Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3230372e302f32342d3234203d3e20313333383431.roa
File:                     3132332e3233312e3230372e302f32342d3234203d3e20313333383431.roa (raw, json)
Hash identifier:          TDrJbzcb2tC6PfQF+JiluBhTDv8+S68raYuxdgFQOcE=
Subject key identifier:   96:35:02:C9:5C:49:58:87:70:A8:7B:00:16:48:2C:0E:8A:66:5F:4F
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       062651EA09D7624A170AF842B8ED6D093F891746
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3230372e302f32342d3234203d3e20313333383431.roa
Signing time:             Mon 02 Jun 2025 01:03:19 +0000
ROA not before:           Mon 02 Jun 2025 00:58:19 +0000
ROA not after:            Mon 01 Jun 2026 01:03:19 +0000
asID:                     133841
IP address blocks:        123.231.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 16:32:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:26:51:ea:09:d7:62:4a:17:0a:f8:42:b8:ed:6d:09:3f:89:17:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jun  2 00:58:19 2025 GMT
            Not After : Jun  1 01:03:19 2026 GMT
        Subject: CN=963502C95C49588770A87B0016482C0E8A665F4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c9:0c:a8:a0:db:77:bb:f9:7e:bb:4e:70:32:
                    b9:66:12:dd:31:9f:32:70:33:b2:ce:ec:f3:5c:0f:
                    5a:fc:c6:a8:45:72:a9:b6:ed:1b:03:2e:bf:a9:74:
                    69:9d:2a:21:3f:92:af:4e:5e:07:74:aa:af:aa:28:
                    16:ce:3f:73:f3:42:a7:32:8a:22:d9:fa:c4:98:86:
                    92:fb:c2:e7:18:ef:50:33:38:f1:d1:54:d5:0a:22:
                    f8:6f:e9:51:8f:b7:56:81:85:70:d2:63:ad:7f:8d:
                    e6:ac:7e:c4:33:01:76:33:89:f0:f6:29:dc:be:89:
                    c5:07:7a:9f:23:d2:e7:c7:9b:6f:e7:24:53:aa:48:
                    ff:f0:84:87:e0:aa:dc:49:c7:60:e0:93:3a:76:46:
                    d9:42:e7:6b:32:48:60:be:f1:96:75:8e:be:92:5e:
                    dd:75:0c:23:ca:a3:cf:37:d5:a8:ea:c5:bc:26:2d:
                    a7:26:00:4c:3d:89:84:b4:ed:b8:07:b3:7b:36:67:
                    06:11:32:f6:93:5e:ca:c3:87:75:43:e8:77:b8:42:
                    15:11:ac:c7:a0:f3:04:cb:1b:d6:2b:63:87:8c:68:
                    a6:d7:d4:37:23:42:8a:75:9a:b8:2f:33:4d:1a:e3:
                    d9:ff:f2:d0:97:c5:89:6f:8a:06:74:ee:6d:52:98:
                    49:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:35:02:C9:5C:49:58:87:70:A8:7B:00:16:48:2C:0E:8A:66:5F:4F
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3230372e302f32342d3234203d3e20313333383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.231.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:f5:1e:60:ad:2b:61:5b:6d:93:b2:5b:c5:ea:82:a3:9a:56:
         49:a3:ce:e4:66:46:29:22:73:57:02:14:44:20:fc:4f:d2:65:
         be:fa:f6:4a:61:58:a8:36:2c:81:78:a1:46:42:77:7e:31:2d:
         a9:69:69:60:be:f5:45:61:4e:a0:6f:7c:49:12:31:66:c9:91:
         d7:ab:8a:3e:45:e3:26:3a:26:e0:60:18:ab:86:5a:49:e8:1b:
         ab:93:fb:f4:cc:ea:eb:f3:d4:13:82:88:95:c8:35:98:61:8b:
         d4:00:4b:5f:1a:30:0c:27:d4:4b:6f:55:32:ea:9a:ce:94:ef:
         90:df:31:6f:70:44:ce:28:97:0b:cf:9b:96:a7:bf:b2:6c:d9:
         09:5a:35:84:29:91:e0:6a:94:64:76:ce:a7:57:fe:ca:ad:3c:
         8d:17:08:c1:80:65:e0:d6:37:cf:25:7a:bd:27:53:c9:fb:12:
         5b:93:db:92:2a:44:a3:8f:1d:32:3f:16:7c:87:43:ba:04:d8:
         c7:49:6b:78:0c:ad:4d:b3:7e:6e:5b:1f:3a:fd:df:e3:eb:2f:
         e2:4e:31:c7:55:75:5e:49:fd:82:7c:43:32:db:df:e2:22:bd:
         f7:76:06:82:3a:9a:05:97:20:e4:22:0b:86:7a:5a:ae:f8:6e:
         89:b1:e0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:20:25 2025 by rpki-client