Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/3132352e36322e39322e302f32322d3234203d3e20313338383032.roa
File:                     3132352e36322e39322e302f32322d3234203d3e20313338383032.roa (raw, json)
Hash identifier:          /mrf9uGudGqcY2xOJDkK2ay/Dazo8lduBDgmiiL0FaY=
Subject key identifier:   BE:61:13:39:DF:0A:D9:BC:07:D2:10:25:42:96:89:D8:83:50:2A:52
Certificate issuer:       /CN=03315D0E966A85B878EA9058B8CF03EAF2881889
Certificate serial:       59E73BD551E527B45FDBA08638E2AE5F9767DFC8
Authority key identifier: 03:31:5D:0E:96:6A:85:B8:78:EA:90:58:B8:CF:03:EA:F2:88:18:89
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/3132352e36322e39322e302f32322d3234203d3e20313338383032.roa
Signing time:             Mon 02 Jun 2025 02:03:43 +0000
ROA not before:           Mon 02 Jun 2025 01:58:43 +0000
ROA not after:            Mon 01 Jun 2026 02:03:43 +0000
asID:                     138802
IP address blocks:        125.62.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.crl
                          rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 12:33:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e7:3b:d5:51:e5:27:b4:5f:db:a0:86:38:e2:ae:5f:97:67:df:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03315D0E966A85B878EA9058B8CF03EAF2881889
        Validity
            Not Before: Jun  2 01:58:43 2025 GMT
            Not After : Jun  1 02:03:43 2026 GMT
        Subject: CN=BE611339DF0AD9BC07D21025429689D883502A52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f1:e1:e5:b0:72:48:98:6f:af:c7:d0:ac:a7:
                    68:eb:7b:61:5c:83:d1:6b:98:9c:8e:42:dd:6c:69:
                    a1:c1:21:64:aa:fc:a9:44:de:d7:07:96:2b:f7:c2:
                    1f:74:9a:a4:67:e2:ec:d6:cf:0c:a6:52:2a:d2:0e:
                    f3:7a:02:18:0d:85:41:e9:85:bc:b4:57:5a:bd:a1:
                    eb:95:e0:7b:34:e6:7f:c5:e3:ba:14:b4:46:03:8f:
                    ec:4e:40:da:ef:b0:f5:8e:f9:98:f7:a1:51:46:25:
                    2f:e9:e0:4a:8f:fa:40:56:8e:67:1b:1e:ae:df:49:
                    60:66:6f:a3:e8:0a:a8:5c:49:ff:65:82:88:e6:0e:
                    09:dc:1e:ba:2f:ce:c1:a9:28:3b:b2:a2:de:36:5a:
                    ea:b6:c9:55:6b:84:6c:bd:44:7f:13:37:4e:d7:5e:
                    0c:df:85:da:1c:a2:be:29:e2:d8:45:30:88:b2:57:
                    13:9e:30:2f:9d:ae:0a:3f:32:21:37:ec:09:b6:63:
                    75:aa:da:7c:cf:f0:b1:23:57:e0:c2:79:72:9f:2c:
                    4e:c7:b2:0d:7f:0e:3b:5e:36:e2:c7:4e:85:47:a7:
                    2d:2d:5b:7b:06:cd:5d:f0:a8:c3:78:48:17:54:4a:
                    2e:10:fe:e1:5b:95:e4:57:27:02:24:4f:5e:8c:db:
                    84:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:61:13:39:DF:0A:D9:BC:07:D2:10:25:42:96:89:D8:83:50:2A:52
            X509v3 Authority Key Identifier:
                keyid:03:31:5D:0E:96:6A:85:B8:78:EA:90:58:B8:CF:03:EA:F2:88:18:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/3132352e36322e39322e302f32322d3234203d3e20313338383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.62.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:67:2f:cd:54:37:3e:86:95:a7:2d:b5:05:bc:7c:c8:ea:d5:
         aa:29:dd:a5:c2:79:4e:09:60:2d:f8:1c:06:3f:05:ce:2a:03:
         61:c3:cd:5e:0c:87:21:27:8d:23:03:dc:48:58:c9:2d:5b:49:
         bd:ce:77:09:40:b7:6c:46:6e:4d:97:e2:a6:df:9b:09:68:72:
         3d:ab:ed:5f:fc:f9:6d:e0:65:57:d1:ca:4a:ae:63:83:d2:03:
         1a:4d:fc:ef:c6:d5:34:55:c2:ef:4b:ea:d7:48:11:fe:1c:ef:
         b2:c7:fb:f7:03:0c:74:26:85:d7:9e:bb:71:ed:cd:e3:9f:ff:
         0c:16:04:d3:be:e5:89:cc:96:4e:13:f7:5d:6f:a9:9c:af:ca:
         64:a7:3c:1d:86:b7:c2:2a:e8:71:c0:1f:65:c6:1d:a3:c9:93:
         d1:5c:de:f5:b6:60:6e:a5:30:0b:f4:4e:4d:24:49:c7:5d:e1:
         d3:32:14:c0:5b:16:37:77:50:5e:3c:7c:5d:5e:28:b7:4c:0c:
         9d:67:bd:3b:9b:2e:47:6c:6c:12:2a:c3:1d:cb:27:e0:f4:8a:
         a6:ad:ee:87:8b:f5:af:fc:8a:6b:c3:ed:9b:eb:9f:2e:c8:d5:
         b0:e3:a5:26:4c:1d:e9:54:e6:eb:29:52:f7:97:71:da:44:74:
         71:f7:dc:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:39:12 2025 by rpki-client