Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3138302e3137382e39342e302f32342d3234203d3e203435373232.roa
File:                     3138302e3137382e39342e302f32342d3234203d3e203435373232.roa (raw, json)
Hash identifier:          r/svlrZcSr5sJUDVP99x6FJY548aywPcFlNv37DJt2Y=
Subject key identifier:   8D:FD:62:35:C7:A3:1F:2F:C2:E8:D6:EB:B0:A1:AF:C6:5C:BA:97:57
Certificate issuer:       /CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
Certificate serial:       6A5A8CECFC7AEDE0E94E4F699E25FDCB6C76C5D9
Authority key identifier: 51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3138302e3137382e39342e302f32342d3234203d3e203435373232.roa
Signing time:             Mon 02 Jun 2025 02:02:51 +0000
ROA not before:           Mon 02 Jun 2025 01:57:51 +0000
ROA not after:            Mon 01 Jun 2026 02:02:51 +0000
asID:                     45722
IP address blocks:        180.178.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl
                          rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 05:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:5a:8c:ec:fc:7a:ed:e0:e9:4e:4f:69:9e:25:fd:cb:6c:76:c5:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
        Validity
            Not Before: Jun  2 01:57:51 2025 GMT
            Not After : Jun  1 02:02:51 2026 GMT
        Subject: CN=8DFD6235C7A31F2FC2E8D6EBB0A1AFC65CBA9757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9a:e5:82:ef:e6:3f:f9:a3:d3:37:3e:d6:30:
                    f0:8d:da:cb:78:da:fb:ba:d3:55:2f:8a:22:0c:d7:
                    2c:f8:06:4a:e5:1e:a2:a3:98:35:57:72:21:cf:eb:
                    c4:0a:22:f9:d0:29:c0:67:c0:49:83:7d:6e:cf:f1:
                    25:b6:1b:9a:03:fc:e1:28:d8:83:1e:d6:91:1e:4d:
                    c9:5f:ca:e2:7e:d9:b3:f3:75:ea:81:ce:59:28:9e:
                    b6:2b:e6:dd:8e:0d:5d:1f:0f:b9:2f:6e:1f:d2:c0:
                    83:63:a8:ad:44:be:99:34:47:98:c8:2c:3f:06:f9:
                    d8:7e:d3:bf:f1:a8:08:28:c1:c4:c0:71:7a:5a:3c:
                    4e:66:92:e2:64:20:d1:f0:5d:5c:fa:c6:28:b2:42:
                    84:55:09:ef:dd:b4:0a:d3:bf:3d:7d:b8:82:21:b7:
                    6c:b1:dd:85:eb:cb:c7:e7:bc:c9:3c:94:97:ce:64:
                    19:35:b8:21:df:87:10:f1:90:ae:05:f9:88:f0:96:
                    47:1d:c2:fe:9d:da:5f:d7:6f:d6:bb:4b:6b:27:23:
                    86:fc:28:02:84:70:97:ad:e1:b7:2c:27:d9:c4:32:
                    c3:b4:44:c2:76:39:59:a4:c2:ee:59:d3:e3:03:75:
                    b6:95:e9:22:3c:b0:d4:d1:bb:be:04:e8:5a:e1:6b:
                    62:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:FD:62:35:C7:A3:1F:2F:C2:E8:D6:EB:B0:A1:AF:C6:5C:BA:97:57
            X509v3 Authority Key Identifier:
                keyid:51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3138302e3137382e39342e302f32342d3234203d3e203435373232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.178.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:35:c6:a3:45:bb:4f:d2:e7:a4:69:ee:af:6b:ce:8e:15:4f:
         65:67:91:41:2f:d0:a7:3b:97:b2:03:95:97:94:3a:d3:09:b9:
         f7:8a:7c:f5:0f:ec:39:85:49:0c:ef:dd:1d:f3:2f:59:b5:40:
         f8:82:e2:69:2e:2f:b1:76:68:ca:a3:96:5e:82:0e:a6:d1:03:
         6e:b8:d2:90:fb:36:ca:5c:67:97:b7:ca:b1:9b:3d:95:a4:c1:
         04:45:6b:25:80:85:2f:6a:20:c1:ba:db:7f:85:34:65:41:31:
         90:e9:d7:c4:57:ff:1d:dd:7f:34:80:58:c4:02:ef:a1:4f:b0:
         6a:bf:46:b8:a4:4b:6d:82:59:91:d0:ec:2e:0a:10:41:2e:20:
         f0:8b:28:97:bb:05:dc:c6:e0:f0:b8:72:13:d6:e5:0d:6d:7d:
         c6:80:df:6f:d4:9b:72:27:96:9c:ed:46:b0:69:37:50:11:05:
         36:9b:e6:ff:bd:11:ac:1a:16:01:73:f5:f1:fe:1a:7c:85:fa:
         0c:e1:ae:ce:ef:d8:df:b4:d0:24:d8:d1:76:27:46:6b:c8:19:
         47:23:b4:f1:db:a1:9e:a0:9b:4e:cf:ed:55:00:c9:61:d1:95:
         5e:29:49:fa:41:5f:c4:fe:8b:f5:91:69:bc:4e:89:40:8e:fe:
         e0:12:e9:d4
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUalqM7Px67eDpTk9pniX9y2x2xdkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTExMEE3MTdFRkU5NkIxMkU1RDNBNDc1RTlCMjE3OUU1
REUwRUEwQzAeFw0yNTA2MDIwMTU3NTFaFw0yNjA2MDEwMjAyNTFaMDMxMTAvBgNV
BAMTKDhERkQ2MjM1QzdBMzFGMkZDMkU4RDZFQkIwQTFBRkM2NUNCQTk3NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCemuWC7+Y/+aPTNz7WMPCN2st4
2vu601UviiIM1yz4BkrlHqKjmDVXciHP68QKIvnQKcBnwEmDfW7P8SW2G5oD/OEo
2IMe1pEeTclfyuJ+2bPzdeqBzlkonrYr5t2ODV0fD7kvbh/SwINjqK1Evpk0R5jI
LD8G+dh+07/xqAgowcTAcXpaPE5mkuJkINHwXVz6xiiyQoRVCe/dtArTvz19uIIh
t2yx3YXry8fnvMk8lJfOZBk1uCHfhxDxkK4F+Yjwlkcdwv6d2l/Xb9a7S2snI4b8
KAKEcJet4bcsJ9nEMsO0RMJ2OVmkwu5Z0+MDdbaV6SI8sNTRu74E6Frha2IdAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUjf1iNcejHy/C6NbrsKGvxly6l1cwHwYDVR0j
BBgwFoAUURCnF+/paxLl06R16bIXnl3g6gwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NjA3ZDkyOS00Y2E4LTRmNTMtYTI5OC01ZTMzYmUxZjg2MDQvMC81MTEwQTcxN0VG
RTk2QjEyRTVEM0E0NzVFOUIyMTc5RTVERTBFQTBDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTExMEE3MTdFRkU5NkIxMkU1RDNBNDc1RTlCMjE3OUU1REUw
RUEwQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U2MDdkOTI5LTRjYTgtNGY1My1h
Mjk4LTVlMzNiZTFmODYwNC8wLzMxMzgzMDJlMzEzNzM4MmUzOTM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNTM3MzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALSyXjANBgkqhkiG
9w0BAQsFAAOCAQEAmjXGo0W7T9LnpGnur2vOjhVPZWeRQS/QpzuXsgOVl5Q60wm5
94p89Q/sOYVJDO/dHfMvWbVA+ILiaS4vsXZoyqOWXoIOptEDbrjSkPs2ylxnl7fK
sZs9laTBBEVrJYCFL2ogwbrbf4U0ZUExkOnXxFf/Hd1/NIBYxALvoU+war9GuKRL
bYJZkdDsLgoQQS4g8Isol7sF3Mbg8LhyE9blDW19xoDfb9SbcieWnO1GsGk3UBEF
Npvm/70RrBoWAXP18f4afIX6DOGuzu/Y37TQJNjRdidGa8gZRyO08duhnqCbTs/t
VQDJYdGVXilJ+kFfxP6L9ZFpvE6JQI7+4BLp1A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:32:52 2025 by rpki-client