Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e35302e32312e302f32342d3234203d3e20313338313338.roa
File:                     3130312e35302e32312e302f32342d3234203d3e20313338313338.roa (raw, json)
Hash identifier:          MheHwe0E0iL7GzcwSYzXHqrIcUInhng8LR4LFQnT8VQ=
Subject key identifier:   F0:61:B1:0F:4F:F5:F1:9E:E0:55:4B:69:04:AB:00:02:F4:86:32:4D
Certificate issuer:       /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial:       58B90470364E8EBB5253B2E18183D4B77CC41B40
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e35302e32312e302f32342d3234203d3e20313338313338.roa
Signing time:             Tue 01 Jul 2025 04:00:00 +0000
ROA not before:           Tue 01 Jul 2025 03:55:00 +0000
ROA not after:            Tue 30 Jun 2026 04:00:00 +0000
asID:                     138138
IP address blocks:        101.50.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
                          rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 02:36:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:b9:04:70:36:4e:8e:bb:52:53:b2:e1:81:83:d4:b7:7c:c4:1b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
        Validity
            Not Before: Jul  1 03:55:00 2025 GMT
            Not After : Jun 30 04:00:00 2026 GMT
        Subject: CN=F061B10F4FF5F19EE0554B6904AB0002F486324D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bb:a9:0e:70:91:d9:db:ed:5b:19:21:6e:a7:
                    d0:a0:62:dd:48:f5:e5:5f:d3:d0:a2:66:92:01:81:
                    cb:1b:4e:0d:81:b8:34:18:47:cd:89:5e:32:6f:22:
                    57:47:6b:b0:2d:cf:73:f2:18:57:67:d2:57:8f:6f:
                    61:7c:9d:14:3c:c7:cf:91:bb:56:7c:79:d6:d5:ea:
                    99:02:a1:4d:a6:b1:58:4b:d2:c9:46:05:73:be:e5:
                    2e:ed:0b:f0:e7:12:2f:ad:30:11:94:80:d9:d3:77:
                    6b:67:4b:fe:ee:dd:d1:71:3b:c4:8b:76:33:32:75:
                    08:16:1f:15:b2:6f:4c:bc:53:ab:fe:f2:3c:cb:b0:
                    cf:b8:bf:51:bd:e5:70:5c:9b:2c:e3:eb:e2:c5:7c:
                    cb:0b:59:61:0d:ff:dc:cc:91:22:2b:e3:cf:f8:bf:
                    5a:e0:80:fd:f2:01:f3:34:04:13:ce:cc:4f:49:d3:
                    50:bc:f7:64:9d:e0:e7:e0:a6:41:22:65:5b:48:b8:
                    2c:14:5e:12:ac:e8:f8:27:10:72:69:6d:3d:57:0f:
                    05:22:e9:fa:5a:8b:c3:df:a1:38:6a:59:d0:bd:6b:
                    71:75:93:74:98:6e:07:e4:b1:f1:88:e0:d2:74:1c:
                    c7:82:1c:3a:46:c8:bc:6d:5c:5b:da:e7:3a:af:fb:
                    41:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:61:B1:0F:4F:F5:F1:9E:E0:55:4B:69:04:AB:00:02:F4:86:32:4D
            X509v3 Authority Key Identifier:
                keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e35302e32312e302f32342d3234203d3e20313338313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.50.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:67:08:1e:58:48:a2:f1:34:98:0c:ff:70:c6:66:9b:ba:95:
         4d:5b:ea:47:53:46:6b:e5:86:35:ff:fb:1b:3b:35:fb:d2:1e:
         ee:e7:2b:a5:6f:9a:47:74:2f:6a:eb:cf:e7:8c:09:7a:e2:2b:
         5f:d8:3f:50:d3:c8:a2:c5:63:0b:03:81:ad:db:3b:34:b6:22:
         64:e7:a9:3b:34:11:9f:5e:34:95:10:2b:14:02:0b:7f:b1:8f:
         0e:55:5e:39:06:6b:a6:10:1c:d5:fb:0d:6a:ac:88:c2:35:ed:
         59:70:f3:ac:ad:b9:e3:1a:6b:9e:16:6c:94:6e:67:ae:54:78:
         28:6c:e0:2b:a4:f7:56:97:72:93:ce:19:18:46:a6:c3:4f:ae:
         4e:16:a4:e5:54:2d:8c:a9:66:ec:b8:51:b7:8f:6d:61:91:8a:
         4b:2b:8e:31:c0:02:91:29:13:e7:79:c3:93:e8:39:2b:80:a2:
         8e:e4:ae:56:97:bb:cf:0d:27:f1:13:b3:7c:82:87:7b:4a:25:
         4a:b4:ac:e2:16:fe:58:8a:49:b5:9e:58:95:5a:fa:6c:60:f2:
         73:67:8c:d7:18:14:32:1a:20:0f:cb:04:1c:ce:e2:57:6e:dd:
         5d:6c:97:20:3c:00:ad:eb:b9:2b:be:ef:18:0e:5d:4e:e5:0c:
         f2:c0:05:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:26:45 2025 by rpki-client