Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3131312e36372e38362e302f32332d3234203d3e203234353337.roa
File:                     3131312e36372e38362e302f32332d3234203d3e203234353337.roa (raw, json)
Hash identifier:          tDz28BGDnFd3MGcS96yd4J0BbOjvcShV8THChhLQTrA=
Subject key identifier:   8F:F3:D7:37:D5:BA:39:60:89:1D:71:A5:18:2F:85:70:85:E6:AE:69
Certificate issuer:       /CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
Certificate serial:       78DF6CD6B890C731A35AF8532ADBCBDF1CA4F773
Authority key identifier: BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3131312e36372e38362e302f32332d3234203d3e203234353337.roa
Signing time:             Mon 02 Jun 2025 02:03:03 +0000
ROA not before:           Mon 02 Jun 2025 01:58:03 +0000
ROA not after:            Mon 01 Jun 2026 02:03:03 +0000
asID:                     24537
IP address blocks:        111.67.86.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl
                          rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Jun 2025 23:22:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:df:6c:d6:b8:90:c7:31:a3:5a:f8:53:2a:db:cb:df:1c:a4:f7:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
        Validity
            Not Before: Jun  2 01:58:03 2025 GMT
            Not After : Jun  1 02:03:03 2026 GMT
        Subject: CN=8FF3D737D5BA3960891D71A5182F857085E6AE69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:50:ca:f5:83:e9:38:c5:60:17:ac:48:cb:9a:
                    e6:3c:62:c3:c6:e7:e7:6f:20:db:4e:2e:8d:60:1d:
                    d7:49:4e:37:ca:4e:3d:68:ec:33:a4:18:d1:36:f1:
                    ed:67:29:1c:d1:f1:30:24:7a:00:eb:c6:04:d8:de:
                    26:26:62:22:61:a2:81:8a:c6:3a:3a:8b:e5:58:23:
                    71:28:b6:f7:27:23:91:e9:65:d2:a4:2e:02:53:79:
                    54:b3:9c:9c:c5:73:b6:c7:8a:62:d9:37:09:8b:41:
                    e6:fe:ab:27:56:56:7f:d5:78:22:13:e0:2f:5b:94:
                    12:28:5d:f4:b5:8c:8b:5b:a8:b2:1d:d2:54:42:87:
                    b7:46:bc:2a:b5:fc:7a:e1:5e:7b:d4:e1:d4:10:21:
                    86:f3:e6:ea:c9:e5:38:95:e5:a4:c2:c3:8a:38:c0:
                    98:3d:d1:71:f5:13:65:45:56:29:a4:a5:24:87:93:
                    2a:5a:d6:1f:fc:90:f7:ae:1b:57:df:1d:db:38:84:
                    59:af:78:1f:6c:b9:7a:a3:32:5f:86:aa:93:17:a2:
                    8c:40:57:ba:22:9b:48:ca:cd:a5:15:6e:e5:12:03:
                    ca:19:e1:4f:7e:93:e0:b8:26:4d:4a:41:1f:5b:d4:
                    84:93:3a:98:6b:eb:fe:6b:21:6f:cb:58:6a:c4:e3:
                    16:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F3:D7:37:D5:BA:39:60:89:1D:71:A5:18:2F:85:70:85:E6:AE:69
            X509v3 Authority Key Identifier:
                keyid:BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3131312e36372e38362e302f32332d3234203d3e203234353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.67.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:9d:51:f0:3b:f2:4a:1f:2f:c5:cc:46:2d:99:5d:fa:b5:61:
         4d:e1:80:a5:21:0b:a8:3a:e8:32:22:b7:cf:1e:43:2a:3f:5b:
         3b:e5:8c:11:a1:3f:b7:e4:da:da:c0:3b:24:ca:aa:23:fe:b0:
         35:b6:cd:8b:ab:18:83:a0:4c:2d:91:cb:02:3f:94:cd:58:7c:
         ce:2a:99:bb:8d:f9:df:11:3c:0e:84:1c:8c:a3:74:ae:92:63:
         fe:98:8e:f4:56:55:9d:bc:b9:18:ac:4b:cb:19:b8:90:09:a3:
         e5:b9:b9:df:e2:28:d1:f1:30:2b:8b:42:5a:e0:6b:60:9b:f9:
         b2:c0:45:08:b3:92:57:9f:44:33:00:2d:d4:14:75:91:42:ce:
         28:b5:15:03:6d:1d:14:b1:df:93:60:bd:b4:30:e2:15:26:fc:
         2a:c1:26:c0:5b:05:2f:bc:e7:19:d0:7c:8a:bc:ba:61:69:db:
         c4:51:23:63:f2:c6:92:cf:25:57:63:1a:24:50:ed:33:c5:a4:
         48:b9:9f:41:92:0b:74:9a:32:78:7c:d6:e2:65:3e:28:c5:5e:
         74:44:d1:5c:8c:32:27:90:ac:e8:2f:8c:30:2f:f0:2a:19:95:
         9d:37:da:17:90:63:3f:64:cc:70:8d:a3:b6:5a:67:e4:9c:41:
         9a:1c:e8:d7
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUeN9s1riQxzGjWvhTKtvL3xyk93MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkYwNzZFQTI0QTY4Q0YxNTJDMzIzQzdBM0RGRDNGOTJB
RkU4QUEyQjAeFw0yNTA2MDIwMTU4MDNaFw0yNjA2MDEwMjAzMDNaMDMxMTAvBgNV
BAMTKDhGRjNENzM3RDVCQTM5NjA4OTFENzFBNTE4MkY4NTcwODVFNkFFNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoUMr1g+k4xWAXrEjLmuY8YsPG
5+dvINtOLo1gHddJTjfKTj1o7DOkGNE28e1nKRzR8TAkegDrxgTY3iYmYiJhooGK
xjo6i+VYI3EotvcnI5HpZdKkLgJTeVSznJzFc7bHimLZNwmLQeb+qydWVn/VeCIT
4C9blBIoXfS1jItbqLId0lRCh7dGvCq1/HrhXnvU4dQQIYbz5urJ5TiV5aTCw4o4
wJg90XH1E2VFVimkpSSHkypa1h/8kPeuG1ffHds4hFmveB9suXqjMl+GqpMXooxA
V7oim0jKzaUVbuUSA8oZ4U9+k+C4Jk1KQR9b1ISTOphr6/5rIW/LWGrE4xZJAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUj/PXN9W6OWCJHXGlGC+FcIXmrmkwHwYDVR0j
BBgwFoAUvwduokpozxUsMjx6Pf0/kq/oqiswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NTBkYTQ0Ny1hMTM4LTQ2MjUtYTQyMC1hNzExYWMyNDM1MTkvMC9CRjA3NkVBMjRB
NjhDRjE1MkMzMjNDN0EzREZEM0Y5MkFGRThBQTJCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkYwNzZFQTI0QTY4Q0YxNTJDMzIzQzdBM0RGRDNGOTJBRkU4
QUEyQi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1MGRhNDQ3LWExMzgtNDYyNS1h
NDIwLWE3MTFhYzI0MzUxOS8wLzMxMzEzMTJlMzYzNzJlMzgzNjJlMzAyZjMyMzMy
ZDMyMzQyMDNkM2UyMDMyMzQzNTMzMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFvQ1YwDQYJKoZIhvcN
AQELBQADggEBAAWdUfA78kofL8XMRi2ZXfq1YU3hgKUhC6g66DIit88eQyo/Wzvl
jBGhP7fk2trAOyTKqiP+sDW2zYurGIOgTC2RywI/lM1YfM4qmbuN+d8RPA6EHIyj
dK6SY/6YjvRWVZ28uRisS8sZuJAJo+W5ud/iKNHxMCuLQlrga2Cb+bLARQizklef
RDMALdQUdZFCzii1FQNtHRSx35NgvbQw4hUm/CrBJsBbBS+85xnQfIq8umFp28RR
I2PyxpLPJVdjGiRQ7TPFpEi5n0GSC3SaMnh81uJlPijFXnRE0VyMMieQrOgvjDAv
8CoZlZ032heQYz9kzHCNo7ZaZ+ScQZoc6Nc=
-----END CERTIFICATE-----
Generated at Mon Jun 9 06:47:16 2025 by rpki-client