Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38322e302f32342d3234203d3e203137363731.roa
File:                     3131342e3139392e38322e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier:          8Fqd+ys2XJvqKZDASVV3Kfj7Eqrkw1ZgWKMDvwqF1lI=
Subject key identifier:   A4:92:36:4B:49:1F:15:09:25:E3:2B:4A:04:E0:58:79:31:A7:D6:C6
Certificate issuer:       /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Certificate serial:       6F4BBDECE641CB05EEC4C25276049151FDEC1AA6
Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38322e302f32342d3234203d3e203137363731.roa
Signing time:             Sat 17 May 2025 12:02:08 +0000
ROA not before:           Sat 17 May 2025 11:57:08 +0000
ROA not after:            Sat 16 May 2026 12:02:08 +0000
asID:                     17671
IP address blocks:        114.199.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl
                          rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 18:36:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:4b:bd:ec:e6:41:cb:05:ee:c4:c2:52:76:04:91:51:fd:ec:1a:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
        Validity
            Not Before: May 17 11:57:08 2025 GMT
            Not After : May 16 12:02:08 2026 GMT
        Subject: CN=A492364B491F150925E32B4A04E0587931A7D6C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:43:f3:c4:36:a5:26:1a:ad:78:dc:26:b9:49:
                    91:74:7a:21:ce:43:7a:60:f2:db:3a:14:65:fe:95:
                    de:b0:5f:62:1f:c0:1c:ad:c8:d6:5b:1b:70:61:ef:
                    8d:10:03:c8:db:2d:5d:df:f5:e2:a3:e1:e6:fa:6d:
                    f0:6e:21:d7:ad:7d:c4:c4:6b:49:d6:52:84:02:52:
                    de:3f:56:d5:28:91:17:1d:1d:f5:78:d7:df:83:54:
                    ec:80:0e:d6:08:8a:0e:19:81:54:10:5e:a1:73:9c:
                    ca:70:93:74:b7:aa:ed:46:bf:d9:55:45:2f:26:cf:
                    62:d8:c0:6a:74:40:48:0d:ea:44:83:d0:13:16:d7:
                    ee:e3:5b:d8:f4:c5:52:6b:36:24:3d:52:2b:62:93:
                    33:1c:14:16:9f:96:79:5c:95:32:62:2a:af:5d:de:
                    a8:a9:f4:c4:13:75:79:62:2a:07:5b:ed:07:65:ec:
                    34:9f:a6:5d:a3:a9:d1:dc:1e:77:12:18:5e:c7:a4:
                    db:6a:c4:b0:cd:fa:de:6d:2b:ed:c9:62:fe:61:a8:
                    24:9d:07:d1:c0:c5:e4:5f:b9:57:d1:5a:ae:72:a6:
                    d7:11:a0:42:83:c1:58:e8:56:6a:1b:ca:ed:04:9a:
                    5c:30:40:21:02:3c:8a:e3:d6:19:ec:2a:d3:e6:cd:
                    db:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:92:36:4B:49:1F:15:09:25:E3:2B:4A:04:E0:58:79:31:A7:D6:C6
            X509v3 Authority Key Identifier:
                keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38322e302f32342d3234203d3e203137363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.199.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:86:f6:8e:29:56:4f:ef:6d:79:2c:15:b5:15:79:8f:dd:cb:
         e9:cc:e2:c9:2e:69:9c:1c:6a:89:31:79:3d:b7:77:15:f5:58:
         41:c3:be:6d:77:04:7c:a6:ee:7c:96:e5:29:1a:a1:a6:a9:ab:
         76:10:57:74:08:16:1e:17:05:94:3c:34:04:6f:5c:75:68:bf:
         b4:35:79:60:7e:dd:85:9c:e9:4f:14:b2:2a:69:30:63:fe:03:
         d9:d4:de:51:a6:34:d8:c4:a7:c8:5c:e4:07:42:1d:ea:6d:35:
         e5:0e:b5:b4:f4:08:11:7f:84:83:94:1a:41:e4:e1:10:d5:5f:
         01:a1:2c:28:e0:db:7f:57:93:41:e7:67:3d:b5:76:b3:72:1b:
         3b:79:e2:92:b8:01:c4:2a:2c:b4:35:54:e3:46:56:3d:ea:f1:
         73:8f:55:ef:af:e6:da:1d:a9:54:68:ee:36:85:d9:65:98:a8:
         e2:44:04:64:ac:b9:16:46:fd:47:49:ef:a0:a3:d3:1f:ba:37:
         58:46:2c:bd:54:3b:a8:e1:7b:83:f6:16:e9:bf:5e:94:b9:e2:
         b8:7d:fc:36:34:d2:5f:a4:58:96:57:b5:40:79:0b:2a:0e:03:
         20:18:8a:69:d6:43:b9:13:aa:09:9f:35:48:ac:2c:9a:8e:90:
         11:1e:cb:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:07:58 2025 by rpki-client