Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132312e302f32342d3234203d3e203338353135.roa
File:                     3131372e37342e3132312e302f32342d3234203d3e203338353135.roa (raw, json)
Hash identifier:          UiXaStQAKJGueqgS6CXK/3jB9NOQ2r7CCSqgVa6KSp8=
Subject key identifier:   9B:A9:57:3D:8E:90:CE:04:D6:2C:BE:D0:4A:61:C5:8F:69:EB:3D:42
Certificate issuer:       /CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
Certificate serial:       66994BDE73364A715767DE1C42ADBAAA845D3CF8
Authority key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132312e302f32342d3234203d3e203338353135.roa
Signing time:             Mon 02 Jun 2025 01:03:17 +0000
ROA not before:           Mon 02 Jun 2025 00:58:17 +0000
ROA not after:            Mon 01 Jun 2026 01:03:17 +0000
asID:                     38515
IP address blocks:        117.74.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl
                          rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 22:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:99:4b:de:73:36:4a:71:57:67:de:1c:42:ad:ba:aa:84:5d:3c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
        Validity
            Not Before: Jun  2 00:58:17 2025 GMT
            Not After : Jun  1 01:03:17 2026 GMT
        Subject: CN=9BA9573D8E90CE04D62CBED04A61C58F69EB3D42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b1:09:26:c4:18:ea:58:d5:ac:51:aa:ee:c3:
                    b1:f8:18:2a:15:51:9f:c4:0f:f6:79:81:fc:dd:47:
                    67:96:f8:58:74:f9:1f:1d:47:47:b7:22:1c:fb:5f:
                    69:b7:50:fe:2a:dd:ff:ab:b9:9c:b6:58:fd:ca:c3:
                    ea:44:0d:f4:06:f6:b2:d1:f7:93:bf:f6:89:0c:9e:
                    af:6e:22:8d:30:2d:96:30:64:1b:3d:61:11:17:91:
                    6c:9a:77:91:b9:72:b7:85:a2:9c:4c:e2:0f:e2:e8:
                    d5:da:4e:0e:e2:43:23:c8:11:71:20:71:56:b2:75:
                    c0:49:3c:26:45:28:41:3e:7c:6e:30:13:9e:d7:f7:
                    8d:0e:91:42:c8:c3:bb:fd:52:19:ca:6f:17:37:0a:
                    8b:ce:ed:72:c2:2b:3c:33:05:29:aa:02:e9:85:56:
                    46:5b:51:15:d4:1b:96:b5:21:22:b8:db:0f:60:cf:
                    d7:78:bf:43:38:1e:fd:eb:5e:89:e1:f0:66:40:df:
                    80:03:a7:87:8c:49:2b:ae:46:ba:87:90:5e:ed:83:
                    17:26:4b:02:f1:91:6c:6a:cc:33:ee:5b:61:54:a5:
                    1e:08:e2:8a:a6:f1:f0:47:8a:be:a5:08:74:0c:07:
                    56:2c:63:d5:99:08:d8:05:09:3c:5d:09:68:90:32:
                    ad:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A9:57:3D:8E:90:CE:04:D6:2C:BE:D0:4A:61:C5:8F:69:EB:3D:42
            X509v3 Authority Key Identifier:
                keyid:93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132312e302f32342d3234203d3e203338353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.74.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:3f:c8:73:ca:17:32:0f:15:53:91:0e:6d:b1:f6:04:4f:2f:
         be:31:30:43:4b:2a:83:76:15:52:85:b5:1f:b4:12:21:a2:e5:
         85:03:e1:7d:b3:a1:ec:cc:a1:e5:eb:eb:cb:49:12:fc:8b:e2:
         b9:9b:11:e2:07:49:70:ab:32:43:51:2d:e6:2f:5a:fd:85:f4:
         61:c5:d2:fc:c3:27:05:6d:ac:15:b8:fa:5b:71:2e:07:67:2d:
         17:3b:49:8c:26:64:d0:d1:9f:eb:5f:6e:23:a4:5e:6e:86:64:
         c1:ba:41:b4:d8:07:0c:46:48:e7:dc:25:7d:d2:85:b7:17:2c:
         7b:14:01:dc:9d:47:4b:72:00:55:ad:98:c3:91:39:3b:0f:90:
         73:67:b5:48:b5:a0:50:1e:c5:79:0f:44:4f:c2:0c:0c:79:e9:
         f4:90:e3:d4:ff:83:93:51:ea:3e:48:d5:af:ed:8b:03:4e:2d:
         12:36:2b:cb:fa:3f:c3:d9:c1:43:da:2f:93:cf:eb:07:db:c6:
         cb:ae:de:1f:c5:58:f6:9f:c0:0e:29:31:1f:23:3e:f7:71:9c:
         be:42:4d:e4:c0:03:55:31:d0:64:96:18:2b:99:a5:51:15:46:
         b3:b7:2a:de:08:eb:59:1e:25:9f:42:64:89:90:a5:86:fd:ab:
         88:75:b7:e5
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUZplL3nM2SnFXZ94cQq26qoRdPPgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTM1REIyRDQ0ODhGQUUyQzExRTFCRjNCREYyMEQ4MkEy
RERGRDhGMzAeFw0yNTA2MDIwMDU4MTdaFw0yNjA2MDEwMTAzMTdaMDMxMTAvBgNV
BAMTKDlCQTk1NzNEOEU5MENFMDRENjJDQkVEMDRBNjFDNThGNjlFQjNENDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMsQkmxBjqWNWsUaruw7H4GCoV
UZ/ED/Z5gfzdR2eW+Fh0+R8dR0e3Ihz7X2m3UP4q3f+ruZy2WP3Kw+pEDfQG9rLR
95O/9okMnq9uIo0wLZYwZBs9YREXkWyad5G5creFopxM4g/i6NXaTg7iQyPIEXEg
cVaydcBJPCZFKEE+fG4wE57X940OkULIw7v9UhnKbxc3CovO7XLCKzwzBSmqAumF
VkZbURXUG5a1ISK42w9gz9d4v0M4Hv3rXonh8GZA34ADp4eMSSuuRrqHkF7tgxcm
SwLxkWxqzDPuW2FUpR4I4oqm8fBHir6lCHQMB1YsY9WZCNgFCTxdCWiQMq15AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUm6lXPY6QzgTWLL7QSmHFj2nrPUIwHwYDVR0j
BBgwFoAUk12y1EiPriwR4b873yDYKi3f2PMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
YzRjNjRhOS0zNTM3LTRiYzctODYxMy04ZTk4MTYyOWU0Y2EvMC85MzVEQjJENDQ4
OEZBRTJDMTFFMUJGM0JERjIwRDgyQTJEREZEOEYzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTM1REIyRDQ0ODhGQUUyQzExRTFCRjNCREYyMEQ4MkEyRERG
RDhGMy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZjNGM2NGE5LTM1MzctNGJjNy04
NjEzLThlOTgxNjI5ZTRjYS8wLzMxMzEzNzJlMzczNDJlMzEzMjMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM1MzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHVKeTANBgkqhkiG
9w0BAQsFAAOCAQEAVD/Ic8oXMg8VU5EObbH2BE8vvjEwQ0sqg3YVUoW1H7QSIaLl
hQPhfbOh7Myh5evry0kS/IviuZsR4gdJcKsyQ1Et5i9a/YX0YcXS/MMnBW2sFbj6
W3EuB2ctFztJjCZk0NGf619uI6ReboZkwbpBtNgHDEZI59wlfdKFtxcsexQB3J1H
S3IAVa2Yw5E5Ow+Qc2e1SLWgUB7FeQ9ET8IMDHnp9JDj1P+Dk1HqPkjVr+2LA04t
EjYry/o/w9nBQ9ovk8/rB9vGy67eH8VY9p/ADikxHyM+93GcvkJN5MADVTHQZJYY
K5mlURVGs7cq3gjrWR4ln0JkiZClhv2riHW35Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:32:16 2025 by rpki-client