Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132332e302f32342d3234203d3e203338353135.roa
File:                     3131372e37342e3132332e302f32342d3234203d3e203338353135.roa (raw, json)
Hash identifier:          5lJDAspWdkYKRvft5YJv1y1oL5whXpt3WUE0fOXTEtQ=
Subject key identifier:   BA:0C:2C:1A:AC:8D:D1:76:F4:FD:5B:C2:8A:D3:A3:A9:8D:E6:D6:1D
Certificate issuer:       /CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
Certificate serial:       7E91FE385C92BD467143C11DA2092E02E3691919
Authority key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132332e302f32342d3234203d3e203338353135.roa
Signing time:             Mon 02 Jun 2025 01:03:17 +0000
ROA not before:           Mon 02 Jun 2025 00:58:17 +0000
ROA not after:            Mon 01 Jun 2026 01:03:17 +0000
asID:                     38515
IP address blocks:        117.74.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl
                          rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 22:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:91:fe:38:5c:92:bd:46:71:43:c1:1d:a2:09:2e:02:e3:69:19:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
        Validity
            Not Before: Jun  2 00:58:17 2025 GMT
            Not After : Jun  1 01:03:17 2026 GMT
        Subject: CN=BA0C2C1AAC8DD176F4FD5BC28AD3A3A98DE6D61D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f8:3b:e6:c1:9d:d0:53:98:cc:f1:9b:62:fc:
                    75:40:be:57:a0:d7:fc:dd:1c:d5:d7:9e:2f:21:d6:
                    df:f5:62:53:30:05:fc:ff:a3:f0:77:31:b1:8d:9f:
                    49:3a:28:b0:1b:dd:39:5f:02:24:4c:32:4b:71:44:
                    eb:18:d1:51:41:20:56:a3:bb:1b:91:fe:37:e5:36:
                    df:23:23:ad:03:6b:1e:a1:8d:58:5c:3e:ae:3b:9c:
                    03:f1:e3:0e:93:13:21:4b:74:79:4e:30:39:fa:1f:
                    34:1f:06:32:bd:88:de:ca:86:80:80:6f:be:a8:b9:
                    5e:96:81:4d:df:de:f9:7f:99:96:bc:a5:25:67:91:
                    8e:ef:13:a2:ec:6e:a6:ac:a8:78:78:85:5d:e5:9e:
                    3b:e8:ad:c9:ab:51:b2:7b:17:60:89:c5:ef:39:12:
                    88:d2:1a:ac:c4:dc:b6:81:5c:77:92:db:2b:4c:29:
                    a4:7e:18:c5:f3:c1:ce:7a:cc:cc:a0:5b:16:33:be:
                    2b:db:da:0b:fb:d3:c9:15:b0:67:d2:e3:cc:9a:cb:
                    8e:c0:4c:a0:97:7f:d6:aa:9d:89:38:32:57:e6:20:
                    6a:f4:ec:c5:33:af:79:4a:8f:b3:9e:e7:6f:76:23:
                    22:1e:b8:11:a0:a5:9d:18:90:68:94:ae:dd:04:05:
                    e8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:0C:2C:1A:AC:8D:D1:76:F4:FD:5B:C2:8A:D3:A3:A9:8D:E6:D6:1D
            X509v3 Authority Key Identifier:
                keyid:93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132332e302f32342d3234203d3e203338353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.74.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:92:92:28:94:14:28:66:5d:29:6b:8b:ac:3c:d9:dd:f0:c2:
         44:0a:19:df:fb:f6:6a:c1:da:9c:44:7c:01:14:b5:f7:ee:01:
         48:57:2d:82:75:96:17:bc:d3:6c:5b:62:e8:df:01:19:dc:e8:
         f6:8d:8b:02:61:9e:d5:96:17:c9:7a:09:8a:63:fa:af:f9:86:
         04:57:fa:55:9e:f9:23:58:66:50:20:dc:c8:dd:9b:b9:94:2b:
         e2:ea:21:79:3f:e4:19:64:d1:9d:11:ec:cf:45:ea:97:4d:8e:
         56:b2:86:ee:fe:bb:60:37:c9:14:a2:88:0c:11:2c:51:e4:b3:
         be:1b:06:cb:47:de:a5:c4:fa:7d:fb:56:db:ca:f2:ff:b3:ef:
         9f:5a:cc:d6:86:d5:fb:1f:02:72:73:c9:61:d6:a2:2c:88:e5:
         88:49:00:af:75:ef:0f:4c:91:7b:8a:9b:3a:89:21:42:be:8d:
         20:48:17:e0:30:b0:c1:4f:0c:6e:3c:e5:74:86:63:21:b5:79:
         cf:3f:f3:53:97:8b:6b:99:6a:d1:d3:67:68:65:de:14:7c:e5:
         c3:35:72:cf:63:bc:cd:e4:f4:6f:6b:62:44:04:00:8c:b7:8f:
         b0:af:2f:c8:50:cd:f1:09:bb:61:18:c1:2b:f1:51:d2:62:76:
         4d:29:ed:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:53:27 2025 by rpki-client