Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132362e302f32342d3234203d3e203338353135.roa
File:                     3131372e37342e3132362e302f32342d3234203d3e203338353135.roa (raw, json)
Hash identifier:          x/FofJeZNxkVPOa1E9HkT3zXzpIkigVr7Dyocx4wMZs=
Subject key identifier:   06:DD:21:D4:3B:87:83:AB:0D:3C:D7:B9:FC:46:2F:CC:4E:CF:9D:FC
Certificate issuer:       /CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
Certificate serial:       40723EFCD928DBC38EA91913D035D2B7AB410F65
Authority key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132362e302f32342d3234203d3e203338353135.roa
Signing time:             Mon 02 Jun 2025 01:03:17 +0000
ROA not before:           Mon 02 Jun 2025 00:58:17 +0000
ROA not after:            Mon 01 Jun 2026 01:03:17 +0000
asID:                     38515
IP address blocks:        117.74.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl
                          rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 22:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:72:3e:fc:d9:28:db:c3:8e:a9:19:13:d0:35:d2:b7:ab:41:0f:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
        Validity
            Not Before: Jun  2 00:58:17 2025 GMT
            Not After : Jun  1 01:03:17 2026 GMT
        Subject: CN=06DD21D43B8783AB0D3CD7B9FC462FCC4ECF9DFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:50:e1:16:04:7c:81:84:45:85:25:84:b8:2e:
                    cf:e5:fe:f4:fc:fd:d6:1d:31:bc:92:f2:5d:26:f9:
                    a9:17:7b:55:11:0b:9b:97:c2:c3:f6:85:60:3b:33:
                    d5:61:f9:dc:90:ac:91:16:82:8b:51:c6:4f:2a:ef:
                    13:76:05:1b:8a:b2:18:3e:6c:5b:d7:01:28:99:bc:
                    e2:64:55:61:ca:3f:d3:4f:e0:3c:54:28:9d:a3:87:
                    23:56:d8:cb:9b:ff:88:8e:db:35:18:0a:c5:3d:c4:
                    1b:92:41:31:eb:d2:a2:f1:6c:7d:f6:da:ab:d1:e2:
                    94:e7:75:20:62:6c:1f:11:bd:00:a6:fb:4a:fd:6c:
                    75:7e:2a:68:8f:00:d4:4c:3e:23:fe:53:94:60:eb:
                    8b:20:c8:4a:d2:bc:5b:58:7a:e2:6b:72:26:e6:72:
                    62:21:01:27:a7:f6:58:c5:79:08:e0:7d:c3:4f:87:
                    2b:de:34:4c:e4:27:e0:a2:93:e7:b9:13:eb:e5:e4:
                    32:39:1b:2d:58:b7:69:9a:ab:25:2e:d1:28:0d:3a:
                    57:1b:76:cc:d2:f7:9a:43:d9:f0:7f:61:42:6b:c3:
                    7c:48:de:01:46:bb:68:83:d9:81:56:13:83:25:78:
                    7d:45:e4:6a:7c:d8:f5:f6:97:7d:47:e1:00:ec:76:
                    20:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:DD:21:D4:3B:87:83:AB:0D:3C:D7:B9:FC:46:2F:CC:4E:CF:9D:FC
            X509v3 Authority Key Identifier:
                keyid:93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132362e302f32342d3234203d3e203338353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.74.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:ed:ae:fe:45:8d:2a:8f:91:60:c8:d7:f6:38:62:b1:75:e1:
         a8:d7:f0:1c:2c:b4:19:69:fb:b3:8f:b2:a5:cd:01:14:8b:ac:
         aa:85:4e:61:d0:40:45:5d:8f:0f:93:51:ca:64:2e:f8:c8:74:
         03:f6:c4:f1:f6:9b:a2:86:cb:f3:27:be:cc:b4:05:a1:c2:37:
         49:92:3e:6e:78:69:db:27:8a:32:b4:83:f2:f1:2c:b4:27:5e:
         75:63:37:bd:7c:e3:af:b1:da:2e:00:5c:41:dc:70:21:d4:e8:
         f3:ca:a9:a8:20:ed:ea:bd:75:5b:de:93:04:22:ec:64:d7:f1:
         08:a7:c7:9e:f1:b9:63:a2:68:ff:9c:b2:e9:76:3a:96:14:c0:
         eb:83:76:30:81:d7:b7:8d:b2:1e:5d:bb:9b:2f:65:d0:79:a4:
         de:e7:40:8b:57:2b:8a:15:7b:e1:42:36:05:34:d3:83:1c:99:
         ad:fc:a5:a5:02:10:a5:3c:82:0a:42:dc:be:39:38:fa:11:b1:
         26:b1:e4:4c:8f:1a:1b:b2:e5:bc:2e:40:e8:6c:3a:64:6b:fe:
         96:5b:97:3b:b0:a8:23:f7:28:3c:54:8f:03:64:7b:eb:39:84:
         a5:6c:cf:09:92:b6:b2:e7:ae:39:54:d7:03:f4:44:88:9b:e5:
         62:11:76:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:52:20 2025 by rpki-client