Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/3133392e352e34302e302f32322d3234203d3e20313335343438.roa
File:                     3133392e352e34302e302f32322d3234203d3e20313335343438.roa (raw, json)
Hash identifier:          FiOfMQpB+2gj2/QXJXJKgiwN/buCJemHWYRysKfxPV0=
Subject key identifier:   EC:8B:F2:59:99:43:55:FA:DC:22:C8:5B:C7:B5:F2:0A:B7:E7:C7:29
Certificate issuer:       /CN=03315D0E966A85B878EA9058B8CF03EAF2881889
Certificate serial:       7E0B9D83B357DC9A2270E27C8BAFBBFD6DE4C598
Authority key identifier: 03:31:5D:0E:96:6A:85:B8:78:EA:90:58:B8:CF:03:EA:F2:88:18:89
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/3133392e352e34302e302f32322d3234203d3e20313335343438.roa
Signing time:             Mon 02 Jun 2025 02:03:42 +0000
ROA not before:           Mon 02 Jun 2025 01:58:42 +0000
ROA not after:            Mon 01 Jun 2026 02:03:42 +0000
asID:                     135448
IP address blocks:        139.5.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.crl
                          rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 12:33:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:0b:9d:83:b3:57:dc:9a:22:70:e2:7c:8b:af:bb:fd:6d:e4:c5:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03315D0E966A85B878EA9058B8CF03EAF2881889
        Validity
            Not Before: Jun  2 01:58:42 2025 GMT
            Not After : Jun  1 02:03:42 2026 GMT
        Subject: CN=EC8BF259994355FADC22C85BC7B5F20AB7E7C729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:97:b6:1b:aa:7b:cc:48:9f:a3:74:04:f2:4f:
                    1c:73:ed:82:b5:07:04:bd:08:46:53:1a:60:a2:57:
                    43:5d:4c:33:5d:67:04:46:4b:9d:b8:06:39:e6:31:
                    30:03:c0:37:50:87:b5:6e:de:53:98:ca:01:13:36:
                    12:4d:a3:07:8b:62:08:95:97:0f:28:01:5e:00:3b:
                    7f:0f:f3:76:78:02:b3:32:1d:e8:6f:39:5a:e5:c1:
                    e3:c8:e5:45:3b:fd:6b:7e:3b:be:d7:06:2a:46:3f:
                    49:62:93:75:4f:fe:18:e7:ed:3d:f2:36:34:35:28:
                    f3:ec:f2:ad:ef:af:94:3b:bd:4b:c5:80:b7:1f:64:
                    74:68:2e:11:71:04:2c:12:c1:45:f9:12:bf:91:cc:
                    37:46:c0:49:f4:4d:04:e9:a2:5a:2f:97:7e:8c:c9:
                    48:b6:7a:8c:de:d3:4a:61:2e:9b:be:e9:f7:32:86:
                    e9:6d:18:91:5f:1f:1f:67:9b:57:38:6a:2c:d6:64:
                    0d:d8:ef:33:2b:1a:4a:d1:0c:85:4b:3e:ba:10:92:
                    2b:f0:19:59:37:13:6d:57:70:41:ea:44:65:cd:a7:
                    3b:26:41:1a:74:d6:44:5a:f9:c1:57:b5:c9:72:f5:
                    87:02:09:81:39:28:28:1c:7d:f3:69:d3:c3:ab:93:
                    5d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:8B:F2:59:99:43:55:FA:DC:22:C8:5B:C7:B5:F2:0A:B7:E7:C7:29
            X509v3 Authority Key Identifier:
                keyid:03:31:5D:0E:96:6A:85:B8:78:EA:90:58:B8:CF:03:EA:F2:88:18:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/3133392e352e34302e302f32322d3234203d3e20313335343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.5.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:5d:ab:8c:32:3b:7a:de:89:e2:98:c8:20:ca:0f:85:d5:b8:
         e3:2f:3e:2e:ac:a9:a9:f4:04:93:88:2e:ae:9d:c4:d0:da:75:
         9d:95:1c:2f:e7:2f:5b:d1:36:6b:75:a5:97:96:d5:98:7a:30:
         2b:3d:b9:18:12:c8:03:02:b4:00:12:99:55:98:5b:c3:01:41:
         35:30:71:fb:5a:2f:44:a2:85:05:b5:df:9a:dc:28:e9:67:56:
         00:72:fd:5f:c9:59:c4:08:2c:a3:ea:0b:c2:ba:a9:3b:3c:6b:
         9f:19:3a:e4:fe:cc:4a:36:7c:a1:6f:f3:03:01:92:79:c2:2e:
         f4:b5:a0:af:69:50:21:5b:f1:f3:11:1c:1c:d3:e9:cc:c7:1b:
         5f:42:38:74:2b:54:bd:4a:0d:44:5b:b1:55:b4:b1:f2:98:4c:
         22:2c:a8:05:f5:4d:03:b2:d4:bf:df:4e:85:f2:9b:23:6a:37:
         4f:f3:3c:0f:38:11:a6:86:dc:22:fa:78:c3:e1:70:cd:2e:82:
         0e:f4:84:27:e7:b9:dc:5b:da:0a:0a:0b:be:3d:c0:a1:60:a0:
         7a:86:90:23:e6:06:35:22:df:d0:62:ca:61:6d:1c:71:64:84:
         64:67:0c:5a:80:8f:21:3c:13:11:bd:aa:18:83:47:29:5f:1a:
         81:d7:e9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:30:59 2025 by rpki-client