Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/3231322e3131372e34382e302f32302d3234203d3e203538333736.roa
File:                     3231322e3131372e34382e302f32302d3234203d3e203538333736.roa (raw, json)
Hash identifier:          aezyzCcGyqe7zpkvtIU/eZ/H5lzYV15JrdWQKNqGiws=
Subject key identifier:   DF:1E:F8:EF:48:24:69:9B:8D:21:02:7D:0D:F4:92:81:A6:1A:19:EA
Certificate issuer:       /CN=55E79C1D60B12E58D121B265CA67C0BD60D4CF92
Certificate serial:       60C1A337DFA68163D30531CC9B81D0E4CA0D8963
Authority key identifier: 55:E7:9C:1D:60:B1:2E:58:D1:21:B2:65:CA:67:C0:BD:60:D4:CF:92
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/3231322e3131372e34382e302f32302d3234203d3e203538333736.roa
Signing time:             Mon 02 Jun 2025 02:03:32 +0000
ROA not before:           Mon 02 Jun 2025 01:58:32 +0000
ROA not after:            Mon 01 Jun 2026 02:03:32 +0000
asID:                     58376
IP address blocks:        212.117.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.crl
                          rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 00:25:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:c1:a3:37:df:a6:81:63:d3:05:31:cc:9b:81:d0:e4:ca:0d:89:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55E79C1D60B12E58D121B265CA67C0BD60D4CF92
        Validity
            Not Before: Jun  2 01:58:32 2025 GMT
            Not After : Jun  1 02:03:32 2026 GMT
        Subject: CN=DF1EF8EF4824699B8D21027D0DF49281A61A19EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9b:18:cc:22:93:e0:ee:3d:68:4c:0a:95:5a:
                    ba:33:74:65:37:ec:85:63:68:bd:e9:12:09:e6:09:
                    7c:00:7c:0a:5f:f4:9b:1f:ce:04:dd:af:83:d1:8e:
                    54:40:94:b2:4a:93:ce:57:ae:16:17:bc:79:39:16:
                    e5:80:f4:3b:4c:07:7a:e9:81:61:d6:dd:45:44:24:
                    20:aa:b4:e1:dd:8c:13:46:57:6b:3e:c2:28:7d:7d:
                    bb:ee:e9:b7:7f:8f:8c:e0:2e:03:86:5b:31:4f:1c:
                    06:dd:3d:fe:17:99:e4:e5:c4:e0:bc:3c:8b:3a:f8:
                    3e:14:70:c7:3b:ef:ee:4c:3a:62:b7:56:08:57:ef:
                    e0:0c:9a:a5:1f:4d:ff:96:ca:b9:19:e0:02:3a:c7:
                    95:f3:37:99:82:20:ef:f0:55:24:61:bc:63:87:28:
                    ce:75:c8:b5:fe:c8:7c:5f:2a:8e:92:0f:94:1e:26:
                    6d:e5:4a:14:c9:05:f3:e3:bf:f5:bc:bf:07:f2:62:
                    7d:c7:d9:21:e6:38:6b:6f:80:7f:ef:85:38:17:00:
                    58:61:78:c2:93:c8:71:1e:2e:45:71:3c:c7:6c:5e:
                    d7:b7:d9:cc:2f:06:d9:15:55:30:0c:ea:43:76:8a:
                    31:ce:3f:dd:08:92:fe:45:00:97:d1:9c:0d:30:c3:
                    16:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:1E:F8:EF:48:24:69:9B:8D:21:02:7D:0D:F4:92:81:A6:1A:19:EA
            X509v3 Authority Key Identifier:
                keyid:55:E7:9C:1D:60:B1:2E:58:D1:21:B2:65:CA:67:C0:BD:60:D4:CF:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/1/3231322e3131372e34382e302f32302d3234203d3e203538333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.117.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9d:e8:6b:9d:63:8a:df:e5:bb:7e:7e:f3:33:40:5c:6a:a4:70:
         e0:aa:c0:f8:cf:40:93:8a:f8:33:54:da:78:61:b6:fe:00:f8:
         1b:29:de:f5:e4:97:7a:12:80:40:b1:50:0b:40:0a:ae:f0:73:
         21:4a:ac:70:2b:d2:0f:5c:31:d3:68:b0:25:d0:27:69:57:68:
         6d:80:0e:5b:15:ab:34:d3:d6:3f:a7:35:98:28:06:99:20:0e:
         be:f6:a0:4c:79:e2:82:e5:cf:18:8e:4b:b6:45:5e:5a:c4:d6:
         23:59:6e:d4:59:a3:a8:51:a6:6a:31:5f:88:92:5d:a2:03:15:
         19:82:50:b8:48:bf:10:59:a0:27:b1:b8:04:53:d4:2c:65:f7:
         a2:43:84:09:fe:96:36:ec:f8:7c:a4:20:23:8d:f6:ab:87:76:
         e4:bb:7a:3e:67:5d:18:e8:62:17:d5:50:be:04:d5:4f:ec:48:
         46:76:09:d3:a1:83:0b:be:a6:a4:ff:f8:b1:d5:47:3b:1b:a8:
         f2:d0:ed:70:2a:29:6e:7c:0b:ec:f4:fe:d9:1b:0b:bd:d6:aa:
         ba:3a:2a:a9:ab:fb:60:9e:f6:5e:fc:70:e5:29:e0:99:40:f1:
         5a:78:9a:ed:b1:ed:1c:9a:b2:de:ea:fb:23:6e:4a:7e:26:17:
         ee:21:eb:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:40:51 2025 by rpki-client