Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/3131302e352e39362e302f32302d3234203d3e203234353233.roa
File:                     3131302e352e39362e302f32302d3234203d3e203234353233.roa (raw, json)
Hash identifier:          YQwpls/VIYk0HtO6le+F2vrKuryHDRtN3YkX83o6jq0=
Subject key identifier:   41:D0:B9:07:F9:C7:5F:59:5F:1F:CD:18:46:F0:E0:54:10:3A:35:00
Certificate issuer:       /CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38
Certificate serial:       19D58841DEE30AF17CDC89D2C572863E12ABF48E
Authority key identifier: 11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/3131302e352e39362e302f32302d3234203d3e203234353233.roa
Signing time:             Mon 02 Jun 2025 02:03:00 +0000
ROA not before:           Mon 02 Jun 2025 01:58:00 +0000
ROA not after:            Mon 01 Jun 2026 02:03:00 +0000
asID:                     24523
IP address blocks:        110.5.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl
                          rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 20:31:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:d5:88:41:de:e3:0a:f1:7c:dc:89:d2:c5:72:86:3e:12:ab:f4:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38
        Validity
            Not Before: Jun  2 01:58:00 2025 GMT
            Not After : Jun  1 02:03:00 2026 GMT
        Subject: CN=41D0B907F9C75F595F1FCD1846F0E054103A3500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2d:4c:9b:17:5a:ee:b9:c9:f6:95:d2:3f:1f:
                    e5:55:9d:4d:eb:19:57:86:4f:bb:50:e8:07:25:8e:
                    f4:35:ad:0b:db:38:40:f0:63:e7:7b:5c:63:96:6a:
                    fb:58:85:3b:f9:0c:f0:d1:8b:e4:60:37:a4:b1:8f:
                    43:18:77:bd:71:c5:09:b0:2d:e8:44:89:58:11:2c:
                    dc:04:e2:36:0b:d0:c9:cd:b7:fe:a9:aa:0a:08:a8:
                    f8:0b:52:0a:1e:28:3c:81:09:b0:66:5d:73:e3:37:
                    ef:31:9a:fa:b2:c1:4e:bf:6a:22:88:e9:f8:9e:7b:
                    a1:30:69:77:81:65:87:f5:36:5f:80:5e:8a:57:7b:
                    7a:1f:a2:8a:81:8e:c1:94:15:29:54:a8:ce:54:03:
                    bd:2f:6d:a7:8f:0f:b6:de:f2:47:3d:18:29:de:7b:
                    3b:43:6b:7a:0d:61:3a:f0:9d:db:fb:8c:cd:f5:0e:
                    42:0d:bf:95:a7:03:d6:f1:c3:03:1e:11:35:0e:fe:
                    6b:b1:5a:69:b6:ec:a9:38:0c:dd:53:fd:b9:00:e1:
                    5c:46:e2:a6:6a:65:e8:39:2f:c8:f7:b2:50:4f:e5:
                    1b:4f:bb:11:a2:34:52:8b:6c:21:c5:d7:a8:75:23:
                    89:c3:9c:b4:d1:cd:09:92:5d:a0:a8:b0:b6:67:27:
                    8d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D0:B9:07:F9:C7:5F:59:5F:1F:CD:18:46:F0:E0:54:10:3A:35:00
            X509v3 Authority Key Identifier:
                keyid:11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/3131302e352e39362e302f32302d3234203d3e203234353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.5.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3b:f7:1e:f5:70:54:c2:b5:10:84:b8:9b:8f:e4:0f:f4:0e:61:
         8c:bd:c5:e2:38:20:91:e2:62:a3:22:26:d1:37:82:43:13:68:
         f7:58:7e:22:1f:4e:2c:1a:5d:e5:00:33:5b:bd:3c:9d:28:b3:
         aa:be:49:9b:a2:f0:2c:86:9a:08:25:22:32:f5:df:f7:fe:ce:
         3c:a0:ac:a4:3b:14:54:e2:1b:1a:f5:61:fc:69:ac:dc:d6:54:
         57:40:24:db:b0:ed:14:24:a0:b6:f8:60:da:2e:36:ac:aa:03:
         32:a9:31:f6:c3:68:a7:3a:d1:27:3e:0c:76:ad:f6:3a:70:3d:
         82:d9:fe:f9:f3:e0:fb:a4:16:b9:3b:90:55:a0:93:e8:63:f1:
         ae:29:2a:62:09:f5:8f:b2:0f:96:47:05:90:45:07:01:5c:59:
         fe:ac:e8:8d:1e:4b:13:df:cb:1e:4f:93:ff:40:04:2c:a1:5e:
         6a:40:53:32:40:6c:4f:15:b7:a5:55:26:ac:ef:37:a2:52:0b:
         99:86:57:c0:41:42:91:55:a0:cf:d8:dc:24:0c:c4:78:4d:9e:
         08:8c:4c:47:76:6c:53:47:71:e9:da:51:bd:9a:37:32:5b:3f:
         ae:9f:be:e9:23:d3:f3:c8:dc:c1:52:4e:da:20:35:b0:e4:36:
         66:8d:b9:f9
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUGdWIQd7jCvF83InSxXKGPhKr9I4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTE2QjFCNDkzMTE0RTZGODcyNDREQTU0Q0FCOEQ4RUFC
MjUwM0EzODAeFw0yNTA2MDIwMTU4MDBaFw0yNjA2MDEwMjAzMDBaMDMxMTAvBgNV
BAMTKDQxRDBCOTA3RjlDNzVGNTk1RjFGQ0QxODQ2RjBFMDU0MTAzQTM1MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1LUybF1ruucn2ldI/H+VVnU3r
GVeGT7tQ6AcljvQ1rQvbOEDwY+d7XGOWavtYhTv5DPDRi+RgN6Sxj0MYd71xxQmw
LehEiVgRLNwE4jYL0MnNt/6pqgoIqPgLUgoeKDyBCbBmXXPjN+8xmvqywU6/aiKI
6fiee6EwaXeBZYf1Nl+AXopXe3ofooqBjsGUFSlUqM5UA70vbaePD7be8kc9GCne
eztDa3oNYTrwndv7jM31DkINv5WnA9bxwwMeETUO/muxWmm27Kk4DN1T/bkA4VxG
4qZqZeg5L8j3slBP5RtPuxGiNFKLbCHF16h1I4nDnLTRzQmSXaCosLZnJ43xAgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUQdC5B/nHX1lfH80YRvDgVBA6NQAwHwYDVR0j
BBgwFoAUEWsbSTEU5vhyRNpUyrjY6rJQOjgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
YzY2Nzc2OS04MGRjLTQwOTMtYjVmNy1kZmU3YzU3MjA0ODYvMC8xMTZCMUI0OTMx
MTRFNkY4NzI0NERBNTRDQUI4RDhFQUIyNTAzQTM4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTE2QjFCNDkzMTE0RTZGODcyNDREQTU0Q0FCOEQ4RUFCMjUw
M0EzOC5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGM2Njc3NjktODBkYy00MDkzLWI1
ZjctZGZlN2M1NzIwNDg2LzAvMzEzMTMwMmUzNTJlMzkzNjJlMzAyZjMyMzAyZDMy
MzQyMDNkM2UyMDMyMzQzNTMyMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBARuBWAwDQYJKoZIhvcNAQEL
BQADggEBADv3HvVwVMK1EIS4m4/kD/QOYYy9xeI4IJHiYqMiJtE3gkMTaPdYfiIf
TiwaXeUAM1u9PJ0os6q+SZui8CyGmgglIjL13/f+zjygrKQ7FFTiGxr1YfxprNzW
VFdAJNuw7RQkoLb4YNouNqyqAzKpMfbDaKc60Sc+DHat9jpwPYLZ/vnz4PukFrk7
kFWgk+hj8a4pKmIJ9Y+yD5ZHBZBFBwFcWf6s6I0eSxPfyx5Pk/9ABCyhXmpAUzJA
bE8Vt6VVJqzvN6JSC5mGV8BBQpFVoM/Y3CQMxHhNngiMTEd2bFNHcenaUb2aNzJb
P66fvukj0/PI3MFSTtogNbDkNmaNufk=
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:33:41 2025 by rpki-client