Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/3138302e39342e382e302f32342d3234203d3e20313532303430.roa
File:                     3138302e39342e382e302f32342d3234203d3e20313532303430.roa (raw, json)
Hash identifier:          c2NPfXxSOck24WuWyT1N3C7BCQbBB0F0oXAud+7dRiM=
Subject key identifier:   CC:E3:9D:70:D1:8D:BA:47:52:CB:98:71:FD:B9:A3:BA:65:7B:36:BC
Certificate issuer:       /CN=FA5F6CC99BAC829D4DE7BECEE823199657D018CD
Certificate serial:       359D57566A5E332093A11586F606997CAC7754E0
Authority key identifier: FA:5F:6C:C9:9B:AC:82:9D:4D:E7:BE:CE:E8:23:19:96:57:D0:18:CD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/3138302e39342e382e302f32342d3234203d3e20313532303430.roa
Signing time:             Fri 13 Dec 2024 02:00:02 +0000
ROA not before:           Fri 13 Dec 2024 01:55:02 +0000
ROA not after:            Fri 12 Dec 2025 02:00:02 +0000
asID:                     152040
IP address blocks:        180.94.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.crl
                          rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Apr 2025 21:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:9d:57:56:6a:5e:33:20:93:a1:15:86:f6:06:99:7c:ac:77:54:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA5F6CC99BAC829D4DE7BECEE823199657D018CD
        Validity
            Not Before: Dec 13 01:55:02 2024 GMT
            Not After : Dec 12 02:00:02 2025 GMT
        Subject: CN=CCE39D70D18DBA4752CB9871FDB9A3BA657B36BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:19:a3:46:63:50:e0:7f:00:98:13:18:d4:69:
                    b4:97:2c:49:4e:81:b5:64:4c:0c:e5:09:84:f3:a3:
                    d4:db:c7:0c:e6:7e:ef:fa:1a:bc:68:95:e7:5d:cf:
                    12:3f:b1:f9:fb:be:86:8a:14:10:c7:c4:8c:d7:42:
                    b6:b5:df:00:83:f7:ae:85:94:a7:7a:69:49:a5:57:
                    a1:8f:11:59:47:cb:93:95:e2:6b:ba:ec:e1:14:00:
                    55:b1:15:5d:d5:0e:3e:47:65:ca:0f:9b:d1:4a:ce:
                    df:e1:36:09:3b:82:4a:cc:c2:76:14:79:57:2d:95:
                    3d:ae:99:78:1d:44:f1:d5:cf:bc:12:5c:85:22:b2:
                    d0:3b:49:2f:c0:3c:95:8d:13:28:24:02:95:c4:45:
                    f8:6b:b9:fb:5b:67:b8:9c:35:56:40:18:11:41:68:
                    11:cd:b1:48:51:32:d5:3a:62:e9:0a:8f:ca:88:b4:
                    3f:0d:f4:81:15:16:7c:14:92:d9:fa:7b:d8:70:8a:
                    ec:d4:5b:6f:2a:dc:cc:f6:6a:fa:f8:a9:e0:b4:b4:
                    82:9e:56:c2:8c:e8:fa:e2:3b:ad:86:4b:19:f4:b4:
                    d3:b4:53:a7:c5:34:39:2f:ba:ff:7d:d1:9d:52:ed:
                    96:ac:b5:64:df:c2:89:39:12:5e:a3:53:d6:ee:32:
                    28:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E3:9D:70:D1:8D:BA:47:52:CB:98:71:FD:B9:A3:BA:65:7B:36:BC
            X509v3 Authority Key Identifier:
                keyid:FA:5F:6C:C9:9B:AC:82:9D:4D:E7:BE:CE:E8:23:19:96:57:D0:18:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/3138302e39342e382e302f32342d3234203d3e20313532303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.94.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:d2:84:13:b2:16:1c:23:88:41:90:eb:ae:9d:32:23:e0:25:
         9b:da:d9:af:52:02:5a:65:2d:f8:eb:f3:7f:f7:34:fa:2e:23:
         3d:86:34:7d:b4:43:87:70:28:41:87:0d:18:9f:7f:b6:c0:c1:
         21:29:61:16:f3:c1:57:59:39:97:4a:d2:24:d4:bf:1e:5d:6b:
         1b:de:75:c5:37:f0:f8:61:86:ee:1e:0f:64:08:56:de:b9:11:
         61:0d:e3:e7:2f:fb:93:9d:6d:ae:42:dc:bd:b1:51:bd:ff:2c:
         1a:64:77:9f:e9:c9:12:ed:c3:26:dd:9a:e9:f5:4b:31:1f:be:
         fb:68:ee:18:2b:7c:03:1c:b4:b5:92:1c:c3:4d:ca:6d:ba:c6:
         db:83:6b:c0:0e:65:56:34:58:7d:b9:84:eb:d4:e5:d0:1e:c0:
         3d:53:65:04:3c:e8:ea:0b:f9:01:af:62:c6:bf:62:47:46:76:
         1a:21:63:d8:d4:38:45:61:db:cd:ae:54:e8:a4:22:0c:e4:dc:
         5b:6d:c3:34:96:a9:cd:16:c1:f8:db:2a:49:17:24:8c:a5:d8:
         b3:9f:20:56:ee:0c:8d:a9:78:16:96:2b:42:7f:d6:af:fc:1b:
         75:5c:df:d9:4e:94:2d:ae:95:49:bd:81:bf:a6:f9:51:25:26:
         0f:d8:40:20
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUNZ1XVmpeMyCToRWG9gaZfKx3VOAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkE1RjZDQzk5QkFDODI5RDRERTdCRUNFRTgyMzE5OTY1
N0QwMThDRDAeFw0yNDEyMTMwMTU1MDJaFw0yNTEyMTIwMjAwMDJaMDMxMTAvBgNV
BAMTKENDRTM5RDcwRDE4REJBNDc1MkNCOTg3MUZEQjlBM0JBNjU3QjM2QkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChGaNGY1DgfwCYExjUabSXLElO
gbVkTAzlCYTzo9Tbxwzmfu/6GrxoleddzxI/sfn7voaKFBDHxIzXQra13wCD966F
lKd6aUmlV6GPEVlHy5OV4mu67OEUAFWxFV3VDj5HZcoPm9FKzt/hNgk7gkrMwnYU
eVctlT2umXgdRPHVz7wSXIUistA7SS/APJWNEygkApXERfhruftbZ7icNVZAGBFB
aBHNsUhRMtU6YukKj8qItD8N9IEVFnwUktn6e9hwiuzUW28q3Mz2avr4qeC0tIKe
VsKM6PriO62GSxn0tNO0U6fFNDkvuv990Z1S7ZastWTfwok5El6jU9buMiinAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUzOOdcNGNukdSy5hx/bmjumV7NrwwHwYDVR0j
BBgwFoAU+l9syZusgp1N577O6CMZllfQGM0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
NmYxZWI0Yi00OGRjLTRlZWEtOTE4MS0xMjhjYjI4YjNkYmEvMC9GQTVGNkNDOTlC
QUM4MjlENERFN0JFQ0VFODIzMTk5NjU3RDAxOENELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRkE1RjZDQzk5QkFDODI5RDRERTdCRUNFRTgyMzE5OTY1N0Qw
MThDRC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU2ZjFlYjRiLTQ4ZGMtNGVlYS05
MTgxLTEyOGNiMjhiM2RiYS8wLzMxMzgzMDJlMzkzNDJlMzgyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM1MzIzMDM0MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0XggwDQYJKoZIhvcN
AQELBQADggEBAEnShBOyFhwjiEGQ666dMiPgJZva2a9SAlplLfjr83/3NPouIz2G
NH20Q4dwKEGHDRiff7bAwSEpYRbzwVdZOZdK0iTUvx5daxvedcU38Phhhu4eD2QI
Vt65EWEN4+cv+5Odba5C3L2xUb3/LBpkd5/pyRLtwybdmun1SzEfvvto7hgrfAMc
tLWSHMNNym26xtuDa8AOZVY0WH25hOvU5dAewD1TZQQ86OoL+QGvYsa/YkdGdhoh
Y9jUOEVh282uVOikIgzk3FttwzSWqc0WwfjbKkkXJIyl2LOfIFbuDI2peBaWK0J/
1q/8G3Vc39lOlC2ulUm9gb+m+VElJg/YQCA=
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:45:42 2025 by rpki-client