Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132342e302f32342d3234203d3e203338353135.roa
File:                     3131372e37342e3132342e302f32342d3234203d3e203338353135.roa (raw, json)
Hash identifier:          nL5h7t1uvPTY7j/fOmJJBHbseWsW8Xn8jUveWxlnXWs=
Subject key identifier:   10:8F:A3:1D:C9:8C:B3:9F:6D:1F:A3:48:57:E8:DF:08:9F:1E:3F:B8
Certificate issuer:       /CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
Certificate serial:       24A107F361BFEAD1E6A8D4A29222A44C54714948
Authority key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132342e302f32342d3234203d3e203338353135.roa
Signing time:             Mon 02 Jun 2025 01:03:17 +0000
ROA not before:           Mon 02 Jun 2025 00:58:17 +0000
ROA not after:            Mon 01 Jun 2026 01:03:17 +0000
asID:                     38515
IP address blocks:        117.74.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl
                          rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 22:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:a1:07:f3:61:bf:ea:d1:e6:a8:d4:a2:92:22:a4:4c:54:71:49:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
        Validity
            Not Before: Jun  2 00:58:17 2025 GMT
            Not After : Jun  1 01:03:17 2026 GMT
        Subject: CN=108FA31DC98CB39F6D1FA34857E8DF089F1E3FB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:50:ce:a4:6d:69:36:5a:8a:64:cb:82:12:b2:
                    2a:98:69:0b:7d:1a:7d:ae:81:58:ae:64:9f:1e:c8:
                    1d:cf:59:5e:5f:bf:51:04:1e:e8:1e:61:f8:7d:89:
                    0a:ed:0b:d8:e8:c1:0e:05:96:52:97:db:b5:aa:e8:
                    d6:0f:6b:35:d1:1a:1c:21:ca:a8:44:12:49:91:65:
                    4c:25:2b:2e:46:c6:da:67:ad:d9:ee:7f:a7:54:40:
                    0b:3b:fa:a6:c5:2d:7d:59:b1:92:9d:b9:a7:c5:0a:
                    3e:88:98:0d:3c:cf:4a:d5:57:52:39:28:13:3f:9e:
                    42:40:3b:4b:d2:58:57:d3:18:3f:2d:74:bc:4f:d4:
                    bf:7e:7a:5c:77:cd:59:2e:29:21:b1:ac:30:3a:5e:
                    cc:db:f4:d1:60:a3:b3:60:94:3c:c5:8e:e4:39:62:
                    28:7a:77:32:91:28:61:bd:04:35:3f:a1:c8:95:04:
                    aa:e5:31:67:c5:c8:2a:98:d8:da:32:19:74:52:c7:
                    1b:cd:19:72:6b:f4:84:7c:25:61:50:dc:79:ed:34:
                    27:40:d0:9d:75:40:26:09:e0:7c:a4:be:52:ea:05:
                    30:94:36:d9:47:ec:46:76:5f:ae:59:1a:d0:7c:ec:
                    24:dc:29:97:6a:b1:6a:bc:fb:fb:5c:36:0b:98:57:
                    6d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:8F:A3:1D:C9:8C:B3:9F:6D:1F:A3:48:57:E8:DF:08:9F:1E:3F:B8
            X509v3 Authority Key Identifier:
                keyid:93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132342e302f32342d3234203d3e203338353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.74.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:66:51:86:5e:1a:8c:8e:b4:05:59:f0:e2:11:5e:ae:c6:de:
         bb:c8:9c:cf:34:90:04:db:e9:45:5e:e4:6c:cf:27:89:37:ed:
         aa:74:cc:26:53:b3:9d:0a:8e:bc:a7:bb:a3:2f:3f:0e:49:68:
         76:c9:e7:73:05:e6:cf:6e:57:00:02:3e:1c:08:58:79:c5:2b:
         39:05:99:d9:d6:12:9d:41:a7:82:bd:d4:eb:15:7a:a7:4b:63:
         a0:66:22:c4:c9:28:6b:e1:d3:7e:6c:85:fd:dc:ee:25:89:9b:
         b1:7d:be:74:3b:02:f8:99:b7:fd:a6:67:92:63:d9:86:42:5c:
         75:c2:43:b4:6b:73:c0:fb:20:df:19:38:a5:26:a7:4f:f6:2e:
         be:76:de:8d:13:61:be:a5:e9:3e:f3:ca:cd:b7:c1:5d:1f:ad:
         79:41:d5:35:0a:27:9f:02:28:12:5f:d0:ac:bc:88:f6:1d:48:
         86:6c:82:83:0a:72:5f:08:56:6d:41:f8:de:31:90:1d:88:63:
         84:4c:b8:5e:7b:41:85:05:e8:95:2c:41:ce:d4:ae:34:e5:40:
         12:cf:cd:00:a8:e2:dc:7a:9a:30:30:92:72:77:eb:ba:7f:d7:
         3a:36:d4:3e:0e:9d:3d:02:67:92:e6:11:c4:4e:ea:66:7e:bc:
         90:e9:c7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:29:40 2025 by rpki-client