Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3136382e302f32322d3232203d3e203234323036.roa
File:                     3131302e34342e3136382e302f32322d3232203d3e203234323036.roa (raw, json)
Hash identifier:          8Z6QdZAm6ipP1goiFZjslQYb9XOb/wZyuYYrPlulaFM=
Subject key identifier:   9F:17:AA:43:EF:2D:AF:BE:99:75:43:76:57:31:99:C2:A5:7D:CB:10
Certificate issuer:       /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Certificate serial:       2544974B17F989BE3AC07D848F3890019717B72E
Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3136382e302f32322d3232203d3e203234323036.roa
Signing time:             Wed 23 Jul 2025 16:02:17 +0000
ROA not before:           Wed 23 Jul 2025 15:57:17 +0000
ROA not after:            Wed 22 Jul 2026 16:02:17 +0000
asID:                     24206
IP address blocks:        110.44.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl
                          rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 17:28:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:44:97:4b:17:f9:89:be:3a:c0:7d:84:8f:38:90:01:97:17:b7:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
        Validity
            Not Before: Jul 23 15:57:17 2025 GMT
            Not After : Jul 22 16:02:17 2026 GMT
        Subject: CN=9F17AA43EF2DAFBE99754376573199C2A57DCB10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:16:48:41:ba:e7:06:6a:91:4d:61:04:5a:4f:
                    1a:93:0f:4d:82:e8:b4:51:54:b3:c2:d8:86:55:21:
                    c9:ca:7e:e5:e8:76:2f:1b:38:17:40:a7:a2:f4:19:
                    6d:cc:ac:97:9a:2e:24:15:f9:bf:e4:6b:8f:f8:8b:
                    da:7a:01:90:a0:3f:aa:cc:e3:5e:bf:67:d3:16:62:
                    d8:65:22:0a:42:b8:ae:82:f1:1c:3d:9a:c7:d0:d8:
                    69:3e:56:e9:11:a4:f9:3f:ff:fc:f9:f2:8a:e9:04:
                    5b:19:ef:6a:71:e4:04:fc:90:0c:42:a4:f0:22:8c:
                    15:12:1b:42:19:36:b6:ce:dc:c6:3d:f3:96:60:4d:
                    6c:f2:46:ff:93:eb:85:48:69:fc:25:b3:8f:46:8e:
                    0f:a5:0b:e5:2b:43:4d:3c:a8:e3:db:b9:c5:f0:49:
                    8a:6d:55:b0:be:a0:85:58:de:31:ef:fe:ed:fc:40:
                    64:14:99:80:91:a2:55:77:3e:69:06:a4:e2:e0:48:
                    c6:42:29:f7:3f:12:02:8d:78:f4:93:4b:b8:67:4f:
                    1d:52:6f:71:39:2b:58:1d:41:62:4e:03:1e:a2:a0:
                    0c:8c:ef:07:ae:e9:6b:2e:24:d9:61:a6:c5:7e:28:
                    69:b2:0e:b0:89:43:a9:cf:92:37:6c:ee:99:ef:58:
                    8e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:17:AA:43:EF:2D:AF:BE:99:75:43:76:57:31:99:C2:A5:7D:CB:10
            X509v3 Authority Key Identifier:
                keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3136382e302f32322d3232203d3e203234323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.44.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:b1:cf:62:c0:99:c4:b2:b4:2f:92:fa:ce:9d:07:08:b3:8b:
         35:25:c7:e2:95:9b:56:5b:fe:d3:69:af:b7:f3:fb:22:1b:3f:
         1a:61:33:25:2a:c2:c7:ba:da:b1:64:bf:4e:5b:22:81:3f:8c:
         eb:71:cc:e3:b7:4c:12:17:fd:cc:01:58:e6:ef:7d:e5:ce:24:
         3f:16:76:62:ce:7a:5c:49:e4:11:fc:f1:9e:69:96:29:59:30:
         c6:18:53:2c:db:bf:13:ff:52:c6:e7:5d:1f:51:ab:0f:dc:3a:
         18:fa:91:37:01:53:80:f6:24:61:ac:07:c6:79:dd:e3:a8:ca:
         b4:84:c2:2d:f4:12:f7:f3:c5:75:d9:27:94:dc:70:cc:8a:4c:
         45:87:b5:b3:1b:e6:ce:38:13:e0:a9:99:07:69:90:8c:02:d8:
         70:b8:ac:97:24:ae:a9:4b:64:09:0a:5b:98:89:d9:be:f8:68:
         90:f9:8c:38:c5:75:9d:38:5c:51:ff:bc:f9:2c:11:d1:d2:6e:
         0f:4d:0e:32:9e:13:a9:b8:43:0a:06:1e:ff:ca:36:3c:de:9a:
         67:35:50:58:42:af:91:7e:e2:5e:ee:ef:98:90:5c:48:78:77:
         a2:f0:af:57:43:74:31:d7:f8:d8:59:b3:42:b7:45:2c:60:27:
         19:14:13:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:46:29 2025 by rpki-client