Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/31342e3130322e34372e302f32342d3234203d3e20313531343034.roa
File:                     31342e3130322e34372e302f32342d3234203d3e20313531343034.roa (raw, json)
Hash identifier:          AFMdy/zqt60tzC7x4AF5OqGcShRC8yulkkom590vqkE=
Subject key identifier:   D4:A0:EB:2F:4C:43:D2:A6:52:2D:A3:DA:F4:15:6D:F2:B1:A4:85:4A
Certificate issuer:       /CN=9E6AD12E8763F68692055BC4EE5A1741D489D240
Certificate serial:       0CCB0A8FE47135A71BF268E45D88EA3C05BC8C48
Authority key identifier: 9E:6A:D1:2E:87:63:F6:86:92:05:5B:C4:EE:5A:17:41:D4:89:D2:40
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6AD12E8763F68692055BC4EE5A1741D489D240.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/31342e3130322e34372e302f32342d3234203d3e20313531343034.roa
Signing time:             Fri 03 Jan 2025 09:13:09 +0000
ROA not before:           Fri 03 Jan 2025 09:08:09 +0000
ROA not after:            Fri 02 Jan 2026 09:13:09 +0000
asID:                     151404
IP address blocks:        14.102.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/9E6AD12E8763F68692055BC4EE5A1741D489D240.crl
                          rsync://repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/9E6AD12E8763F68692055BC4EE5A1741D489D240.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6AD12E8763F68692055BC4EE5A1741D489D240.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Feb 2025 12:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:cb:0a:8f:e4:71:35:a7:1b:f2:68:e4:5d:88:ea:3c:05:bc:8c:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E6AD12E8763F68692055BC4EE5A1741D489D240
        Validity
            Not Before: Jan  3 09:08:09 2025 GMT
            Not After : Jan  2 09:13:09 2026 GMT
        Subject: CN=D4A0EB2F4C43D2A6522DA3DAF4156DF2B1A4854A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f4:01:0c:cb:80:bb:a8:32:89:e9:7e:25:9f:
                    f1:f1:9f:fb:5f:df:1d:5d:83:74:86:2c:d5:40:c6:
                    db:a7:03:6d:a9:5b:2b:c9:15:0a:79:4e:c1:f5:ff:
                    12:a4:c6:4b:79:d9:4e:9e:d4:8f:ab:aa:55:f8:46:
                    9a:37:ff:8f:b1:6b:17:28:4e:62:cd:62:47:32:64:
                    d2:74:26:61:92:76:c3:35:9d:d1:f8:7c:ef:06:ac:
                    17:27:7b:f5:2c:29:2e:b6:db:30:b1:03:6c:bc:46:
                    c3:0c:33:e2:fc:9d:47:85:b2:c6:a5:2c:bd:27:e8:
                    63:f3:bb:98:de:f6:47:6d:58:2d:00:15:82:3a:92:
                    dc:3b:69:e7:f8:73:d3:88:01:26:59:ed:ce:49:c4:
                    d5:86:7c:4b:ce:d9:6d:6f:a3:b5:8b:0f:cd:a6:b9:
                    fa:29:27:0b:dc:ba:5b:2e:e8:ef:d2:39:d7:d3:f3:
                    f5:7c:dd:01:e6:7b:ac:29:9b:7c:5d:55:30:ba:60:
                    53:73:db:c0:0b:1e:9c:7b:97:e7:50:b4:f9:0c:ae:
                    48:d5:f3:21:c5:ae:aa:53:5b:c9:60:64:d4:41:3b:
                    49:37:2c:4e:dc:8a:77:17:fd:fa:6f:0f:d6:6c:d3:
                    6a:5d:ae:73:53:e2:e9:5b:7a:8a:1a:dd:b6:06:29:
                    2d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A0:EB:2F:4C:43:D2:A6:52:2D:A3:DA:F4:15:6D:F2:B1:A4:85:4A
            X509v3 Authority Key Identifier:
                keyid:9E:6A:D1:2E:87:63:F6:86:92:05:5B:C4:EE:5A:17:41:D4:89:D2:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/9E6AD12E8763F68692055BC4EE5A1741D489D240.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6AD12E8763F68692055BC4EE5A1741D489D240.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/31342e3130322e34372e302f32342d3234203d3e20313531343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.102.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:88:e3:af:3f:f8:cc:c1:9f:e5:88:48:45:34:48:d0:fb:57:
         eb:60:2a:4c:be:a3:5e:70:25:e0:8a:24:f6:86:50:68:72:62:
         b0:d6:b3:e6:88:db:c0:43:9e:8e:9c:e8:bd:96:ec:8b:ae:0f:
         f8:69:da:60:1f:27:6a:0a:ac:d7:35:df:a0:e1:50:45:9e:5e:
         e5:54:00:63:36:fb:b5:90:96:fa:a5:51:4c:6a:4e:4d:ce:ed:
         b9:a4:90:06:cf:26:01:10:14:82:4c:fb:80:df:61:9c:69:c3:
         af:51:4c:a0:60:4c:27:63:08:2d:e6:3d:6e:48:bf:3f:15:11:
         55:c7:b6:2b:33:26:fa:c9:b7:29:f6:78:03:d7:24:b7:63:0f:
         be:31:8d:ab:7f:f4:fc:c1:d7:14:bb:f2:e2:e3:90:8b:13:64:
         ad:da:b8:8d:d8:06:da:e0:e4:a9:6e:65:1e:ba:6f:6c:35:2c:
         64:5d:96:34:46:d3:6e:17:ea:27:c8:6f:8c:be:59:eb:b2:d7:
         d1:8a:ad:ec:0b:97:94:e6:a3:47:d5:64:02:66:7a:5a:ee:67:
         f5:8b:d8:1a:13:4b:12:d4:10:7b:a3:71:4f:ae:10:e1:66:82:
         96:b3:68:0b:58:5a:0c:f0:3a:dd:d1:c3:db:4b:eb:ed:64:83:
         e3:8a:13:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:07:15 2025 by rpki-client