Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132352e3231332e3132392e302f32342d3234203d3e203338353133.roa
File:                     3132352e3231332e3132392e302f32342d3234203d3e203338353133.roa (raw, json)
Hash identifier:          ctX/eZ5g6Tdvr55tB1uXL6yaSjkqJh40YyM/rycPALA=
Subject key identifier:   99:36:AB:86:C6:E5:3D:38:6C:97:9E:C3:56:F2:46:6A:CB:F3:06:B8
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       03B30D2169976CAB41FD5764D7CE378C9CE1424A
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132352e3231332e3132392e302f32342d3234203d3e203338353133.roa
Signing time:             Mon 02 Jun 2025 01:03:19 +0000
ROA not before:           Mon 02 Jun 2025 00:58:19 +0000
ROA not after:            Mon 01 Jun 2026 01:03:19 +0000
asID:                     38513
IP address blocks:        125.213.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 16:32:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:b3:0d:21:69:97:6c:ab:41:fd:57:64:d7:ce:37:8c:9c:e1:42:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jun  2 00:58:19 2025 GMT
            Not After : Jun  1 01:03:19 2026 GMT
        Subject: CN=9936AB86C6E53D386C979EC356F2466ACBF306B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d2:ec:0f:13:2b:3a:cf:59:c9:8a:e1:1d:e0:
                    d3:89:b7:ac:25:08:75:e7:89:cc:3e:17:eb:49:5c:
                    52:bb:5a:6c:f6:e0:c4:0a:ba:bc:d4:44:4e:eb:d2:
                    49:4f:4d:91:27:13:02:4d:3e:61:f3:f3:2f:d5:a4:
                    9f:c1:db:c6:bc:3e:f2:31:9a:ed:46:a4:f0:63:5a:
                    9a:30:c2:4b:5b:6c:22:b0:08:64:db:9b:18:7b:ed:
                    a8:13:04:a1:82:28:73:21:08:f3:26:30:30:49:8d:
                    32:b1:3b:d4:cb:7f:3c:4e:ed:51:69:ff:df:29:be:
                    9e:58:a1:9e:07:67:4b:96:99:d7:60:ae:c1:4c:b1:
                    21:60:2b:12:2e:b0:55:7a:6f:5c:f8:02:34:ea:ef:
                    16:ea:0a:e5:d5:bb:8f:f4:57:8b:4b:82:26:7d:ba:
                    37:a5:4a:f3:a1:ee:03:5c:0f:de:80:28:12:e7:33:
                    91:04:ae:44:48:f7:9f:83:47:74:fd:ec:e5:d4:4e:
                    81:77:72:cd:80:60:3d:fa:23:5b:fa:41:70:1a:38:
                    79:54:2e:13:e7:cb:20:e0:5e:bf:b2:0c:7f:49:84:
                    62:59:e1:54:61:1d:16:d6:95:d0:d0:a2:78:36:48:
                    d7:3f:33:ad:b1:34:12:d6:34:8a:89:af:13:ef:d4:
                    85:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:36:AB:86:C6:E5:3D:38:6C:97:9E:C3:56:F2:46:6A:CB:F3:06:B8
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132352e3231332e3132392e302f32342d3234203d3e203338353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.213.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:cf:59:1f:9a:cd:f2:36:02:75:d4:2d:97:8e:7a:08:5a:62:
         47:9a:93:71:c8:a2:af:f4:d7:24:0f:de:06:14:6f:89:f7:37:
         e8:43:48:ab:c2:37:9c:2a:07:14:c4:85:3d:e7:de:18:88:6c:
         cb:12:09:90:74:50:42:36:db:79:c4:ce:31:2d:7a:f6:45:a0:
         38:53:3a:06:d0:bb:3a:f3:fc:7b:a1:0d:5b:06:b1:e1:bb:67:
         48:8f:df:05:4b:00:75:fe:ac:46:b8:be:11:0b:dc:f3:8f:e9:
         dc:8b:37:4c:14:dc:54:84:3a:46:d6:e9:15:91:2b:2d:59:c1:
         fd:0c:c2:ee:1f:29:44:bb:22:69:34:61:03:0f:3a:77:53:e7:
         f1:b7:87:d8:c3:d6:92:0d:8b:fc:cf:e7:68:f4:96:cb:20:81:
         8f:9c:ad:4b:24:d8:86:04:51:9f:c2:6e:eb:cb:18:ae:18:b0:
         09:18:68:3c:0d:9f:ac:b2:a7:f7:33:af:d3:5f:ae:b3:ea:95:
         39:43:1b:3b:0e:18:88:d4:64:ba:92:97:1d:07:87:b8:25:a1:
         d1:49:96:02:ef:54:94:de:32:53:91:4c:8e:f6:12:f7:4c:91:
         a1:66:b3:93:64:6d:87:89:46:9b:0e:cc:0d:78:a3:fd:b6:6a:
         47:6a:77:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:15:58 2025 by rpki-client