Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3234392e302f32342d3234203d3e203633353031.roa
File:                     36312e31342e3234392e302f32342d3234203d3e203633353031.roa (raw, json)
Hash identifier:          yPzSsHv3SwGQ3fEhiVRqIyqk9kZjo9mnqe2iTT83X9g=
Subject key identifier:   AF:E6:46:2B:2C:1D:D5:B3:AB:5B:04:E6:95:57:8D:5B:6C:82:B0:FC
Certificate issuer:       /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial:       1D2E6848D48116E0F6D3BDE4B918C5A8BD391BD7
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3234392e302f32342d3234203d3e203633353031.roa
Signing time:             Sun 25 May 2025 17:00:02 +0000
ROA not before:           Sun 25 May 2025 16:55:02 +0000
ROA not after:            Sun 24 May 2026 17:00:02 +0000
asID:                     63501
IP address blocks:        61.14.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
                          rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 10:41:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:2e:68:48:d4:81:16:e0:f6:d3:bd:e4:b9:18:c5:a8:bd:39:1b:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
        Validity
            Not Before: May 25 16:55:02 2025 GMT
            Not After : May 24 17:00:02 2026 GMT
        Subject: CN=AFE6462B2C1DD5B3AB5B04E695578D5B6C82B0FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3a:3e:21:6f:62:a3:3b:0d:d0:a5:d0:a8:c1:
                    b5:e8:f6:23:f9:4a:d3:f0:85:04:7f:c8:cb:ff:c1:
                    48:1e:93:b8:19:ba:4e:4a:e1:55:a9:68:7a:d9:42:
                    d7:4f:c2:e2:c6:f9:4e:25:3a:4f:dd:4b:8d:72:fe:
                    1d:82:be:7e:a5:8b:2e:db:89:ec:77:f6:8f:49:fc:
                    36:25:4d:3a:3e:97:91:cc:ee:50:38:39:80:49:46:
                    83:26:92:e0:b6:05:b1:5f:13:72:6e:cd:01:76:9b:
                    d0:92:0d:93:3c:75:b5:fb:ca:51:14:d8:fc:1f:32:
                    1e:1a:a4:c1:0e:12:23:16:08:e3:dc:51:57:12:7c:
                    13:56:10:a1:ad:cb:4b:43:21:5b:9c:97:56:ab:9b:
                    26:76:9e:81:55:8e:05:96:b0:43:8b:45:2d:92:b0:
                    17:a4:bb:0f:a3:1d:0c:ea:a6:55:c6:03:a4:6b:74:
                    bd:66:c0:1b:ea:97:4a:6b:08:3b:d4:c9:d6:6f:1a:
                    27:9e:13:5e:b5:24:83:59:d4:29:6e:c8:4a:31:99:
                    b9:5c:ad:8f:8f:59:cd:9b:c9:e6:f8:19:53:63:c4:
                    e4:2f:d2:6a:e4:9a:fc:94:68:29:1d:8a:41:98:cd:
                    52:bc:16:d1:67:39:bc:81:7d:a4:48:8d:b3:79:6b:
                    cc:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E6:46:2B:2C:1D:D5:B3:AB:5B:04:E6:95:57:8D:5B:6C:82:B0:FC
            X509v3 Authority Key Identifier:
                keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3234392e302f32342d3234203d3e203633353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.14.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:5c:45:d0:34:21:8b:80:c2:b8:cf:54:f7:f6:1f:23:15:fc:
         3e:a6:e9:0f:72:b0:29:14:3d:31:23:d9:a2:10:71:2f:55:d2:
         48:84:de:31:4c:af:a0:89:d7:78:3e:42:8d:47:98:91:97:b4:
         75:51:5d:95:82:ab:a2:39:cd:cc:ff:48:2e:97:0b:a9:6e:95:
         38:7b:9f:e8:86:3f:65:fe:82:93:39:f5:d7:c3:7e:da:5a:7c:
         9d:89:d7:9d:a3:b7:60:e4:55:ec:9b:70:87:6b:c3:5e:bc:41:
         93:33:e1:4d:08:5b:e5:ad:01:7a:73:32:96:9a:4b:32:4d:a1:
         79:d5:29:1e:8a:07:91:e1:f8:ac:97:7e:0a:30:93:ef:05:c9:
         4e:24:fe:79:8c:3c:a4:c0:dc:95:29:08:88:4c:43:d4:96:b0:
         db:92:36:11:67:1c:02:f9:14:f9:58:5c:0e:58:24:c9:8b:4a:
         fb:ee:b8:5c:ef:35:12:a8:f7:f5:d0:9f:37:bc:7a:2e:f8:7b:
         46:ea:9a:44:5c:fc:34:15:0e:8c:2a:4d:22:44:eb:9c:57:db:
         62:03:96:12:f7:89:dc:61:44:64:d8:d7:f1:93:d4:4e:49:eb:
         5d:80:af:00:56:8a:51:a9:7c:68:48:25:b3:79:93:01:66:17:
         6c:56:a9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:11:00 2025 by rpki-client