Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3138302e3137382e39332e302f32342d3234203d3e203435373232.roa
File:                     3138302e3137382e39332e302f32342d3234203d3e203435373232.roa (raw, json)
Hash identifier:          mp213bICEXwH+LqnHma8nvPV6BFgfv4aiHAHQpn9yQs=
Subject key identifier:   C2:E1:08:93:BD:C6:9C:78:9E:C0:82:A6:63:22:DC:8B:43:A2:BD:DD
Certificate issuer:       /CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
Certificate serial:       3B125329C3D9C624C23814C6360401913DB53B44
Authority key identifier: 51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3138302e3137382e39332e302f32342d3234203d3e203435373232.roa
Signing time:             Mon 02 Jun 2025 02:02:51 +0000
ROA not before:           Mon 02 Jun 2025 01:57:51 +0000
ROA not after:            Mon 01 Jun 2026 02:02:51 +0000
asID:                     45722
IP address blocks:        180.178.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl
                          rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 05:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:12:53:29:c3:d9:c6:24:c2:38:14:c6:36:04:01:91:3d:b5:3b:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
        Validity
            Not Before: Jun  2 01:57:51 2025 GMT
            Not After : Jun  1 02:02:51 2026 GMT
        Subject: CN=C2E10893BDC69C789EC082A66322DC8B43A2BDDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:49:3a:ab:da:3e:c9:0e:30:64:31:0f:6b:bc:
                    6b:f4:17:91:75:fa:5e:b9:68:37:d2:d8:00:41:09:
                    ed:db:9c:92:9b:30:47:2f:40:2c:30:52:0c:5b:d8:
                    26:95:c0:25:e8:90:a2:2a:93:c9:99:2d:4a:a6:e5:
                    6d:32:6c:1f:62:52:87:3c:a2:5d:9e:08:73:a0:dc:
                    5d:c2:a5:bc:22:97:d4:0b:60:2b:48:00:b8:ce:99:
                    1f:40:91:31:46:39:92:ce:53:14:db:31:12:f2:fe:
                    84:ba:31:97:2f:f1:2f:e9:fc:91:10:b8:84:3f:20:
                    d4:27:98:74:46:c0:86:dd:6f:65:e0:c9:c6:89:7d:
                    11:42:75:de:57:73:12:be:65:52:4b:60:6c:f5:f2:
                    31:e7:04:15:10:a4:3b:50:0c:55:96:9b:33:68:11:
                    6b:66:b8:b4:01:32:a6:98:f4:34:21:4c:e1:f0:58:
                    c7:c0:dc:c6:3c:49:fa:0f:77:6c:7e:5f:14:a6:8c:
                    07:a8:5b:eb:c9:7e:c8:e1:c5:a9:92:32:08:3b:5e:
                    d6:5a:e8:a4:0c:33:3a:aa:10:af:51:3f:d2:22:c0:
                    3b:78:94:d9:c6:52:f0:2b:4e:c9:1a:ce:54:64:40:
                    5a:b1:3a:c9:0a:61:e8:e7:50:7c:d8:e1:fe:0b:19:
                    6f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E1:08:93:BD:C6:9C:78:9E:C0:82:A6:63:22:DC:8B:43:A2:BD:DD
            X509v3 Authority Key Identifier:
                keyid:51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3138302e3137382e39332e302f32342d3234203d3e203435373232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.178.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:6a:0e:1c:10:fa:35:96:2c:60:5f:43:95:a2:3a:70:ac:a7:
         ce:ce:cf:55:54:69:86:6c:f6:ea:16:c7:be:ed:d7:56:d4:62:
         0c:69:4b:e3:44:19:bf:37:6a:b5:58:24:a4:ee:37:3b:7a:c6:
         e2:2f:41:c3:4e:5a:df:56:83:a6:bc:c6:c7:96:c8:a5:52:c9:
         09:24:bc:e3:05:5f:41:f9:39:da:04:eb:03:da:49:10:4c:29:
         ea:7d:f8:9e:1f:d1:39:5b:b9:e5:47:28:a5:ea:21:09:90:19:
         9a:24:3d:92:24:3f:b5:6f:00:7f:50:0e:6e:2f:c4:b3:b3:9a:
         09:c3:23:dd:54:36:eb:fc:60:02:fd:33:55:6c:94:57:fb:78:
         12:df:47:38:d6:34:81:f4:59:b8:60:30:83:e8:16:f2:40:48:
         a7:b0:c7:f5:b6:ac:a4:6e:f1:a5:ea:1a:a4:74:7f:46:8f:16:
         dc:f8:36:fe:3e:87:51:91:a1:d9:61:5f:ab:7a:6b:eb:0e:7a:
         2a:74:af:db:94:7f:41:bd:dc:e3:69:b3:0a:da:ea:55:08:ca:
         ad:4a:11:b9:1d:2a:85:9e:5d:15:79:a8:68:8e:7e:70:a3:78:
         32:cc:df:07:d4:e3:31:f3:40:3e:e6:ad:55:72:d3:ec:ff:6e:
         60:f2:3e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:26:22 2025 by rpki-client