Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34302e302f32312d3234203d3e203338313635.roa
File:                     3131362e31322e34302e302f32312d3234203d3e203338313635.roa (raw, json)
Hash identifier:          1Yj4sE/npZTXWp5B0COtoGa2O6t5Ecbd+Qg25z2R6j0=
Subject key identifier:   83:8A:0D:37:7E:49:7E:CA:00:FF:FD:E9:EC:66:3C:A4:A4:43:D9:10
Certificate issuer:       /CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
Certificate serial:       0C036A571F40027AE7C21DA1F0CBF68290C529F0
Authority key identifier: F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34302e302f32312d3234203d3e203338313635.roa
Signing time:             Mon 02 Jun 2025 02:02:42 +0000
ROA not before:           Mon 02 Jun 2025 01:57:42 +0000
ROA not after:            Mon 01 Jun 2026 02:02:42 +0000
asID:                     38165
IP address blocks:        116.12.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl
                          rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 14:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:03:6a:57:1f:40:02:7a:e7:c2:1d:a1:f0:cb:f6:82:90:c5:29:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
        Validity
            Not Before: Jun  2 01:57:42 2025 GMT
            Not After : Jun  1 02:02:42 2026 GMT
        Subject: CN=838A0D377E497ECA00FFFDE9EC663CA4A443D910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2a:13:6a:0c:30:a8:69:77:10:bd:b0:ea:de:
                    92:44:f2:6a:f1:ce:b9:00:25:97:e7:45:8a:1f:b6:
                    5a:e4:e6:60:d8:24:0e:4d:85:6e:dd:1d:b0:0e:16:
                    1b:48:3c:08:b7:fa:16:68:f1:49:f5:d8:e6:72:96:
                    4f:03:39:6e:ee:52:9f:7c:f2:43:b5:f1:22:61:9b:
                    3d:97:76:b3:08:c0:70:67:be:18:13:45:a5:30:34:
                    d9:27:0d:44:21:9c:4a:a8:f6:da:bf:da:21:b4:5b:
                    0b:4c:f2:b1:82:f2:a4:1f:17:3f:84:46:23:ef:64:
                    4c:60:54:df:f2:e7:95:6f:c4:93:8a:54:b2:0d:f5:
                    75:8e:9d:12:aa:02:f9:02:7f:71:a7:0b:82:a9:06:
                    4e:b1:67:44:7e:66:ae:2e:3c:de:b2:00:38:39:54:
                    31:fb:fd:3c:90:74:dd:b5:bd:a6:e4:da:d1:3f:25:
                    0b:aa:b5:35:0e:cd:15:50:fb:2d:46:50:34:cc:4d:
                    d0:a9:b2:ff:12:34:f2:6a:a4:63:3b:03:12:b7:72:
                    5e:a8:e5:3a:76:c4:7c:89:cf:51:51:3b:68:16:dc:
                    a4:9c:19:2d:3a:cd:f7:82:d3:30:32:bf:c5:a1:1d:
                    a2:4c:85:11:c3:6a:72:73:31:41:03:89:49:05:07:
                    64:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:8A:0D:37:7E:49:7E:CA:00:FF:FD:E9:EC:66:3C:A4:A4:43:D9:10
            X509v3 Authority Key Identifier:
                keyid:F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34302e302f32312d3234203d3e203338313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.12.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         62:98:12:b0:8b:42:53:ed:26:62:ab:f5:51:46:9a:64:38:7c:
         c4:92:c9:94:08:45:07:0b:af:cd:a3:15:b8:e1:ae:f7:ff:c9:
         d4:7f:5c:30:40:39:61:c4:56:78:f1:e9:dd:fc:a7:d8:67:de:
         33:ed:2d:5e:85:20:7d:cf:1a:96:e7:f9:a3:b5:a1:42:48:fd:
         53:6e:bd:e4:63:0e:6b:f4:c8:f5:e2:bf:de:51:f1:24:6d:b0:
         1c:d8:cc:4b:19:e9:bd:f9:fc:86:0b:0a:22:08:5a:0a:ba:54:
         11:b5:34:66:4a:0a:f4:ea:52:b1:7a:7e:fe:68:c0:e3:3b:b6:
         ec:33:f7:d6:87:98:35:cc:f7:a5:79:d7:d7:f2:62:24:dd:66:
         8c:44:63:88:72:2a:33:40:f0:70:6f:c8:c7:9f:75:4c:15:28:
         2f:58:84:c0:1f:13:71:bc:37:10:e9:31:34:9f:86:d2:1e:63:
         ee:ed:a2:31:08:59:01:51:47:f0:38:d8:61:5f:4b:d5:40:d1:
         a5:21:e5:3d:f2:d1:d0:28:f2:c4:a0:f5:51:42:fa:07:1b:9a:
         da:1c:85:0a:7a:d2:d5:b3:13:6c:3b:b1:80:fa:33:36:f6:94:
         62:27:77:24:01:38:51:49:af:0a:66:19:73:88:ee:0b:6d:14:
         32:29:10:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:23:14 2025 by rpki-client