Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3133352e302f32342d3234203d3e203435333036.roa
File:                     3131392e31352e3133352e302f32342d3234203d3e203435333036.roa (raw, json)
Hash identifier:          od2C/ltQ6m1xjAT8szqDpHM3qB6Kr8NBlMw+dYe1JvU=
Subject key identifier:   F9:4F:E6:6F:7A:9C:E4:28:4E:FB:DC:78:42:D8:72:D5:B5:18:08:74
Certificate issuer:       /CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
Certificate serial:       30BD062F81A7D9B5C70BB912E8183DC8C70AE224
Authority key identifier: F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3133352e302f32342d3234203d3e203435333036.roa
Signing time:             Sun 18 May 2025 06:00:00 +0000
ROA not before:           Sun 18 May 2025 05:55:00 +0000
ROA not after:            Sun 17 May 2026 06:00:00 +0000
asID:                     45306
IP address blocks:        119.15.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl
                          rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 22:14:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:bd:06:2f:81:a7:d9:b5:c7:0b:b9:12:e8:18:3d:c8:c7:0a:e2:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A
        Validity
            Not Before: May 18 05:55:00 2025 GMT
            Not After : May 17 06:00:00 2026 GMT
        Subject: CN=F94FE66F7A9CE4284EFBDC7842D872D5B5180874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:75:87:bd:05:ad:a7:56:5c:31:0f:39:87:c7:
                    3d:b7:f4:bd:bb:75:51:b5:fd:c5:c5:b8:27:32:1d:
                    21:8d:d9:54:2f:2d:8f:4b:c7:97:58:81:7a:58:97:
                    bd:e3:78:25:15:e8:f4:2f:eb:c3:cf:d5:9b:97:32:
                    ac:0b:41:ca:dd:b4:45:0b:eb:4b:da:6c:0b:a8:28:
                    ca:af:e9:2d:c4:6f:2c:c0:02:d1:f3:57:6e:58:0a:
                    10:b8:27:60:5a:be:47:5f:ef:1d:b0:da:f6:d6:3b:
                    a6:90:52:60:10:2d:ba:a4:fe:f7:5d:0c:61:ee:37:
                    39:de:ea:d6:d2:f7:69:2e:d6:f2:f0:5e:21:9a:2e:
                    8f:52:20:83:74:f8:8f:90:75:04:62:48:20:a1:15:
                    fc:57:4a:7c:92:b7:34:3f:8b:20:bf:f0:69:ec:c3:
                    55:40:5e:3b:61:c9:89:30:49:12:60:b7:c5:93:e5:
                    fa:72:35:63:26:f7:99:a7:36:da:7c:66:65:17:33:
                    fd:40:2c:d3:f1:b4:ad:01:ec:a5:a0:2b:2a:a4:eb:
                    0f:0e:f1:99:61:67:ed:b2:99:08:32:4f:31:0d:7b:
                    3e:b1:1a:25:7a:ae:0f:52:3c:34:5a:0d:6e:bc:1f:
                    2d:fc:fa:bc:60:27:82:f8:3e:2c:6e:88:8d:d6:a2:
                    52:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:4F:E6:6F:7A:9C:E4:28:4E:FB:DC:78:42:D8:72:D5:B5:18:08:74
            X509v3 Authority Key Identifier:
                keyid:F1:85:3A:1C:5C:1E:CA:FE:10:76:F9:4A:61:FA:77:96:DD:3C:67:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1853A1C5C1ECAFE1076F94A61FA7796DD3C671A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3133352e302f32342d3234203d3e203435333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.15.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:53:2b:ee:bb:af:d2:63:a4:91:d1:dc:da:a2:06:32:16:b4:
         86:b6:b1:f8:57:07:56:f3:68:fd:2d:8f:2d:4c:59:07:63:8a:
         af:55:55:e3:cb:00:3c:b0:e2:32:45:e2:1c:d3:0e:d7:e7:0e:
         ff:1d:03:25:79:51:10:54:27:37:0f:76:5a:28:4d:84:eb:d9:
         43:5b:83:85:c2:4c:2a:3b:ec:7e:80:eb:40:1d:18:63:f9:d4:
         36:f1:1c:30:d7:ed:8c:65:29:69:d9:06:ce:39:0d:12:91:2b:
         2b:66:34:f6:f0:6e:a0:5e:21:88:01:89:86:fe:89:73:3e:3a:
         89:96:e5:bb:b3:d8:9a:84:fb:05:38:a3:08:58:ae:73:f1:d4:
         56:62:24:e4:4b:56:5b:c0:30:a5:99:52:ac:80:ec:74:7b:6d:
         ca:08:a2:a8:14:c2:db:3f:e1:29:c6:5f:8b:dd:4e:5e:13:d1:
         90:c4:c1:7a:33:ef:d0:7d:29:fb:3b:95:88:5b:90:51:e6:fd:
         b0:81:68:87:54:69:ef:f9:47:2b:e4:0f:b8:54:20:c2:b6:30:
         ff:5f:ce:40:fe:ae:55:88:d2:d9:76:f9:f4:af:04:e0:85:0a:
         58:91:b0:78:5f:f1:9c:60:e9:34:4e:fb:64:96:3b:72:1a:87:
         b1:e9:85:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:09:39 2025 by rpki-client