3:31:6d:7e:c1:c8:57:55:b0:95:75:4e:68:4b:99:
                    2c:e2:cc:c2:14:35:79:0f:b8:ab:ed:46:2e:9f:84:
                    d6:00:3d:19:85:81:bc:36:fa:24:21:56:9e:43:f5:
                    a0:54:d7:03:f7:e5:68:97:bf:c9:a6:8f:b2:fe:fe:
                    a1:2e:91:f1:31:67:33:c8:85:69:9c:3f:e5:8c:66:
                    ac:24:5d:72:dd:63:14:eb:5b:d7:fe:c5:f7:20:fa:
                    fa:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B7:33:10:36:1E:D7:6E:6F:BE:9D:F9:AC:D3:12:1B:52:B4:59:57
            X509v3 Authority Key Identifier:
                keyid:08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/34332e3233302e3133302e302f32342d3234203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.230.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:ed:c4:4b:92:98:64:f3:d1:ab:cb:be:a4:b3:89:9b:e7:27:
         84:ee:51:1d:a3:c1:fa:28:61:fa:ff:95:c9:cd:28:ef:a4:a8:
         69:38:73:c6:e5:c7:79:81:e9:d0:76:a9:fd:a9:c4:3a:76:2f:
         71:62:d5:88:41:e9:83:d9:98:15:62:46:fc:ca:fa:55:f6:9f:
         f1:e2:38:b2:53:f5:e9:d9:aa:58:28:b3:dc:df:f9:02:0e:50:
         32:56:04:32:21:5f:b7:4e:9f:41:09:9b:70:5e:88:ef:05:38:
         e8:72:97:e6:ae:4e:ca:15:dc:9f:c9:ae:96:b6:ac:eb:b8:d0:
         a5:80:9e:f8:0b:39:93:7b:b4:a5:16:46:04:b1:43:ba:fa:b5:
         d7:9d:f5:0d:24:d0:09:a9:c4:e8:4e:6d:12:16:48:a9:9f:67:
         2d:c7:31:ef:e6:41:ba:30:cc:c1:d3:c3:d7:21:e2:cc:9f:b3:
         64:d3:8c:22:10:79:c0:42:d6:b7:d2:e8:49:d7:3d:7f:bd:c0:
         fc:6f:d6:df:16:9d:5c:55:8c:be:cd:85:b9:ab:4b:33:9e:ef:
         1d:bf:43:f8:b4:ec:30:c7:f7:ff:6b:0a:94:65:1e:68:1e:a4:
         33:f1:0a:6f:e8:40:f6:03:4e:6f:d7:92:47:70:88:a6:58:53:
         6d:af:4e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 00:01:15 2025 by rpki-client