Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3131312e36372e38302e302f32332d3234203d3e203535363931.roa
File:                     3131312e36372e38302e302f32332d3234203d3e203535363931.roa (raw, json)
Hash identifier:          6r7ytzVqOZCu9ltnazdoDFZyu1sN5kdyWtk6OiFCZME=
Subject key identifier:   D4:43:3E:96:18:A7:F9:27:57:22:F4:16:1E:D4:EF:02:74:50:69:0B
Certificate issuer:       /CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
Certificate serial:       60671798FED7CE4879FB9E13B0F49ECDA27FED4D
Authority key identifier: BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3131312e36372e38302e302f32332d3234203d3e203535363931.roa
Signing time:             Mon 02 Jun 2025 02:03:02 +0000
ROA not before:           Mon 02 Jun 2025 01:58:02 +0000
ROA not after:            Mon 01 Jun 2026 02:03:02 +0000
asID:                     55691
IP address blocks:        111.67.80.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl
                          rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Jun 2025 02:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:67:17:98:fe:d7:ce:48:79:fb:9e:13:b0:f4:9e:cd:a2:7f:ed:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
        Validity
            Not Before: Jun  2 01:58:02 2025 GMT
            Not After : Jun  1 02:03:02 2026 GMT
        Subject: CN=D4433E9618A7F9275722F4161ED4EF027450690B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8d:53:c4:09:e2:77:0a:26:47:df:dd:4c:76:
                    b1:27:99:d1:2e:27:5b:af:43:1a:82:a1:8a:8b:6a:
                    ab:83:ec:c9:bd:d7:05:04:7a:64:28:63:53:8a:fc:
                    5f:54:52:10:88:7c:0f:d5:ee:10:62:0c:7e:69:c5:
                    4f:99:cb:71:23:dd:e6:ab:86:4f:ad:d8:91:30:5e:
                    d7:81:10:d7:d6:4f:88:6a:14:45:04:2d:ba:2b:6e:
                    68:b6:02:96:cd:7f:06:d6:89:14:00:78:f3:89:35:
                    16:7f:f3:33:7e:54:d5:fd:f8:4c:53:21:13:4c:9e:
                    9b:a0:ee:62:a5:0f:cd:0b:14:ef:48:e1:3b:4f:6d:
                    cc:82:be:73:73:24:24:df:98:aa:21:43:aa:11:4c:
                    c9:fe:78:6d:2e:71:ac:6e:7d:5e:2e:6b:fc:f0:bd:
                    2a:37:8b:c3:d2:3e:b2:69:31:ac:03:0c:c0:fb:f7:
                    b0:fa:ea:40:20:2a:bb:b8:e9:f5:db:e1:14:7e:ff:
                    dc:af:f2:64:c4:78:a3:65:ed:55:c5:c0:dd:66:cf:
                    59:31:11:b4:fe:f6:28:37:db:c3:d0:3a:13:64:64:
                    b4:2a:c8:84:8e:8b:fa:65:ac:b8:56:d6:24:7c:8f:
                    a3:69:a6:9a:49:a3:4e:38:84:b9:f8:ed:87:b2:32:
                    16:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:43:3E:96:18:A7:F9:27:57:22:F4:16:1E:D4:EF:02:74:50:69:0B
            X509v3 Authority Key Identifier:
                keyid:BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3131312e36372e38302e302f32332d3234203d3e203535363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.67.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:0d:ea:57:41:25:0e:60:2e:9a:70:22:f0:12:ed:09:5e:a6:
         17:12:cd:c4:cd:5d:5a:8f:1c:25:2b:bb:00:6b:59:46:7a:7f:
         7b:cb:57:d8:5b:21:d4:53:e3:06:64:04:9e:54:dd:82:64:ba:
         26:43:89:0c:64:c0:c7:a0:e5:12:f4:a0:f3:9d:c4:c0:7c:da:
         a2:4f:81:8d:9f:a3:5d:cf:1b:82:22:98:76:f8:0a:88:ca:f9:
         04:9d:79:6c:4d:33:eb:be:e4:f9:c7:cd:00:22:64:a6:3e:21:
         c8:ab:0b:c7:77:44:98:c5:80:b1:68:8f:27:bb:11:26:58:0e:
         af:33:77:b8:9a:1b:4a:6b:e8:97:95:7a:4e:f8:c6:5b:7f:d4:
         1f:07:ac:4c:15:dd:c0:38:e8:57:06:ee:e7:c4:80:59:ec:22:
         95:9a:fc:af:86:95:de:f7:5e:53:3f:b9:e1:35:2c:b9:eb:80:
         e4:fb:a5:e4:00:68:a0:1b:1c:72:d6:91:92:3f:a9:d6:30:e3:
         8a:be:da:36:3c:17:d1:09:0b:38:36:1e:cd:aa:75:0b:0b:ca:
         95:ef:ba:56:35:f8:1e:27:98:72:27:6f:32:be:ef:06:88:ad:
         a8:f6:5e:29:38:60:4e:5e:79:47:86:32:86:8c:10:8b:05:7d:
         bd:aa:22:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:24:18 2025 by rpki-client