Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3234382e302f32322d3232203d3e203633353031.roa
File:                     36312e31342e3234382e302f32322d3232203d3e203633353031.roa (raw, json)
Hash identifier:          9yUhWJBW17q/QdaTY2fU9nmONEYGToC2s7IX5p+5PO4=
Subject key identifier:   81:E8:F4:65:76:C1:85:57:3E:A3:E5:24:28:34:B8:77:DC:A6:5B:9C
Certificate issuer:       /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial:       4F5A727464BCF48D9AD65F0D13206DA22444E9D9
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3234382e302f32322d3232203d3e203633353031.roa
Signing time:             Sun 25 May 2025 18:00:02 +0000
ROA not before:           Sun 25 May 2025 17:55:02 +0000
ROA not after:            Sun 24 May 2026 18:00:02 +0000
asID:                     63501
IP address blocks:        61.14.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
                          rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 02:20:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:5a:72:74:64:bc:f4:8d:9a:d6:5f:0d:13:20:6d:a2:24:44:e9:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
        Validity
            Not Before: May 25 17:55:02 2025 GMT
            Not After : May 24 18:00:02 2026 GMT
        Subject: CN=81E8F46576C185573EA3E5242834B877DCA65B9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:95:50:80:c7:48:bc:34:54:0e:60:15:f7:cd:
                    fb:e2:8f:eb:ff:6f:9f:59:0a:f5:21:61:f2:f4:2e:
                    be:d5:b3:1b:1b:82:f7:73:16:24:60:00:3d:58:b2:
                    09:f7:dd:ca:cf:5f:19:dd:4e:61:b0:4a:16:07:c2:
                    cf:5a:3f:1a:5f:00:3e:48:00:f9:0f:2d:e1:4f:33:
                    6e:c7:a3:ae:9e:08:56:4d:b7:7b:35:c4:86:34:32:
                    5f:4b:5c:1e:87:d1:6e:2e:d8:31:35:46:6d:5b:42:
                    b0:51:c8:42:7e:c7:be:ef:f1:23:ca:a0:5e:c1:b1:
                    57:2e:31:55:7e:e0:c5:46:4e:c4:b2:31:95:90:2e:
                    9a:36:b6:4a:05:f0:1a:52:e9:72:26:80:40:0a:85:
                    eb:6f:77:5a:85:0d:28:23:dc:5a:7a:43:58:5e:c8:
                    30:78:63:f6:04:eb:4e:a1:0d:dd:66:24:99:8f:00:
                    98:1f:32:51:b2:76:67:c1:e6:39:ca:90:a6:26:2c:
                    63:5f:52:82:b3:ba:0c:bd:b1:a3:32:5e:eb:3e:f9:
                    21:a8:79:48:06:87:39:70:dd:51:56:db:5b:9e:7d:
                    8f:e2:82:78:05:7c:84:a1:1e:d4:69:b5:27:ec:f6:
                    61:8b:ab:5d:94:ed:eb:51:3c:8a:7a:de:a2:9c:b9:
                    e5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E8:F4:65:76:C1:85:57:3E:A3:E5:24:28:34:B8:77:DC:A6:5B:9C
            X509v3 Authority Key Identifier:
                keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3234382e302f32322d3232203d3e203633353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.14.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:f9:8b:1e:29:ed:62:59:43:76:19:b2:72:40:89:0f:ae:28:
         c7:28:a0:26:cb:07:90:9f:20:04:c8:91:9b:2a:c1:33:9b:c8:
         cf:50:9b:c3:73:74:8b:84:f9:74:24:d0:3a:1e:96:74:3e:31:
         00:d2:55:1f:7a:06:b1:61:72:c1:8f:b4:c3:14:4d:86:f8:43:
         ff:be:87:96:db:77:aa:b2:15:31:f0:b7:8c:00:78:68:22:f4:
         d4:1c:be:7b:0a:c8:2d:e2:92:a1:ff:8b:6c:fa:9c:f0:36:62:
         ed:57:a1:a0:92:f6:ed:27:2c:a8:2a:cd:fa:54:30:0d:82:f9:
         30:2e:0d:aa:eb:38:47:46:48:f5:67:36:19:d0:42:e9:dd:23:
         53:8f:5c:66:ab:0f:6b:a1:98:fd:b7:16:a5:12:08:65:23:79:
         6e:62:08:89:d3:ee:24:8c:4c:f5:63:94:eb:fb:2b:a9:ef:e8:
         b9:3b:c5:14:a8:30:0f:86:47:f7:ba:8c:07:17:e5:09:3e:76:
         99:b5:28:fb:e6:1b:7a:9d:cd:61:58:c6:90:3d:65:ea:19:87:
         84:5d:01:04:86:3b:39:e6:b5:54:56:3a:df:a6:5a:1d:c3:58:
         46:f9:de:b8:31:73:fa:25:5b:64:61:6f:a6:bc:25:4d:61:96:
         74:9e:db:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:03:58 2025 by rpki-client