Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3235302e302f32332d3233203d3e203633353031.roa
File:                     36312e31342e3235302e302f32332d3233203d3e203633353031.roa (raw, json)
Hash identifier:          b0iukqTRuvRU1a7eSUs5b+FIBP1+cvhMRAWkNJWN/O8=
Subject key identifier:   14:76:28:C0:D5:01:AE:72:CF:EE:AB:61:CC:AB:4B:52:81:93:06:C2
Certificate issuer:       /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial:       4A73510C16B39DE07E81D6DDD395C9EF94C8EFAB
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3235302e302f32332d3233203d3e203633353031.roa
Signing time:             Sun 25 May 2025 18:00:01 +0000
ROA not before:           Sun 25 May 2025 17:55:01 +0000
ROA not after:            Sun 24 May 2026 18:00:01 +0000
asID:                     63501
IP address blocks:        61.14.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
                          rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 10:41:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:73:51:0c:16:b3:9d:e0:7e:81:d6:dd:d3:95:c9:ef:94:c8:ef:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
        Validity
            Not Before: May 25 17:55:01 2025 GMT
            Not After : May 24 18:00:01 2026 GMT
        Subject: CN=147628C0D501AE72CFEEAB61CCAB4B52819306C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ce:ad:cd:f1:18:8b:ee:fa:57:23:ea:77:b5:
                    47:f0:d1:76:3e:16:a1:30:ac:2a:be:87:53:ef:be:
                    bb:df:b6:91:0d:ef:87:45:97:a7:47:82:67:85:a6:
                    b9:1b:4b:f8:f3:37:fe:a7:57:22:42:07:90:de:f6:
                    50:52:a7:15:3e:06:48:fd:cf:74:f1:6e:84:c0:b4:
                    51:57:94:af:7e:83:e9:e7:2a:18:d3:89:81:ce:d3:
                    c0:12:99:96:00:b3:58:71:58:a9:18:ac:5a:4c:86:
                    b4:d5:17:ab:20:84:56:8c:89:37:f3:3e:6b:54:35:
                    fd:a0:5c:02:e3:65:76:22:72:77:be:16:72:2c:ed:
                    ea:1e:20:fc:5f:47:27:51:17:10:63:6b:bd:da:3a:
                    dd:40:d9:44:fa:69:2c:d1:1f:ef:b2:e5:41:0f:c7:
                    6b:cd:85:9a:78:4d:74:ce:fd:e6:a9:61:40:0b:a8:
                    c8:4a:e2:62:61:9a:cf:6b:bf:24:fd:49:41:83:0a:
                    b9:54:e3:e1:b3:8f:dd:a4:ea:93:32:4d:44:79:e8:
                    92:ce:d6:e6:3d:15:8d:09:4b:31:bd:7d:74:95:45:
                    af:07:ad:98:01:0d:30:2c:59:3e:35:83:32:21:9f:
                    f2:f7:c9:68:cb:63:05:d7:96:6e:10:be:d2:31:37:
                    5c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:76:28:C0:D5:01:AE:72:CF:EE:AB:61:CC:AB:4B:52:81:93:06:C2
            X509v3 Authority Key Identifier:
                keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3235302e302f32332d3233203d3e203633353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.14.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:5c:49:2b:ef:cc:0b:53:43:db:59:ec:b0:8c:78:32:45:16:
         de:fe:af:c3:d2:c1:fb:eb:84:b9:53:94:9c:1e:25:0b:6a:45:
         26:91:fb:86:7b:42:14:5f:0a:e4:fc:fa:1d:f6:64:df:9f:7c:
         04:b0:94:1d:9b:3c:b4:7d:b4:bd:00:ac:87:05:7f:51:5f:52:
         8c:c8:a5:7c:04:53:18:a0:4f:8e:09:c2:a9:8e:53:33:6e:47:
         5f:24:6c:44:e1:d5:bd:0b:62:23:e3:ba:fe:6e:28:dd:50:78:
         52:4f:a7:d2:8b:65:bd:de:a2:11:73:46:d6:de:ea:0e:44:a2:
         b2:8a:98:1b:8c:6e:8f:d5:90:60:a4:9c:5c:2d:38:4a:2c:ca:
         a9:72:af:5d:76:ab:f4:26:7a:d9:30:4b:7f:02:af:97:cc:c5:
         12:c4:b0:05:d4:cc:a8:29:c6:b2:3d:28:75:8f:d0:18:8d:89:
         00:b3:f4:d3:fe:72:8c:ba:b3:d7:3d:ce:8c:fd:3d:57:86:70:
         e8:f6:ae:4e:2c:5a:04:9e:e5:ac:19:af:f6:2d:ac:2c:51:f3:
         1e:df:c4:42:98:a5:00:8a:39:76:20:e5:6c:ab:40:b6:b4:8b:
         44:1b:92:67:cf:c9:af:8c:19:4c:18:e1:69:71:c5:45:53:de:
         29:e2:dd:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:03:15 2025 by rpki-client