Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3131332e3139372e3130382e302f32322d3232203d3e203535363939.roa
File:                     3131332e3139372e3130382e302f32322d3232203d3e203535363939.roa (raw, json)
Hash identifier:          5aSqM2G2yl80LesSPcdF7TAurA8t2nRlgTMy90PqfEI=
Subject key identifier:   D9:10:39:23:36:DC:53:92:06:23:5F:2D:1F:FB:72:95:8B:64:3D:5E
Certificate issuer:       /CN=1976DD7D4FBDFBEB355F0B96690613959E106872
Certificate serial:       6E545C62E9E583E23B65973B0D55AAD80A7ACE9A
Authority key identifier: 19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3131332e3139372e3130382e302f32322d3232203d3e203535363939.roa
Signing time:             Mon 02 Jun 2025 02:03:06 +0000
ROA not before:           Mon 02 Jun 2025 01:58:06 +0000
ROA not after:            Mon 01 Jun 2026 02:03:06 +0000
asID:                     55699
IP address blocks:        113.197.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl
                          rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 00:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:54:5c:62:e9:e5:83:e2:3b:65:97:3b:0d:55:aa:d8:0a:7a:ce:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1976DD7D4FBDFBEB355F0B96690613959E106872
        Validity
            Not Before: Jun  2 01:58:06 2025 GMT
            Not After : Jun  1 02:03:06 2026 GMT
        Subject: CN=D910392336DC539206235F2D1FFB72958B643D5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1a:07:53:e7:fa:b4:a6:95:cf:44:dd:a1:22:
                    dc:b3:0c:1d:45:56:0b:ab:70:1b:53:85:d5:c2:e5:
                    99:a2:2b:24:e5:81:67:4a:73:ec:dd:b2:1a:84:53:
                    88:c0:47:5f:a3:5d:f0:ff:25:4a:92:1e:f5:c2:79:
                    0a:60:01:8f:a3:3b:5c:5a:89:f8:e5:51:b4:ba:96:
                    90:9a:4a:91:1b:2a:da:39:01:c8:ba:14:2c:fa:6a:
                    9e:4b:a0:b8:b1:61:e5:1a:a1:f7:74:56:49:78:62:
                    35:2d:32:4c:d9:28:e9:9d:ee:4a:bc:f9:fe:16:d2:
                    de:2a:81:4e:33:b6:7a:32:4b:8e:e6:8b:ee:90:d5:
                    96:38:46:34:dc:e4:21:ce:98:a0:9a:ac:29:9d:5f:
                    65:12:ec:a2:e3:0a:fa:1c:9d:4c:b0:b2:4d:96:d2:
                    a4:e2:ab:12:26:c9:81:39:36:63:a6:50:6c:83:52:
                    48:a7:d1:0c:4f:49:e3:6b:f0:8e:bd:81:6c:74:1b:
                    5d:ef:6b:48:67:72:03:b2:e1:e6:a0:03:b3:85:51:
                    9a:19:68:e1:ee:63:26:66:64:f8:14:33:d8:ee:23:
                    fc:41:59:c4:3a:85:d3:23:e6:dd:aa:95:0f:96:d8:
                    f1:a6:6e:d5:64:65:aa:85:12:11:e2:de:41:1e:0b:
                    0e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:10:39:23:36:DC:53:92:06:23:5F:2D:1F:FB:72:95:8B:64:3D:5E
            X509v3 Authority Key Identifier:
                keyid:19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3131332e3139372e3130382e302f32322d3232203d3e203535363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.197.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:ba:98:6d:ea:5f:a5:c3:c0:57:10:c5:7c:33:4c:e8:2a:a9:
         86:f8:83:d7:be:e1:7b:b3:93:0f:93:1d:35:6c:a1:95:04:ff:
         50:fc:21:0c:e9:69:65:40:96:d5:64:2e:43:de:31:4f:7e:ee:
         1f:7f:1d:cc:65:09:99:75:93:a9:ae:e8:75:86:99:8e:5d:78:
         a4:81:6a:85:ff:44:bf:b5:d3:e9:20:1b:c9:52:d6:3e:a8:46:
         25:f9:b2:6d:c2:81:51:ae:16:55:a2:e0:98:9d:df:d3:33:7f:
         13:b4:59:ed:e2:67:f0:30:62:a1:a9:85:b2:0f:d6:c1:a3:2f:
         a4:ff:1c:37:d8:68:b0:b3:35:08:c3:0e:17:43:81:f2:26:9a:
         cf:4b:f0:bf:d6:dc:d5:c0:95:bc:b2:00:bd:72:ed:28:ae:8c:
         3e:94:3f:31:7d:06:95:61:e7:02:80:e8:33:ec:42:13:41:c8:
         1f:4f:15:1f:59:23:ea:fe:bb:4a:51:8b:6a:2a:56:21:85:11:
         2d:8e:c8:0a:cb:06:be:d9:4b:aa:d4:30:09:07:1e:37:3a:66:
         49:ed:34:9d:2b:ff:76:c0:cc:a4:f5:65:90:3f:5b:75:51:c6:
         c2:01:b4:fd:85:ca:1c:b4:ce:64:e0:93:fd:cf:73:d6:85:cb:
         c3:40:95:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:57:19 2025 by rpki-client