Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3131312e36382e3131322e302f32302d3234203d3e203435323837.roa
File:                     3131312e36382e3131322e302f32302d3234203d3e203435323837.roa (raw, json)
Hash identifier:          EmRosqOLA0o9un75dpB41tldUQb9JEqee08S4oNpAgc=
Subject key identifier:   10:4B:FD:1B:5D:88:EA:62:B1:31:08:17:22:8A:1A:F7:3C:05:F8:9C
Certificate issuer:       /CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7
Certificate serial:       7525C56636D59502E3591558E4BCB86875568A85
Authority key identifier: DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3131312e36382e3131322e302f32302d3234203d3e203435323837.roa
Signing time:             Mon 02 Jun 2025 01:02:34 +0000
ROA not before:           Mon 02 Jun 2025 00:57:34 +0000
ROA not after:            Mon 01 Jun 2026 01:02:34 +0000
asID:                     45287
IP address blocks:        111.68.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl
                          rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 13:10:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:25:c5:66:36:d5:95:02:e3:59:15:58:e4:bc:b8:68:75:56:8a:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7
        Validity
            Not Before: Jun  2 00:57:34 2025 GMT
            Not After : Jun  1 01:02:34 2026 GMT
        Subject: CN=104BFD1B5D88EA62B1310817228A1AF73C05F89C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2e:72:f8:9f:1a:77:83:ea:53:fc:b7:45:2c:
                    03:91:df:42:0f:72:81:ad:fb:74:a7:7f:48:70:e3:
                    84:77:cc:ca:e7:0d:0a:f4:35:4f:ae:c5:d3:6a:c9:
                    c4:4c:ce:86:ae:75:9f:a9:2c:34:59:70:74:e3:62:
                    80:38:75:7f:d7:19:2a:dc:74:63:2e:10:ef:e6:10:
                    fd:a0:db:1c:42:b4:06:16:df:48:f7:0c:2a:0d:3f:
                    a6:d2:4f:c7:c8:2f:da:e7:e0:c9:3f:6e:71:ba:88:
                    a0:5d:86:98:1b:a1:76:22:9e:45:e7:aa:fa:bd:b7:
                    21:18:75:99:ba:f3:34:08:19:4f:0f:4c:a3:4c:7f:
                    01:39:6a:3c:fb:05:02:d0:8f:84:ac:78:db:9e:28:
                    8a:c9:b0:ef:f8:d6:6f:a4:05:e4:d0:2e:8c:02:8f:
                    b4:4c:5d:db:3c:03:be:ff:df:1a:f5:b2:22:91:1a:
                    71:23:34:5e:7f:08:4f:a0:fa:b5:6e:1e:3a:ef:20:
                    4b:44:c4:cf:ad:0e:e2:9e:5c:25:e8:19:c2:92:be:
                    a8:e2:a8:01:1e:42:9e:17:0b:d6:37:65:46:1d:33:
                    81:1b:82:81:16:6b:28:b6:f7:e6:57:9d:4a:b6:e3:
                    f7:ef:fc:ba:fe:d3:e6:48:41:de:3f:fa:ef:fe:96:
                    c3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:4B:FD:1B:5D:88:EA:62:B1:31:08:17:22:8A:1A:F7:3C:05:F8:9C
            X509v3 Authority Key Identifier:
                keyid:DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3131312e36382e3131322e302f32302d3234203d3e203435323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.68.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         65:09:54:b3:db:41:1e:05:4c:de:4b:1d:14:93:b8:bc:df:d3:
         b7:34:0c:95:f3:be:bf:f9:a4:06:1a:93:b1:06:9f:00:79:75:
         5f:4f:e2:30:83:79:78:83:4e:3f:55:0e:c8:75:c9:32:7a:33:
         2e:5c:27:1b:5c:1f:c9:98:02:08:b3:d7:20:d4:38:20:89:80:
         68:0c:0a:7b:fb:0d:b5:01:f6:59:59:c1:ae:40:4d:b5:93:a7:
         d8:55:69:bd:3c:e2:7e:4a:ee:bf:43:da:00:b9:04:36:d0:ad:
         1a:38:92:b2:11:f7:77:4a:19:88:74:dd:06:f1:f8:02:04:ae:
         1c:0e:2c:07:20:e0:7e:59:dd:d8:db:ef:92:38:99:05:2f:8c:
         b4:71:cd:99:37:51:93:3e:de:20:79:ea:ab:64:06:c8:fc:7e:
         e3:02:1e:7d:23:a9:b3:18:36:e7:ca:aa:5d:bd:7e:66:d9:41:
         af:24:b3:c6:b2:e4:c5:07:d2:03:00:31:9e:ab:10:63:81:97:
         4c:25:e6:91:0b:3b:42:e5:66:7e:6a:63:60:7d:11:6e:fb:11:
         84:ee:ec:40:5c:d9:69:f8:de:48:0e:1d:fe:af:02:6b:57:04:
         cf:f6:63:19:7d:f1:0c:c5:a2:a1:da:ee:61:4a:9e:0e:ae:d5:
         56:46:04:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:26:11 2025 by rpki-client