Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/35382e3134352e3137332e302f32342d3234203d3e203436303534.roa
File:                     35382e3134352e3137332e302f32342d3234203d3e203436303534.roa (raw, json)
Hash identifier:          OH7ZCJTwnLCxXMNsgmtlP1c6T2EBORCMxpBSErbjzUQ=
Subject key identifier:   53:70:DD:C1:94:05:A6:C3:30:D1:CC:C8:FD:2F:E7:99:47:C3:2E:0B
Certificate issuer:       /CN=26425B70294F98035D38788E597A4A6CEB9C9CE5
Certificate serial:       7F6E3DC6A5B3DA528C81EDDC5F1AE2055E346646
Authority key identifier: 26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/35382e3134352e3137332e302f32342d3234203d3e203436303534.roa
Signing time:             Mon 02 Jun 2025 02:04:42 +0000
ROA not before:           Mon 02 Jun 2025 01:59:42 +0000
ROA not after:            Mon 01 Jun 2026 02:04:42 +0000
asID:                     46054
IP address blocks:        58.145.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl
                          rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 09:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:6e:3d:c6:a5:b3:da:52:8c:81:ed:dc:5f:1a:e2:05:5e:34:66:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26425B70294F98035D38788E597A4A6CEB9C9CE5
        Validity
            Not Before: Jun  2 01:59:42 2025 GMT
            Not After : Jun  1 02:04:42 2026 GMT
        Subject: CN=5370DDC19405A6C330D1CCC8FD2FE79947C32E0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b2:2f:ce:b3:5a:8f:dd:94:0f:d3:2b:25:81:
                    4c:3a:4c:46:83:70:92:d2:ae:b3:a6:eb:d5:04:db:
                    29:77:55:ea:e9:3d:f4:40:38:c3:9b:a3:df:b9:77:
                    b7:57:73:c0:65:e8:ec:fa:c5:60:76:63:95:06:6d:
                    53:3f:4b:04:1c:04:50:49:30:2a:af:ca:e2:04:8f:
                    fb:cd:b5:42:78:50:a6:5a:d3:8f:48:2e:30:81:ad:
                    70:55:08:a4:84:ea:a1:84:63:9b:d0:f0:9c:55:72:
                    7f:ad:c3:c6:91:00:7e:d8:68:4d:66:d8:1e:8a:cf:
                    b5:38:94:53:ee:46:57:4e:07:6b:94:ef:67:1d:29:
                    fe:4e:3b:92:3e:b3:92:b5:f4:3e:b2:83:0f:e8:ba:
                    9f:ab:80:9d:2d:6f:76:42:01:7f:c0:33:38:0b:0d:
                    de:c6:cf:23:d2:40:a5:79:2d:59:7c:6d:ff:62:22:
                    a1:01:3c:b2:4a:20:23:5a:a9:30:ce:54:30:d7:d7:
                    ef:85:3b:61:bb:80:4c:ea:7f:bd:e6:2d:1c:ee:26:
                    2e:8e:10:7b:20:a0:5b:59:6f:3c:d2:ab:69:f6:07:
                    42:07:3e:be:17:5b:32:8c:02:42:68:ec:b6:ba:a7:
                    84:7a:7d:12:11:7c:04:85:0d:08:50:36:09:6c:83:
                    08:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:70:DD:C1:94:05:A6:C3:30:D1:CC:C8:FD:2F:E7:99:47:C3:2E:0B
            X509v3 Authority Key Identifier:
                keyid:26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/35382e3134352e3137332e302f32342d3234203d3e203436303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.145.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:b7:72:b6:49:69:00:11:ac:85:82:e4:3c:5d:3c:93:d3:5c:
         85:a9:7e:95:26:52:a9:1b:61:be:9f:be:8b:28:6d:b0:1d:f1:
         2f:80:15:35:33:dd:05:f1:31:b6:d9:cb:30:09:98:8d:40:a2:
         1a:dc:4b:17:32:8b:23:99:ae:fc:8e:26:50:f7:ba:43:18:71:
         f3:a9:c0:11:3a:b8:a1:7f:47:9a:ca:05:d6:9b:63:b1:95:91:
         01:29:84:34:41:5f:ca:61:65:18:e2:56:f9:9c:16:89:f7:8c:
         c4:b2:52:11:aa:03:d6:b7:d2:8b:bf:78:aa:e9:8f:b4:c6:60:
         d3:ce:cd:48:6d:7f:e5:e5:5b:62:10:c2:5b:5f:f3:4e:72:f7:
         c6:bc:e6:e4:05:67:5b:97:00:92:a3:ef:bd:d0:30:46:49:0b:
         86:03:55:a3:f1:13:48:b9:2f:98:00:7c:41:30:7a:1f:e7:04:
         35:f3:54:b1:6d:21:ae:bf:0b:33:80:2b:ea:0f:78:0e:67:35:
         78:ec:f1:6d:0c:89:70:5f:b2:ea:d0:16:b8:b9:06:61:9b:19:
         da:af:be:6d:e5:6b:a3:25:62:6b:3e:11:62:e3:cb:01:fc:f0:
         a1:ac:eb:5d:98:4e:f2:41:e6:0b:64:9d:d0:59:cc:59:2c:95:
         82:33:d2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:30:38 2025 by rpki-client