Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3131392e3131302e38322e302f32332d3233203d3e203338373533.roa
File:                     3131392e3131302e38322e302f32332d3233203d3e203338373533.roa (raw, json)
Hash identifier:          x/q4U6FBU994kF8r7Nhz1Cck9rBDgZJ3pJ5+3sY2OUM=
Subject key identifier:   EF:AA:79:35:B5:EA:71:FC:8E:FD:0B:BC:71:C4:0C:CC:F2:3C:08:A8
Certificate issuer:       /CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
Certificate serial:       1BA42B33B80D81287E16F8BE1A8F29423B06B727
Authority key identifier: 11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3131392e3131302e38322e302f32332d3233203d3e203338373533.roa
Signing time:             Tue 03 Jun 2025 08:03:23 +0000
ROA not before:           Tue 03 Jun 2025 07:58:23 +0000
ROA not after:            Tue 02 Jun 2026 08:03:23 +0000
asID:                     38753
IP address blocks:        119.110.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl
                          rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Jun 2025 01:31:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:a4:2b:33:b8:0d:81:28:7e:16:f8:be:1a:8f:29:42:3b:06:b7:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
        Validity
            Not Before: Jun  3 07:58:23 2025 GMT
            Not After : Jun  2 08:03:23 2026 GMT
        Subject: CN=EFAA7935B5EA71FC8EFD0BBC71C40CCCF23C08A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c7:26:9d:fc:0c:8f:9c:e5:b7:e3:9d:ad:71:
                    a4:ab:95:21:98:87:1c:0d:c7:c8:86:90:fe:cd:ae:
                    21:43:3c:5f:e5:87:8f:d1:ad:80:08:4d:5f:20:c3:
                    d7:2c:5f:ca:79:8d:db:47:ac:d4:10:65:f5:bc:91:
                    49:d9:1c:83:3d:cf:ce:98:a0:fe:5c:06:70:75:d6:
                    a8:41:43:80:93:4b:06:cb:70:ca:6d:8d:40:bd:0e:
                    c6:0c:57:77:37:b9:e8:db:d3:91:94:d8:9a:c3:30:
                    09:0b:7f:78:ed:e7:bc:1b:0a:00:ca:4a:71:9b:7d:
                    d2:58:5c:97:d5:3a:65:06:19:89:e0:6b:17:61:14:
                    76:c1:cf:b3:b5:b5:51:e7:a2:d5:d7:d3:b1:ea:b6:
                    b7:54:48:96:cb:9b:10:a3:cb:d3:75:d2:2d:9e:41:
                    e2:55:25:b7:c2:87:42:bd:90:a1:8f:a0:39:8b:6e:
                    2a:29:bb:9d:15:52:4d:ba:c5:b9:08:ce:bf:7b:1a:
                    a9:46:46:a4:95:0d:0b:57:aa:45:44:f9:e2:cc:f1:
                    ed:ef:b6:31:bd:22:48:5e:66:a0:f3:b9:a6:47:17:
                    a4:4f:b3:b4:a7:00:a0:75:11:11:3e:51:1d:74:8b:
                    dc:09:71:b1:f0:9f:21:b9:f5:0c:04:36:25:69:30:
                    d9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:AA:79:35:B5:EA:71:FC:8E:FD:0B:BC:71:C4:0C:CC:F2:3C:08:A8
            X509v3 Authority Key Identifier:
                keyid:11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3131392e3131302e38322e302f32332d3233203d3e203338373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.110.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:9e:68:76:be:3d:19:db:05:29:69:cb:cc:ff:97:a6:bf:cc:
         20:25:5a:ce:87:1a:3d:f5:f1:91:e2:69:54:ef:d7:50:08:69:
         e9:f4:6e:5b:09:b3:ff:05:b5:85:e3:b0:40:3b:e1:a6:e1:20:
         cc:31:a4:77:fe:14:86:3a:7f:ce:dc:c0:8f:3c:70:d8:76:6c:
         99:35:37:b5:20:60:bc:b3:d1:45:80:d1:90:62:68:19:82:e8:
         3b:d9:65:e5:20:93:e9:70:4c:cb:7c:16:93:3c:a4:f8:99:4e:
         22:1e:15:10:f4:ba:a7:ec:9c:18:14:10:7e:77:32:94:6f:a6:
         2d:5b:bc:69:66:7e:aa:a5:fc:ad:d5:ff:f1:dc:a1:23:66:cc:
         37:86:e8:93:a6:d1:db:f8:65:f7:77:40:11:3d:43:b6:b8:fc:
         64:d7:b5:e4:98:94:13:3e:ea:e1:4a:ff:5d:49:ab:e4:f4:28:
         e3:d7:81:4e:9a:45:77:4e:a2:52:15:05:49:73:33:d0:85:74:
         ed:6b:61:b8:b5:61:35:1b:72:9c:83:36:79:b2:a8:16:6f:4f:
         6e:1c:ee:98:3e:e3:cd:c2:99:c0:e3:6c:36:fd:8a:75:7b:9b:
         9c:87:5f:dc:84:13:a4:c1:77:ea:1e:3e:11:c0:47:e7:f1:0f:
         16:dc:81:d6
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUG6QrM7gNgSh+Fvi+Go8pQjsGtycwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2
OERGNkUxNDAeFw0yNTA2MDMwNzU4MjNaFw0yNjA2MDIwODAzMjNaMDMxMTAvBgNV
BAMTKEVGQUE3OTM1QjVFQTcxRkM4RUZEMEJCQzcxQzQwQ0NDRjIzQzA4QTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCxyad/AyPnOW3452tcaSrlSGY
hxwNx8iGkP7NriFDPF/lh4/RrYAITV8gw9csX8p5jdtHrNQQZfW8kUnZHIM9z86Y
oP5cBnB11qhBQ4CTSwbLcMptjUC9DsYMV3c3uejb05GU2JrDMAkLf3jt57wbCgDK
SnGbfdJYXJfVOmUGGYngaxdhFHbBz7O1tVHnotXX07HqtrdUSJbLmxCjy9N10i2e
QeJVJbfCh0K9kKGPoDmLbiopu50VUk26xbkIzr97GqlGRqSVDQtXqkVE+eLM8e3v
tjG9IkheZqDzuaZHF6RPs7SnAKB1ERE+UR10i9wJcbHwnyG59QwENiVpMNnLAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU76p5NbXqcfyO/Qu8ccQMzPI8CKgwHwYDVR0j
BBgwFoAUEcm6KFNLpEmZtLpdaw8o5WjfbhQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
MDZiNjY3My00N2ExLTQ1ZTUtYjZjMi00MmFiOGI0NzYyNDkvMC8xMUM5QkEyODUz
NEJBNDQ5OTlCNEJBNUQ2QjBGMjhFNTY4REY2RTE0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2OERG
NkUxNC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EwNmI2NjczLTQ3YTEtNDVlNS1i
NmMyLTQyYWI4YjQ3NjI0OS8wLzMxMzEzOTJlMzEzMTMwMmUzODMyMmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzMzODM3MzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAXduUjANBgkqhkiG
9w0BAQsFAAOCAQEAOJ5odr49GdsFKWnLzP+Xpr/MICVazocaPfXxkeJpVO/XUAhp
6fRuWwmz/wW1heOwQDvhpuEgzDGkd/4Uhjp/ztzAjzxw2HZsmTU3tSBgvLPRRYDR
kGJoGYLoO9ll5SCT6XBMy3wWkzyk+JlOIh4VEPS6p+ycGBQQfncylG+mLVu8aWZ+
qqX8rdX/8dyhI2bMN4bok6bR2/hl93dAET1Dtrj8ZNe15JiUEz7q4Ur/XUmr5PQo
49eBTppFd06iUhUFSXMz0IV07WthuLVhNRtynIM2ebKoFm9PbhzumD7jzcKZwONs
Nv2KdXubnIdf3IQTpMF36h4+EcBH5/EPFtyB1g==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:56:27 2025 by rpki-client