Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132352e3231332e3133312e302f32342d3234203d3e203338353133.roa
File:                     3132352e3231332e3133312e302f32342d3234203d3e203338353133.roa (raw, json)
Hash identifier:          5KNt4vLHI7suBeY1ZaEuXktXeL81GJrqgDiBg1uw6cQ=
Subject key identifier:   E9:62:3A:DA:D5:F7:62:9D:82:9A:CF:4A:05:23:9F:DC:CA:B9:AC:EC
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       2F4FD1A9267C1C19BEC6728875A911851B01CF52
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132352e3231332e3133312e302f32342d3234203d3e203338353133.roa
Signing time:             Mon 02 Jun 2025 02:01:37 +0000
ROA not before:           Mon 02 Jun 2025 01:56:37 +0000
ROA not after:            Mon 01 Jun 2026 02:01:37 +0000
asID:                     38513
IP address blocks:        125.213.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 16:32:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:4f:d1:a9:26:7c:1c:19:be:c6:72:88:75:a9:11:85:1b:01:cf:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jun  2 01:56:37 2025 GMT
            Not After : Jun  1 02:01:37 2026 GMT
        Subject: CN=E9623ADAD5F7629D829ACF4A05239FDCCAB9ACEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9a:a1:c6:70:7e:f5:e2:aa:3b:ff:ed:54:35:
                    f2:62:f4:1a:fb:89:ae:74:09:8e:19:f7:98:a4:a2:
                    08:23:44:ea:81:72:64:fa:76:dd:ce:c5:97:bb:32:
                    e5:2d:59:87:7e:b9:93:ff:df:96:39:ac:b0:4d:c1:
                    72:09:59:19:c1:ca:de:bd:3f:9c:cf:b3:c4:e3:01:
                    72:95:62:f9:ea:1e:e4:9e:d7:8d:0c:cd:6f:39:19:
                    eb:41:dd:e7:b7:e6:59:10:19:ac:eb:94:a8:39:e2:
                    a5:91:b4:3a:99:de:44:c7:79:78:d4:d6:ed:25:e6:
                    46:4e:0f:82:35:c9:e3:15:90:c2:35:ab:09:67:e5:
                    33:9d:40:bc:be:2e:dc:56:0a:78:f2:10:e3:d5:10:
                    71:f7:0a:42:a3:d6:8e:b9:43:61:69:49:2a:d1:a5:
                    37:19:24:3f:ab:9a:dd:ed:15:e2:2e:68:bb:cb:e1:
                    59:c2:aa:21:65:0c:85:fd:7e:b5:cf:bc:77:9a:5e:
                    6e:bc:5a:07:3e:65:62:19:90:ff:07:c4:b1:bd:58:
                    72:b0:c6:da:32:9f:22:b4:b1:ba:07:29:3b:59:91:
                    8e:fd:b2:e3:74:23:cf:d6:b8:0b:ce:73:d8:c2:46:
                    fd:8e:62:5e:0e:bb:8b:ad:33:8d:fa:ef:af:8f:10:
                    88:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:62:3A:DA:D5:F7:62:9D:82:9A:CF:4A:05:23:9F:DC:CA:B9:AC:EC
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132352e3231332e3133312e302f32342d3234203d3e203338353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.213.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:79:89:69:1f:1f:98:72:87:da:33:40:28:b6:8b:04:ec:a5:
         e8:ec:91:c5:7e:24:44:01:22:c2:03:5f:2f:56:aa:ba:b3:79:
         38:0d:c3:0f:6f:f3:1d:e2:fe:11:31:57:c8:c4:31:08:50:2a:
         f6:df:f6:57:a0:67:94:c3:2f:b7:63:55:0d:40:d3:15:ba:d0:
         b5:02:5e:46:26:11:90:43:ff:93:ad:fe:42:48:d2:99:4d:59:
         e2:a5:3a:e4:83:a9:3f:e0:dc:80:b5:6b:13:33:66:d1:9b:22:
         39:a9:f3:98:a0:94:3d:44:c6:78:25:36:8c:fc:75:60:09:b2:
         9b:50:a1:1c:51:01:11:29:1d:aa:0f:43:9c:ef:e2:8b:73:a7:
         81:4c:7d:fc:e8:c9:b6:27:15:3a:5f:ab:9d:2c:e2:69:0e:56:
         d7:9f:15:9b:bf:8a:50:eb:f1:c4:99:2f:0b:92:2d:34:4a:51:
         80:fc:0e:98:1d:d4:79:12:6b:8a:fc:c5:72:53:21:88:bc:0f:
         22:6e:a4:6b:50:75:59:b0:4b:a3:76:f7:67:c5:a8:03:64:f2:
         1e:ff:e2:6d:9a:0b:33:58:8b:1c:44:58:75:88:ce:c5:86:17:
         6d:ee:4d:ad:59:61:09:aa:d0:2e:2e:60:8d:77:af:9c:ea:b5:
         ba:8b:fe:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:16:03 2025 by rpki-client