Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132352e302f32342d3234203d3e203338353135.roa
File:                     3131372e37342e3132352e302f32342d3234203d3e203338353135.roa (raw, json)
Hash identifier:          SXRbQUacdI0gdlDCMDP1QFPdIAK9kHRg+ZOPQumVqeM=
Subject key identifier:   E2:B9:3C:8B:70:B0:E5:BF:E3:05:F5:59:EF:00:74:AC:CD:14:11:33
Certificate issuer:       /CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
Certificate serial:       4FEAF4EECC00FCA97439F12188C9E99353C5CD18
Authority key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132352e302f32342d3234203d3e203338353135.roa
Signing time:             Mon 02 Jun 2025 01:03:17 +0000
ROA not before:           Mon 02 Jun 2025 00:58:17 +0000
ROA not after:            Mon 01 Jun 2026 01:03:17 +0000
asID:                     38515
IP address blocks:        117.74.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl
                          rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 22:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ea:f4:ee:cc:00:fc:a9:74:39:f1:21:88:c9:e9:93:53:c5:cd:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
        Validity
            Not Before: Jun  2 00:58:17 2025 GMT
            Not After : Jun  1 01:03:17 2026 GMT
        Subject: CN=E2B93C8B70B0E5BFE305F559EF0074ACCD141133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:15:62:7f:43:cf:f8:41:86:45:7c:f2:67:cd:
                    ce:ef:60:5a:03:4d:66:dd:f0:7e:49:cb:3c:65:48:
                    f8:1d:7f:c9:07:bc:15:ab:96:16:83:e5:2c:ed:df:
                    27:83:8f:b1:71:6d:5f:cc:8c:f8:01:91:b7:72:5c:
                    84:aa:a3:13:46:23:00:58:f1:19:71:13:7d:b2:9e:
                    21:a5:ab:1a:9b:3c:33:e6:52:e2:89:8a:55:d1:85:
                    2d:71:f4:41:6e:23:e9:fe:41:67:b7:b1:2a:e3:39:
                    d9:82:90:a0:c5:60:69:54:f1:b5:d1:f3:32:96:a2:
                    6a:88:78:3a:4e:9b:72:71:ca:5c:65:f3:7c:6d:f0:
                    57:a0:12:bf:35:ce:21:34:92:b8:90:1c:a4:44:eb:
                    dd:1f:c1:78:c8:95:a6:7d:53:62:84:63:fa:8d:2c:
                    14:fd:47:9c:1b:a2:f0:bd:d1:02:9a:34:4a:ac:4e:
                    07:a1:15:56:ad:1f:11:4d:9b:73:3d:5c:46:e1:ea:
                    d5:67:3a:4e:41:46:82:b1:27:0e:a2:95:bb:7c:bc:
                    0c:0f:b6:74:94:4f:78:8d:66:a8:89:95:f8:7c:87:
                    72:63:9c:22:1b:57:c5:98:27:96:48:fc:96:f0:09:
                    49:0a:2d:1b:bf:51:e2:a8:64:ee:67:9e:bf:5a:fd:
                    32:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B9:3C:8B:70:B0:E5:BF:E3:05:F5:59:EF:00:74:AC:CD:14:11:33
            X509v3 Authority Key Identifier:
                keyid:93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132352e302f32342d3234203d3e203338353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.74.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:fa:cf:e1:62:de:bd:5f:c4:56:3a:59:66:71:91:85:2c:43:
         15:24:90:7b:ec:fe:8a:2a:1d:7c:8f:c7:e1:bb:0c:c4:cf:fb:
         02:f2:f7:80:2e:88:ca:8c:71:f7:68:57:ca:72:7d:f5:8c:3f:
         76:7e:fe:de:a3:c0:86:9a:db:3a:79:12:49:5b:f1:ad:04:bc:
         5c:4f:17:6e:40:b9:cb:8d:31:95:eb:b0:5d:0e:17:d7:80:b0:
         9c:5e:0e:4c:09:a6:a7:a1:e4:53:ac:3e:11:66:40:fa:5e:02:
         86:12:81:74:0d:f4:84:4f:eb:0e:c4:b4:2b:d2:97:7d:49:cb:
         46:44:ca:ae:2b:00:cf:c4:5f:d1:03:06:16:17:dc:13:ab:3e:
         cf:d2:1b:d6:44:1d:5c:d7:33:8f:3a:d6:20:30:8f:a1:ee:4b:
         75:7e:03:10:e3:96:5c:08:6d:a1:b0:72:7a:7a:93:f6:e7:c1:
         5f:f5:f1:4c:fa:88:55:5a:e1:6c:8e:31:34:b3:f0:8d:1b:14:
         83:1d:69:2d:92:54:bd:3b:af:de:4a:00:27:51:f0:67:13:a9:
         05:c3:16:57:7d:c4:40:99:2c:8f:f4:8c:99:ef:8b:43:f6:9b:
         2e:ce:ce:07:57:89:25:a9:67:c7:9f:c3:78:9e:10:a6:4a:64:
         f5:45:0f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:29:11 2025 by rpki-client