Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134342e302f32332d3234203d3e20313430343831.roa
File:                     3131302e37362e3134342e302f32332d3234203d3e20313430343831.roa (raw, json)
Hash identifier:          6L28DKU2IWYtA3lRV3VTpPyJ/UkW+g97L32zaXfZ124=
Subject key identifier:   89:A5:21:A4:6B:73:AE:C7:A4:9E:6C:51:DA:71:3F:F0:03:B5:23:DC
Certificate issuer:       /CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
Certificate serial:       7535C40CBE20E72DFE11D113654C3F3BAD4FE3A4
Authority key identifier: 0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134342e302f32332d3234203d3e20313430343831.roa
Signing time:             Thu 29 May 2025 13:00:00 +0000
ROA not before:           Thu 29 May 2025 12:55:00 +0000
ROA not after:            Thu 28 May 2026 13:00:00 +0000
asID:                     140481
IP address blocks:        110.76.144.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl
                          rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Jun 2025 02:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:35:c4:0c:be:20:e7:2d:fe:11:d1:13:65:4c:3f:3b:ad:4f:e3:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
        Validity
            Not Before: May 29 12:55:00 2025 GMT
            Not After : May 28 13:00:00 2026 GMT
        Subject: CN=89A521A46B73AEC7A49E6C51DA713FF003B523DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ab:34:b5:a5:ea:64:07:f9:fc:81:06:d1:95:
                    0f:20:12:b6:c2:48:ff:06:9c:39:79:19:65:53:78:
                    69:12:a7:bf:54:4e:27:f1:17:3c:2e:47:12:6f:e6:
                    c6:f8:7e:2a:4f:fc:69:20:38:40:c2:b8:44:a1:d5:
                    52:e4:23:3d:82:aa:3b:03:8e:ef:67:af:cd:67:59:
                    8c:e5:4f:a6:92:f7:f1:38:6c:c0:c2:9e:77:20:e9:
                    27:86:93:f9:06:94:c6:37:d3:cc:4c:88:9b:7f:1e:
                    2a:f0:78:92:43:4f:c0:20:c1:df:d3:b1:1b:eb:15:
                    30:88:c2:55:fb:74:29:26:fb:56:42:a5:fa:4a:bf:
                    29:c0:16:c8:1b:a3:41:4f:cf:af:c8:91:d7:09:03:
                    dc:90:32:ab:84:75:52:63:c0:4c:75:4c:9a:ab:2f:
                    2e:1f:3b:84:bf:9e:73:99:31:0d:62:d1:cc:b2:1e:
                    c2:ca:86:46:55:f9:ed:c5:0a:78:8e:8f:e2:d7:f7:
                    ec:9d:91:39:5c:cf:5b:d7:8a:18:55:ef:6b:08:23:
                    a4:1a:7d:d0:ce:90:29:45:c2:04:99:e3:8a:c9:79:
                    eb:9b:3a:93:75:54:45:5d:61:70:4a:e9:08:d0:5a:
                    97:a5:ae:ab:65:e3:fe:64:25:32:6a:a7:85:ed:0f:
                    6b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A5:21:A4:6B:73:AE:C7:A4:9E:6C:51:DA:71:3F:F0:03:B5:23:DC
            X509v3 Authority Key Identifier:
                keyid:0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134342e302f32332d3234203d3e20313430343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.76.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:e2:89:e4:c2:86:e2:86:9b:d4:ec:23:20:d0:dd:3c:d8:5f:
         87:30:88:a8:a1:02:08:73:24:c1:15:50:dd:94:91:6f:82:a9:
         dd:64:02:c7:7d:20:cb:a1:be:91:0a:e5:cf:b0:ad:1c:ae:ac:
         a3:39:9b:02:0f:df:21:3e:c3:92:7c:60:b3:f1:96:4e:57:36:
         26:e1:32:da:60:6f:b5:9b:f9:ef:ad:bd:0b:9d:a2:5c:a8:a3:
         d3:42:e8:a5:0f:74:83:fb:a3:3d:b4:63:43:32:e8:0f:7c:45:
         ae:90:4d:51:3a:06:ae:6b:d5:06:76:20:0a:17:32:41:f8:5b:
         25:bd:35:d0:7e:37:78:d6:1c:d3:26:50:4e:ef:1e:67:a7:ec:
         8b:61:bf:2d:7c:be:69:dd:9a:17:7b:fc:02:7a:5e:a3:0f:02:
         ed:ad:9f:4f:91:07:95:0d:d2:49:62:92:a2:54:67:45:09:2a:
         95:60:59:49:3a:b4:10:66:cc:ef:73:d8:09:25:ca:2b:ce:82:
         bc:41:b4:08:4a:4c:99:20:e8:0a:b4:e2:f7:e7:25:b8:4a:51:
         e7:b3:ce:19:35:c0:9a:7a:be:28:ec:d5:9d:4e:35:6d:65:f6:
         cd:93:60:c8:f6:b8:74:b6:0a:48:f3:3c:17:63:95:cb:b7:6e:
         e8:ad:bf:40
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUdTXEDL4g5y3+EdETZUw/O61P46QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEZEMDQ0RDYxMzQ4Qzg4RERDRkZDNEYzQzMzQkZCQzQ1
MUJDMTdBMjAeFw0yNTA1MjkxMjU1MDBaFw0yNjA1MjgxMzAwMDBaMDMxMTAvBgNV
BAMTKDg5QTUyMUE0NkI3M0FFQzdBNDlFNkM1MURBNzEzRkYwMDNCNTIzREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgqzS1pepkB/n8gQbRlQ8gErbC
SP8GnDl5GWVTeGkSp79UTifxFzwuRxJv5sb4fipP/GkgOEDCuESh1VLkIz2CqjsD
ju9nr81nWYzlT6aS9/E4bMDCnncg6SeGk/kGlMY308xMiJt/HirweJJDT8Agwd/T
sRvrFTCIwlX7dCkm+1ZCpfpKvynAFsgbo0FPz6/IkdcJA9yQMquEdVJjwEx1TJqr
Ly4fO4S/nnOZMQ1i0cyyHsLKhkZV+e3FCniOj+LX9+ydkTlcz1vXihhV72sII6Qa
fdDOkClFwgSZ44rJeeubOpN1VEVdYXBK6QjQWpelrqtl4/5kJTJqp4XtD2t3AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUiaUhpGtzrseknmxR2nE/8AO1I9wwHwYDVR0j
BBgwFoAUD9BE1hNIyI3c/8Tzwzv7xFG8F6IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
YjU0OGJhZC03ZmVkLTQxZmQtYjQyZS03ODAzNzJjNDUyNTUvMC8wRkQwNDRENjEz
NDhDODhERENGRkM0RjNDMzNCRkJDNDUxQkMxN0EyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMEZEMDQ0RDYxMzQ4Qzg4RERDRkZDNEYzQzMzQkZCQzQ1MUJD
MTdBMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhiNTQ4YmFkLTdmZWQtNDFmZC1i
NDJlLTc4MDM3MmM0NTI1NS8wLzMxMzEzMDJlMzczNjJlMzEzNDM0MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzNDMwMzQzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbkyQMA0GCSqG
SIb3DQEBCwUAA4IBAQAe4onkwobihpvU7CMg0N082F+HMIiooQIIcyTBFVDdlJFv
gqndZALHfSDLob6RCuXPsK0crqyjOZsCD98hPsOSfGCz8ZZOVzYm4TLaYG+1m/nv
rb0LnaJcqKPTQuilD3SD+6M9tGNDMugPfEWukE1ROgaua9UGdiAKFzJB+FslvTXQ
fjd41hzTJlBO7x5np+yLYb8tfL5p3ZoXe/wCel6jDwLtrZ9PkQeVDdJJYpKiVGdF
CSqVYFlJOrQQZszvc9gJJcorzoK8QbQISkyZIOgKtOL35yW4SlHns84ZNcCaer4o
7NWdTjVtZfbNk2DI9rh0tgpI8zwXY5XLt27orb9A
-----END CERTIFICATE-----
Generated at Sun Jun 8 22:06:46 2025 by rpki-client