Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131342e33302e39342e302f32342d3234203d3e203338313635.roa
File:                     3131342e33302e39342e302f32342d3234203d3e203338313635.roa (raw, json)
Hash identifier:          w4MoIkjhZKOKlbU395dXB3vgK47qdwm7DQqGTciZMic=
Subject key identifier:   F3:1F:A4:BC:E4:0C:5B:2E:FB:03:C0:69:B0:48:16:47:91:31:33:C1
Certificate issuer:       /CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
Certificate serial:       558E63C86080760A5D1D87428B1EBFB4F9EA060E
Authority key identifier: F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131342e33302e39342e302f32342d3234203d3e203338313635.roa
Signing time:             Mon 27 Jan 2025 02:00:01 +0000
ROA not before:           Mon 27 Jan 2025 01:55:01 +0000
ROA not after:            Mon 26 Jan 2026 02:00:01 +0000
asID:                     38165
IP address blocks:        114.30.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl
                          rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 18:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:8e:63:c8:60:80:76:0a:5d:1d:87:42:8b:1e:bf:b4:f9:ea:06:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
        Validity
            Not Before: Jan 27 01:55:01 2025 GMT
            Not After : Jan 26 02:00:01 2026 GMT
        Subject: CN=F31FA4BCE40C5B2EFB03C069B0481647913133C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a2:cb:ed:51:3f:d6:06:01:3f:83:f9:22:b7:
                    33:4a:06:c9:1a:5e:eb:09:4e:62:3b:01:e0:d2:8d:
                    f6:9e:96:d0:da:55:f5:7b:60:56:7b:6c:d1:3e:20:
                    76:86:3c:c3:b1:f6:82:c0:61:b1:48:e7:8e:9a:e1:
                    c7:ab:35:30:f2:fa:ba:75:77:44:26:4b:74:14:85:
                    31:63:52:89:3b:7f:1e:74:e3:82:de:1a:b3:a9:3e:
                    3f:31:3e:5e:e2:88:24:f5:ba:dc:ec:75:29:8c:11:
                    94:77:84:d7:0d:42:01:85:9b:12:25:7f:31:a1:ab:
                    c1:f9:5d:99:53:16:3f:52:d6:8c:88:7d:2f:9d:24:
                    2b:04:e6:7a:72:c1:cb:1d:e4:92:b1:f0:7b:5a:61:
                    c2:86:1d:9a:45:8f:6a:3a:6a:91:7d:a4:73:52:94:
                    7c:bc:c1:48:ff:53:d5:9f:8a:72:93:71:30:6c:fc:
                    9c:77:ca:fb:85:7e:49:c1:e5:8e:d3:d0:29:c1:ee:
                    a1:a5:4a:24:17:82:be:8b:af:aa:65:c4:1c:9d:1a:
                    ec:42:38:dc:7b:76:48:62:59:4c:dd:5e:c9:eb:37:
                    bb:76:7e:8c:76:80:2e:cc:93:9c:e9:a3:1e:ac:28:
                    62:1c:43:7f:c6:0f:4a:88:0d:ba:92:07:64:34:6f:
                    db:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:1F:A4:BC:E4:0C:5B:2E:FB:03:C0:69:B0:48:16:47:91:31:33:C1
            X509v3 Authority Key Identifier:
                keyid:F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131342e33302e39342e302f32342d3234203d3e203338313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.30.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:5f:2e:e0:49:ac:2b:d0:18:fe:7f:6a:2b:43:0c:f1:a3:f8:
         8f:e3:af:2e:a7:4c:e1:a6:a8:06:e9:51:a3:4e:6b:43:cd:47:
         f9:af:81:b3:44:50:44:38:ed:8a:b6:72:c8:ea:eb:4b:84:75:
         7d:42:d9:ce:94:61:67:bf:36:3a:02:3c:74:cf:27:a4:9b:f8:
         68:0b:ff:09:80:b3:b9:3f:e0:36:ee:62:7a:05:80:d9:e2:e0:
         cf:ff:07:1f:16:b1:c9:b3:1e:f4:5a:c2:a8:01:cf:30:9c:b6:
         bd:c5:c7:8e:38:c4:1a:0a:a6:6f:30:07:68:76:05:77:69:1e:
         ee:c6:62:9e:8b:27:b4:f0:cc:bf:91:88:6a:1c:12:57:17:a7:
         76:55:04:13:a1:5e:7b:6d:4a:21:f2:c8:af:c0:25:9c:36:c2:
         b1:b7:23:ba:c7:fb:e3:17:7a:f5:b8:8b:33:b0:6a:09:8e:93:
         25:d3:f1:af:8a:2d:b6:c8:f0:40:a7:dd:f7:ed:99:ea:51:f5:
         7c:f4:59:c9:88:90:2e:a3:fa:98:5b:ef:b0:2e:cb:6f:59:60:
         e7:aa:91:f4:44:e7:a4:d7:06:2b:90:7c:31:19:e0:7e:77:e3:
         58:22:7a:f2:6b:4e:80:00:c5:5b:d5:61:66:a0:66:0b:5b:10:
         ab:17:69:e0
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUVY5jyGCAdgpdHYdCix6/tPnqBg4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJDMjI0MTRCRjA4RkMwOEIwQUVCRjQ0RkFGODVBODU5
NzlEMTA1MzAeFw0yNTAxMjcwMTU1MDFaFw0yNjAxMjYwMjAwMDFaMDMxMTAvBgNV
BAMTKEYzMUZBNEJDRTQwQzVCMkVGQjAzQzA2OUIwNDgxNjQ3OTEzMTMzQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/osvtUT/WBgE/g/kitzNKBska
XusJTmI7AeDSjfaeltDaVfV7YFZ7bNE+IHaGPMOx9oLAYbFI546a4cerNTDy+rp1
d0QmS3QUhTFjUok7fx5044LeGrOpPj8xPl7iiCT1utzsdSmMEZR3hNcNQgGFmxIl
fzGhq8H5XZlTFj9S1oyIfS+dJCsE5npywcsd5JKx8HtaYcKGHZpFj2o6apF9pHNS
lHy8wUj/U9WfinKTcTBs/Jx3yvuFfknB5Y7T0CnB7qGlSiQXgr6Lr6plxBydGuxC
ONx7dkhiWUzdXsnrN7t2fox2gC7Mk5zpox6sKGIcQ3/GD0qIDbqSB2Q0b9t7AgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU8x+kvOQMWy77A8BpsEgWR5ExM8EwHwYDVR0j
BBgwFoAU8sIkFL8I/Aiwrr9E+vhahZedEFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
NzQ0OGMxMS1mOGQzLTQ1N2QtOGUyMi04NDg4N2FiMjJhMzAvMC9GMkMyMjQxNEJG
MDhGQzA4QjBBRUJGNDRGQUY4NUE4NTk3OUQxMDUzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjJDMjI0MTRCRjA4RkMwOEIwQUVCRjQ0RkFGODVBODU5NzlE
MTA1My5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y3NDQ4YzExLWY4ZDMtNDU3ZC04
ZTIyLTg0ODg3YWIyMmEzMC8wLzMxMzEzNDJlMzMzMDJlMzkzNDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMzMzgzMTM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAByHl4wDQYJKoZIhvcN
AQELBQADggEBAJJfLuBJrCvQGP5/aitDDPGj+I/jry6nTOGmqAbpUaNOa0PNR/mv
gbNEUEQ47Yq2csjq60uEdX1C2c6UYWe/NjoCPHTPJ6Sb+GgL/wmAs7k/4DbuYnoF
gNni4M//Bx8WscmzHvRawqgBzzCctr3Fx444xBoKpm8wB2h2BXdpHu7GYp6LJ7Tw
zL+RiGocElcXp3ZVBBOhXnttSiHyyK/AJZw2wrG3I7rH++MXevW4izOwagmOkyXT
8a+KLbbI8ECn3fftmepR9Xz0WcmIkC6j+phb77Auy29ZYOeqkfRE56TXBiuQfDEZ
4H5341gievJrToAAxVvVYWagZgtbEKsXaeA=
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:51:58 2025 by rpki-client