Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/3131352e3137382e35302e302f32342d3234203d3e203338373833.roa
File:                     3131352e3137382e35302e302f32342d3234203d3e203338373833.roa (raw, json)
Hash identifier:          AVHUuCu/pWOfGEGbs7pgdGUZzNAVfi/HDMj4JakhRSI=
Subject key identifier:   BC:25:32:3B:E5:1B:8B:A3:51:15:78:D3:59:D8:BC:3C:16:37:D1:55
Certificate issuer:       /CN=B605E2C01C5BDC6CEE49545C80501360234DC910
Certificate serial:       776F41CF31317F021152C083B1BA74E04CC14ABD
Authority key identifier: B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/3131352e3137382e35302e302f32342d3234203d3e203338373833.roa
Signing time:             Mon 02 Jun 2025 02:03:45 +0000
ROA not before:           Mon 02 Jun 2025 01:58:45 +0000
ROA not after:            Mon 01 Jun 2026 02:03:45 +0000
asID:                     38783
IP address blocks:        115.178.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl
                          rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 00:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:6f:41:cf:31:31:7f:02:11:52:c0:83:b1:ba:74:e0:4c:c1:4a:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B605E2C01C5BDC6CEE49545C80501360234DC910
        Validity
            Not Before: Jun  2 01:58:45 2025 GMT
            Not After : Jun  1 02:03:45 2026 GMT
        Subject: CN=BC25323BE51B8BA3511578D359D8BC3C1637D155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ab:d0:13:6d:bd:01:39:2d:d5:e0:dc:9a:93:
                    64:3f:db:24:f8:86:fa:ca:44:62:12:d9:fc:f8:c3:
                    5e:cb:4f:5f:3f:e3:66:bc:82:ed:46:bf:7b:d7:d9:
                    cf:26:8b:b8:64:6a:16:35:83:e6:a0:77:43:f9:fd:
                    9e:70:36:b2:e0:f8:fe:5c:82:85:a7:0e:b2:d3:d6:
                    ba:49:1d:29:c1:33:f1:e0:1e:3a:ff:47:cb:41:48:
                    61:16:c2:09:12:2b:9d:6d:92:2b:f6:dc:80:41:3e:
                    4b:50:ed:ec:a9:fe:a0:b1:6b:fe:66:87:c0:62:cb:
                    85:49:66:d4:58:62:05:57:00:2d:65:20:38:fe:bc:
                    49:88:d2:bd:b2:24:c8:cf:c4:47:55:ac:3a:0c:3b:
                    bb:6c:1d:82:24:23:00:7d:b7:5b:30:63:fe:32:c1:
                    76:87:5d:3b:fa:7a:f5:57:74:96:7d:fc:1f:fd:dd:
                    fe:69:36:51:68:39:42:ce:79:e6:4e:54:4c:b2:6a:
                    22:b2:61:1e:fb:b6:8e:d9:9a:9d:0d:f6:3d:54:a1:
                    62:be:90:94:65:57:f7:4a:37:d9:f6:6d:85:84:78:
                    8d:b7:01:73:1e:54:c3:4d:ff:49:f5:f4:a1:61:1b:
                    be:3f:24:bc:6e:58:67:9e:df:d6:bd:9f:f1:82:f6:
                    8a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:25:32:3B:E5:1B:8B:A3:51:15:78:D3:59:D8:BC:3C:16:37:D1:55
            X509v3 Authority Key Identifier:
                keyid:B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/3131352e3137382e35302e302f32342d3234203d3e203338373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.178.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:8c:ca:26:5c:8c:ed:9b:96:d8:28:c9:2b:ef:95:b4:37:ba:
         af:77:e0:80:dd:8d:76:43:22:77:70:3d:12:55:70:79:5f:28:
         fe:eb:8c:5a:d8:df:7b:da:45:f8:f9:a8:c5:8a:e2:65:3d:80:
         12:18:b7:28:df:df:c3:1f:c3:0e:47:48:ed:46:af:ae:95:82:
         08:c9:5d:e0:c2:00:d7:30:29:56:4e:fd:44:14:66:db:73:b2:
         9e:b0:20:c7:b1:df:b6:90:19:db:68:48:69:09:c4:8a:dc:f2:
         42:a2:35:34:68:fa:fb:c3:0e:76:ac:1b:30:dd:a9:c9:e4:3e:
         cf:49:5a:36:65:bd:27:00:a7:7d:eb:1e:58:89:9c:50:a6:d8:
         d2:ac:9f:5e:75:d6:a3:9d:8e:86:59:99:94:20:70:65:c1:70:
         e4:06:bb:96:e7:a1:a5:26:50:c8:ba:c0:f0:3d:47:5d:b9:22:
         d3:3d:cc:25:c9:1d:d5:62:bf:b5:fc:5a:fb:1b:4b:2a:9a:f3:
         f9:4c:19:bc:61:a1:92:4d:c6:97:c8:26:34:86:b2:32:68:e5:
         d9:f2:dc:51:90:68:92:d2:6a:cb:59:33:d5:ab:a3:18:05:86:
         69:91:c8:07:4d:81:ea:05:1e:80:4c:8d:f1:5b:72:47:37:4c:
         4b:b7:f0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:34:43 2025 by rpki-client