Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/35382e3134352e3137342e302f32342d3234203d3e203436303534.roa
File:                     35382e3134352e3137342e302f32342d3234203d3e203436303534.roa (raw, json)
Hash identifier:          JNMmXBJmRLeZ0v7hbRMvuNCKgvK7sZzrdM1QwWkvKok=
Subject key identifier:   6D:D5:A7:E8:A4:B7:A6:C5:98:9B:DA:A6:DC:BF:BA:6A:49:95:C0:39
Certificate issuer:       /CN=26425B70294F98035D38788E597A4A6CEB9C9CE5
Certificate serial:       6FEE773C8E2EE7E72C6247B7C9CB146DCD85BEC2
Authority key identifier: 26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/35382e3134352e3137342e302f32342d3234203d3e203436303534.roa
Signing time:             Mon 02 Jun 2025 02:04:41 +0000
ROA not before:           Mon 02 Jun 2025 01:59:41 +0000
ROA not after:            Mon 01 Jun 2026 02:04:41 +0000
asID:                     46054
IP address blocks:        58.145.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl
                          rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 09:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ee:77:3c:8e:2e:e7:e7:2c:62:47:b7:c9:cb:14:6d:cd:85:be:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26425B70294F98035D38788E597A4A6CEB9C9CE5
        Validity
            Not Before: Jun  2 01:59:41 2025 GMT
            Not After : Jun  1 02:04:41 2026 GMT
        Subject: CN=6DD5A7E8A4B7A6C5989BDAA6DCBFBA6A4995C039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9e:ca:f1:bc:63:f1:6d:a0:c9:c8:a7:2b:41:
                    f6:89:5e:ac:cb:79:a3:e0:a1:11:5f:53:22:58:9b:
                    20:68:66:62:67:e3:4f:0f:f0:d3:bb:23:71:c1:75:
                    fe:b2:f5:86:5a:d3:b0:38:05:ec:d0:b4:95:2d:fd:
                    b6:1f:46:c4:74:3a:c6:4a:1c:ff:51:ca:98:04:cc:
                    69:32:6c:f1:df:a8:4d:63:bb:1c:17:a0:2a:c8:aa:
                    80:6c:85:58:f6:7c:6d:5b:53:eb:fb:9e:62:ff:74:
                    b3:e8:c6:f0:82:cb:2a:19:4a:6a:12:ac:4e:66:d6:
                    78:da:de:1b:eb:5e:9c:5a:50:0c:e7:49:84:b1:c3:
                    3c:22:5c:f9:97:8b:66:94:73:0a:19:0f:f7:65:bb:
                    29:b3:90:c1:1a:f2:00:4b:89:5b:79:1f:2b:4b:f6:
                    10:10:ed:eb:37:8e:75:15:c4:8d:c1:f4:3e:1a:d1:
                    96:f4:d7:d3:ff:05:db:eb:ec:ec:78:68:62:82:8f:
                    48:ba:38:ec:32:0e:b1:7b:4d:9f:d3:1b:e4:be:b9:
                    fc:4d:6c:fc:cc:bf:be:71:49:16:5e:c4:1b:7f:b3:
                    c6:8e:a7:ab:1b:4a:26:65:05:d6:38:42:8b:d4:fe:
                    4a:f5:c9:55:85:ed:a7:c6:61:41:c4:2e:4c:18:a2:
                    66:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D5:A7:E8:A4:B7:A6:C5:98:9B:DA:A6:DC:BF:BA:6A:49:95:C0:39
            X509v3 Authority Key Identifier:
                keyid:26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/35382e3134352e3137342e302f32342d3234203d3e203436303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.145.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:77:57:47:42:e9:3a:0b:be:1b:d6:ab:af:8e:5f:8e:90:85:
         53:49:d4:9d:69:4d:fc:67:1a:fa:1a:8a:ee:87:f0:d8:b4:68:
         83:d2:c3:e8:b8:ea:b6:ec:fe:16:03:3b:17:8d:41:f2:37:38:
         0f:60:95:58:56:dc:91:c0:48:1b:84:89:ea:f9:85:56:96:09:
         7b:70:e8:2e:9e:6a:d0:7d:34:eb:c9:6e:f5:25:5c:99:3e:52:
         04:40:d7:53:03:f3:8c:91:8a:92:80:e8:19:76:a6:0a:a1:2f:
         ad:85:3a:4b:fc:ee:48:d8:23:bc:f1:6a:cf:19:a9:c0:00:c0:
         31:5f:01:76:88:a3:6f:c6:d8:64:92:32:b5:d7:54:99:15:f9:
         a9:b2:3b:9e:f2:59:c5:fd:1a:f3:85:77:73:c6:42:18:e5:17:
         7a:b6:5c:e6:7b:83:b2:7d:4d:1c:b2:5b:b0:ab:52:48:6e:29:
         5a:a2:8a:2e:71:c5:89:4b:d5:1d:d4:a8:8f:2a:83:8f:cd:b1:
         ae:9f:39:64:b7:33:49:ca:5b:89:fd:8f:46:ab:95:54:f1:d6:
         14:b4:91:79:b8:a5:3f:fa:b6:d9:ea:b7:ec:3d:6f:4d:f4:fb:
         54:cc:b0:a1:70:42:12:cd:98:7b:ff:39:74:67:ba:3a:c3:f2:
         70:e2:80:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:15:23 2025 by rpki-client