Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3131392e3131302e38362e302f32332d3233203d3e203338373533.roa
File:                     3131392e3131302e38362e302f32332d3233203d3e203338373533.roa (raw, json)
Hash identifier:          X03M+5Z5sE+Qy+6uY+tE6Ai0XMCMqH2tyQTmAgoRdHs=
Subject key identifier:   2C:4A:B3:65:C7:40:69:6A:F2:D7:D5:50:C1:A0:01:23:C9:58:36:E6
Certificate issuer:       /CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
Certificate serial:       27A01DDB0F0513F741BD73ACD49C54E295277514
Authority key identifier: 11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3131392e3131302e38362e302f32332d3233203d3e203338373533.roa
Signing time:             Tue 03 Jun 2025 08:03:24 +0000
ROA not before:           Tue 03 Jun 2025 07:58:24 +0000
ROA not after:            Tue 02 Jun 2026 08:03:24 +0000
asID:                     38753
IP address blocks:        119.110.86.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl
                          rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Jun 2025 01:31:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:a0:1d:db:0f:05:13:f7:41:bd:73:ac:d4:9c:54:e2:95:27:75:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
        Validity
            Not Before: Jun  3 07:58:24 2025 GMT
            Not After : Jun  2 08:03:24 2026 GMT
        Subject: CN=2C4AB365C740696AF2D7D550C1A00123C95836E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5e:9a:50:ff:2e:aa:e0:3f:97:f8:20:a3:c8:
                    25:34:24:4d:74:63:f7:aa:4d:d1:81:de:6f:80:22:
                    ac:14:c2:3a:cd:a2:1d:c7:85:1a:26:f3:64:ac:74:
                    93:41:61:49:1e:b9:7d:db:ee:4e:48:e9:36:5f:7a:
                    6c:50:2d:35:b1:e3:2f:d6:17:7e:e6:c3:fa:80:75:
                    e2:96:7f:07:d1:7b:17:c3:0a:4e:63:36:6a:85:21:
                    45:9a:41:42:4c:1d:58:8c:fc:ad:3e:87:4a:87:f9:
                    67:6c:fd:ed:b2:e1:ef:16:ac:a5:50:e9:2f:c6:6e:
                    9f:c7:8d:a8:cc:a3:7c:9e:cb:ba:08:4c:63:eb:c1:
                    bf:7e:1e:fc:b2:45:fd:04:7c:09:5e:16:00:30:73:
                    c8:7f:6d:79:03:74:34:c7:45:15:56:1c:e6:30:bd:
                    03:a5:c9:40:ba:46:16:c1:e6:0e:19:5e:f4:f5:95:
                    ff:c3:6d:3f:b1:8e:cd:54:cd:20:ad:64:89:af:00:
                    cc:79:2a:8d:e4:54:28:b0:63:f2:21:19:ac:35:8d:
                    f4:b1:f7:43:35:14:4f:b6:b6:f4:b8:d6:4f:ff:ed:
                    51:00:7c:6d:d0:ab:b0:76:53:a4:94:c5:d1:f6:72:
                    48:6c:0c:33:92:62:7a:2f:d2:36:00:d7:19:d8:b7:
                    e5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:4A:B3:65:C7:40:69:6A:F2:D7:D5:50:C1:A0:01:23:C9:58:36:E6
            X509v3 Authority Key Identifier:
                keyid:11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3131392e3131302e38362e302f32332d3233203d3e203338373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.110.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:57:c8:b9:91:d4:8f:89:75:5a:da:6a:15:cd:c5:28:0a:05:
         2c:70:48:b1:3c:fa:e4:05:8d:1c:3e:4d:3d:c2:f5:ad:ba:1f:
         b0:fd:11:58:1c:94:64:b9:ae:08:90:94:1d:ea:63:74:4f:05:
         ae:79:c3:53:44:06:00:c1:f5:d4:0d:37:9a:cf:c5:ae:6a:e7:
         ac:9b:04:ae:9b:c4:96:e3:c2:30:aa:05:e9:a8:1b:a3:d4:41:
         5f:0b:b0:bc:30:b8:82:e5:57:a1:1a:92:dc:af:c4:b8:31:3a:
         85:54:2c:4b:0a:e4:ff:cb:6d:d9:e6:13:67:bf:f1:b9:bb:5a:
         cb:7b:06:b8:a0:51:03:e9:b4:6f:e8:69:3b:13:41:dc:6b:bb:
         e5:e5:3a:0d:c4:c5:e5:ef:c0:3c:df:1f:ae:00:96:cb:f7:41:
         d7:76:24:17:38:97:11:c0:65:3d:4a:f7:29:34:19:2a:74:ea:
         bf:fc:87:bb:63:f5:23:69:bf:13:72:5f:cc:ef:e2:07:5b:2d:
         56:56:e3:79:82:62:8a:73:3f:e6:07:5c:0b:55:0b:69:7a:d9:
         16:ce:2f:f3:5a:40:11:f6:a9:31:6f:3d:da:f8:25:18:75:58:
         88:bc:89:4c:6d:0a:8a:6d:48:3f:b9:84:a0:aa:4f:fc:c6:53:
         32:a2:53:7a
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUJ6Ad2w8FE/dBvXOs1JxU4pUndRQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2
OERGNkUxNDAeFw0yNTA2MDMwNzU4MjRaFw0yNjA2MDIwODAzMjRaMDMxMTAvBgNV
BAMTKDJDNEFCMzY1Qzc0MDY5NkFGMkQ3RDU1MEMxQTAwMTIzQzk1ODM2RTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqXppQ/y6q4D+X+CCjyCU0JE10
Y/eqTdGB3m+AIqwUwjrNoh3HhRom82SsdJNBYUkeuX3b7k5I6TZfemxQLTWx4y/W
F37mw/qAdeKWfwfRexfDCk5jNmqFIUWaQUJMHViM/K0+h0qH+Wds/e2y4e8WrKVQ
6S/Gbp/HjajMo3yey7oITGPrwb9+HvyyRf0EfAleFgAwc8h/bXkDdDTHRRVWHOYw
vQOlyUC6RhbB5g4ZXvT1lf/DbT+xjs1UzSCtZImvAMx5Ko3kVCiwY/IhGaw1jfSx
90M1FE+2tvS41k//7VEAfG3Qq7B2U6SUxdH2ckhsDDOSYnov0jYA1xnYt+V/AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQULEqzZcdAaWry19VQwaABI8lYNuYwHwYDVR0j
BBgwFoAUEcm6KFNLpEmZtLpdaw8o5WjfbhQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
MDZiNjY3My00N2ExLTQ1ZTUtYjZjMi00MmFiOGI0NzYyNDkvMC8xMUM5QkEyODUz
NEJBNDQ5OTlCNEJBNUQ2QjBGMjhFNTY4REY2RTE0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2OERG
NkUxNC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EwNmI2NjczLTQ3YTEtNDVlNS1i
NmMyLTQyYWI4YjQ3NjI0OS8wLzMxMzEzOTJlMzEzMTMwMmUzODM2MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzMzODM3MzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAXduVjANBgkqhkiG
9w0BAQsFAAOCAQEAdFfIuZHUj4l1WtpqFc3FKAoFLHBIsTz65AWNHD5NPcL1rbof
sP0RWByUZLmuCJCUHepjdE8FrnnDU0QGAMH11A03ms/FrmrnrJsErpvEluPCMKoF
6agbo9RBXwuwvDC4guVXoRqS3K/EuDE6hVQsSwrk/8tt2eYTZ7/xubtay3sGuKBR
A+m0b+hpOxNB3Gu75eU6DcTF5e/APN8frgCWy/dB13YkFziXEcBlPUr3KTQZKnTq
v/yHu2P1I2m/E3JfzO/iB1stVlbjeYJiinM/5gdcC1ULaXrZFs4v81pAEfapMW89
2vglGHVYiLyJTG0Kim1IP7mEoKpP/MZTMqJTeg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:43:27 2025 by rpki-client