Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3138302e3137382e39322e302f32342d3234203d3e203435373232.roa
File:                     3138302e3137382e39322e302f32342d3234203d3e203435373232.roa (raw, json)
Hash identifier:          ghDv+E88LbsHp+yiOmZsjAqDuH4NzWOqybkoMe5BmV8=
Subject key identifier:   2F:4C:03:C8:1A:64:B1:03:A2:B5:EF:08:04:FA:A4:21:38:9C:F6:F9
Certificate issuer:       /CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
Certificate serial:       492342E2FBEAA0ED3914B0FC1DDC497E75554399
Authority key identifier: 51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3138302e3137382e39322e302f32342d3234203d3e203435373232.roa
Signing time:             Mon 02 Jun 2025 02:02:50 +0000
ROA not before:           Mon 02 Jun 2025 01:57:50 +0000
ROA not after:            Mon 01 Jun 2026 02:02:50 +0000
asID:                     45722
IP address blocks:        180.178.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl
                          rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 05:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:23:42:e2:fb:ea:a0:ed:39:14:b0:fc:1d:dc:49:7e:75:55:43:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
        Validity
            Not Before: Jun  2 01:57:50 2025 GMT
            Not After : Jun  1 02:02:50 2026 GMT
        Subject: CN=2F4C03C81A64B103A2B5EF0804FAA421389CF6F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:17:4c:8e:6a:b6:11:5f:0e:8f:80:43:11:35:
                    83:ca:af:8f:6b:65:dc:93:96:fb:c0:1a:2b:0a:03:
                    8a:43:57:64:77:3f:7a:e7:f5:06:a5:31:c2:41:7d:
                    e3:ca:34:f1:fe:ff:9d:fa:28:c5:74:6f:be:86:84:
                    09:8f:ce:a6:a8:4f:4f:28:0d:67:a7:cd:65:a6:4a:
                    c6:df:ef:e1:b1:44:f9:2d:d9:b3:90:f6:fb:e7:c8:
                    fb:b2:6c:6b:71:0b:86:d5:48:d8:b9:7b:5e:46:14:
                    fa:3d:2c:e3:c3:78:03:8b:f4:38:24:0f:95:9b:a3:
                    45:39:93:fc:db:e5:f9:11:0e:b4:bf:c3:c0:f6:27:
                    1a:a8:90:6b:d2:8f:13:fe:c9:24:36:0b:a5:fd:33:
                    da:9d:76:85:b5:64:07:dd:c7:58:81:ae:8f:fb:4d:
                    50:88:09:ed:f3:37:be:2b:9d:ae:1a:0e:76:ea:a5:
                    c3:6c:82:f0:f5:96:12:b7:2e:8f:9b:fa:7d:c8:9a:
                    3b:c5:6e:e2:66:be:c6:ca:75:0e:a4:f4:ec:91:4a:
                    61:63:d9:7b:f9:27:1f:12:a1:91:ef:c0:91:75:f8:
                    0c:af:71:84:d0:57:0a:56:ca:20:1f:64:59:92:56:
                    55:90:8e:41:54:5c:ea:e8:9d:1a:20:b5:df:e4:61:
                    02:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:4C:03:C8:1A:64:B1:03:A2:B5:EF:08:04:FA:A4:21:38:9C:F6:F9
            X509v3 Authority Key Identifier:
                keyid:51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3138302e3137382e39322e302f32342d3234203d3e203435373232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.178.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:28:88:7a:3e:1c:fc:54:f2:4d:84:0b:4e:42:d6:46:ea:b3:
         9e:63:97:ec:2e:48:6b:e5:cc:e4:93:77:b8:e7:2e:e9:58:bf:
         77:a2:d3:89:f6:80:ef:10:7a:6d:5e:35:e3:00:8a:1d:d2:bf:
         a0:24:0b:ea:67:82:8d:04:26:6e:d8:8d:49:1a:41:06:4c:5f:
         8c:9a:03:89:bb:41:51:b9:85:7c:94:12:de:77:74:f6:23:35:
         10:ee:e2:47:46:bc:7a:03:3a:a7:f3:7d:75:71:0f:f6:50:9c:
         24:04:5c:28:fa:04:36:38:b1:e3:8e:03:28:57:72:5c:11:84:
         25:ec:d6:34:d9:38:6d:05:0f:13:98:0f:76:d8:b1:35:aa:9c:
         e2:a9:1f:e3:0b:33:90:7b:0f:b6:22:9e:4f:4d:90:47:7a:e7:
         4e:d9:0b:80:99:88:1f:fe:e3:c4:75:ac:0f:86:d0:e4:03:e0:
         a5:e2:24:f9:46:b3:9d:a0:65:a1:9e:63:ba:41:29:83:a4:0b:
         a2:31:21:74:d8:5e:db:b6:83:f8:01:f7:43:7a:67:74:4b:6a:
         1a:2f:e4:9b:fc:d1:40:84:e6:73:ee:7d:3e:42:a9:5c:4e:a5:
         cf:22:e6:d4:63:41:87:7c:ec:f8:aa:d5:c9:2f:96:0f:9f:40:
         5d:4f:07:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:00:14 2025 by rpki-client