Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/35382e3134352e3137312e302f32342d3234203d3e203436303534.roa
File:                     35382e3134352e3137312e302f32342d3234203d3e203436303534.roa (raw, json)
Hash identifier:          pPJorPhtoURcHfFuZaHPY1347QHf/vc9r8CP1wzserg=
Subject key identifier:   50:2D:11:EE:A7:D2:93:61:C6:D3:77:AE:D6:09:CC:26:B2:62:4F:A0
Certificate issuer:       /CN=26425B70294F98035D38788E597A4A6CEB9C9CE5
Certificate serial:       6D61E8FB915105853FAD01E37DD4C21B7D256170
Authority key identifier: 26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/35382e3134352e3137312e302f32342d3234203d3e203436303534.roa
Signing time:             Mon 02 Jun 2025 02:04:42 +0000
ROA not before:           Mon 02 Jun 2025 01:59:42 +0000
ROA not after:            Mon 01 Jun 2026 02:04:42 +0000
asID:                     46054
IP address blocks:        58.145.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl
                          rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 09:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:61:e8:fb:91:51:05:85:3f:ad:01:e3:7d:d4:c2:1b:7d:25:61:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26425B70294F98035D38788E597A4A6CEB9C9CE5
        Validity
            Not Before: Jun  2 01:59:42 2025 GMT
            Not After : Jun  1 02:04:42 2026 GMT
        Subject: CN=502D11EEA7D29361C6D377AED609CC26B2624FA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5b:16:ed:9d:0f:a2:3c:19:99:03:e5:93:dd:
                    51:cc:7b:bd:ea:50:a9:a1:bc:0d:9e:6a:23:35:6d:
                    39:4f:f3:63:94:e9:1b:b3:e2:cd:a1:f2:ff:46:52:
                    b3:49:7b:1f:cd:bf:80:37:17:3d:40:bb:b0:27:3f:
                    fa:be:80:d6:e1:81:f1:84:6f:d8:26:44:cc:e2:b6:
                    51:67:1b:34:43:f7:40:47:a9:60:71:85:ca:ec:3a:
                    7e:77:4e:8c:9b:d8:19:c6:7d:23:60:92:31:0c:ac:
                    bf:65:2b:dc:9c:3b:cd:bd:ec:f9:53:a8:2c:d3:d7:
                    9d:64:07:31:7d:33:bd:fc:29:f1:7a:19:6d:b1:32:
                    75:dd:17:11:f9:0c:f8:75:e5:33:55:3e:40:6d:ff:
                    9e:19:26:c9:ae:21:43:73:15:9f:25:9f:a1:85:3c:
                    53:df:97:16:23:58:d1:13:c9:45:de:c5:ef:f7:d3:
                    39:1d:0e:41:b5:38:64:1e:68:6d:ba:6a:b1:8e:69:
                    36:2b:1b:f3:69:d5:8a:71:17:ae:bc:e7:75:19:bf:
                    d9:33:e7:47:ad:dd:43:34:f4:80:64:6b:72:d3:14:
                    96:00:a0:f4:0f:1a:5d:51:f3:ef:c0:59:f0:71:94:
                    15:79:f0:45:b9:31:23:3a:d9:ba:f5:9b:57:f0:28:
                    c7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:2D:11:EE:A7:D2:93:61:C6:D3:77:AE:D6:09:CC:26:B2:62:4F:A0
            X509v3 Authority Key Identifier:
                keyid:26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/35382e3134352e3137312e302f32342d3234203d3e203436303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.145.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:7f:9e:af:d7:9f:04:2a:a5:fc:37:6f:bf:60:84:cd:dd:58:
         8e:40:f9:37:b6:ff:9c:6c:5d:12:1c:e1:77:ea:a6:2b:41:d2:
         57:36:21:72:fd:08:97:58:92:c8:4e:c6:ee:24:15:4a:ea:bc:
         c1:d8:1f:d0:8d:d3:67:e2:45:2a:2e:34:10:ca:b1:fe:0c:94:
         54:a4:71:c9:db:b4:09:30:aa:c5:30:0c:a2:a6:14:5c:67:73:
         d4:fe:e9:de:bc:2d:d3:9c:dd:8f:36:8a:22:b6:6a:7a:74:9e:
         a1:64:34:89:6e:80:03:eb:37:31:bc:98:15:7a:84:0d:fc:e1:
         bd:b0:c8:89:83:6e:f3:a9:c2:96:79:12:2f:0c:a3:e4:1a:f8:
         05:24:23:37:d3:8f:1f:ee:3f:e0:86:4e:67:7b:e7:16:d0:7f:
         1e:4d:ac:cd:e3:ea:17:e0:62:4d:3d:1a:d3:53:c5:da:5f:90:
         08:ab:2a:40:ac:c6:33:c4:5e:49:30:52:29:39:bd:ea:b6:5f:
         5d:98:d6:f3:c8:ad:5a:a3:2d:cf:95:5b:d7:d9:fd:5e:94:30:
         98:2b:d3:75:0a:bc:de:76:bc:c8:cd:91:ab:d6:4e:18:4a:39:
         8c:96:ac:68:a2:07:06:a3:c3:3d:87:0c:09:55:78:f0:4a:f8:
         3f:23:b8:d4
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUbWHo+5FRBYU/rQHjfdTCG30lYXAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjY0MjVCNzAyOTRGOTgwMzVEMzg3ODhFNTk3QTRBNkNF
QjlDOUNFNTAeFw0yNTA2MDIwMTU5NDJaFw0yNjA2MDEwMjA0NDJaMDMxMTAvBgNV
BAMTKDUwMkQxMUVFQTdEMjkzNjFDNkQzNzdBRUQ2MDlDQzI2QjI2MjRGQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLWxbtnQ+iPBmZA+WT3VHMe73q
UKmhvA2eaiM1bTlP82OU6Ruz4s2h8v9GUrNJex/Nv4A3Fz1Au7AnP/q+gNbhgfGE
b9gmRMzitlFnGzRD90BHqWBxhcrsOn53Toyb2BnGfSNgkjEMrL9lK9ycO8297PlT
qCzT151kBzF9M738KfF6GW2xMnXdFxH5DPh15TNVPkBt/54ZJsmuIUNzFZ8ln6GF
PFPflxYjWNETyUXexe/30zkdDkG1OGQeaG26arGOaTYrG/Np1YpxF66853UZv9kz
50et3UM09IBka3LTFJYAoPQPGl1R8+/AWfBxlBV58EW5MSM62br1m1fwKMePAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUUC0R7qfSk2HG03eu1gnMJrJiT6AwHwYDVR0j
BBgwFoAUJkJbcClPmANdOHiOWXpKbOucnOUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
Y2YzMDkzNi1jNzUwLTQzM2ItOWMyYS04ZmY1ZjM4ZTYzZDQvMC8yNjQyNUI3MDI5
NEY5ODAzNUQzODc4OEU1OTdBNEE2Q0VCOUM5Q0U1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjY0MjVCNzAyOTRGOTgwMzVEMzg3ODhFNTk3QTRBNkNFQjlD
OUNFNS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNjZjMwOTM2LWM3NTAtNDMzYi05
YzJhLThmZjVmMzhlNjNkNC8wLzM1MzgyZTMxMzQzNTJlMzEzNzMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzUzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADqRqzANBgkqhkiG
9w0BAQsFAAOCAQEAWH+er9efBCql/Ddvv2CEzd1YjkD5N7b/nGxdEhzhd+qmK0HS
VzYhcv0Il1iSyE7G7iQVSuq8wdgf0I3TZ+JFKi40EMqx/gyUVKRxydu0CTCqxTAM
oqYUXGdz1P7p3rwt05zdjzaKIrZqenSeoWQ0iW6AA+s3MbyYFXqEDfzhvbDIiYNu
86nClnkSLwyj5Br4BSQjN9OPH+4/4IZOZ3vnFtB/Hk2szePqF+BiTT0a01PF2l+Q
CKsqQKzGM8ReSTBSKTm96rZfXZjW88itWqMtz5Vb19n9XpQwmCvTdQq83na8yM2R
q9ZOGEo5jJasaKIHBqPDPYcMCVV48Er4PyO41A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:29:28 2025 by rpki-client