Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34312e302f32342d3234203d3e203338313635.roa
File:                     3131362e31322e34312e302f32342d3234203d3e203338313635.roa (raw, json)
Hash identifier:          doEACUjApiRg3nFKKy22AlT5sIPWu7pQ8KoXoOKnGPY=
Subject key identifier:   A1:F5:83:F0:EA:60:20:01:97:8D:25:CE:7E:73:B7:01:A3:C4:06:24
Certificate issuer:       /CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
Certificate serial:       4B65C6CC05E4C5EFD7CB0812D984C60340828090
Authority key identifier: F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34312e302f32342d3234203d3e203338313635.roa
Signing time:             Mon 27 Jan 2025 02:00:03 +0000
ROA not before:           Mon 27 Jan 2025 01:55:03 +0000
ROA not after:            Mon 26 Jan 2026 02:00:03 +0000
asID:                     38165
IP address blocks:        116.12.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl
                          rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 18:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:65:c6:cc:05:e4:c5:ef:d7:cb:08:12:d9:84:c6:03:40:82:80:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
        Validity
            Not Before: Jan 27 01:55:03 2025 GMT
            Not After : Jan 26 02:00:03 2026 GMT
        Subject: CN=A1F583F0EA602001978D25CE7E73B701A3C40624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4c:2b:a8:d4:a7:6c:10:7b:b8:6f:19:4f:64:
                    35:69:5f:74:6a:03:6c:05:22:e1:1c:38:4c:17:b9:
                    be:47:1c:eb:0f:f3:3f:ed:26:01:3e:ee:3b:44:0b:
                    e6:3b:e1:d8:2b:01:2d:fa:26:e5:2f:0c:97:6e:ad:
                    53:1b:6d:12:52:13:70:1b:6e:6d:cc:3b:ab:db:ef:
                    47:f5:b3:7d:73:03:34:de:f4:c9:20:36:9c:a4:30:
                    89:ef:8d:fd:54:bc:02:fe:e7:eb:92:cd:bf:7f:1e:
                    54:bb:7b:2c:76:07:cc:ee:46:8f:84:c6:e3:1a:5f:
                    07:ef:8a:cb:88:1c:a5:79:4e:20:3a:73:ce:71:6a:
                    93:f9:77:55:df:d6:f3:57:70:dc:47:bf:ad:19:77:
                    9c:8f:e0:43:b5:24:ce:dc:51:24:86:53:bf:e6:1e:
                    5e:a6:5d:58:7a:0a:7c:e6:94:c0:07:64:e2:a1:b0:
                    3d:a9:e5:d9:0e:6b:4a:4a:d4:07:d7:4a:c3:e9:e0:
                    06:85:b0:78:98:a3:00:54:e7:10:4b:10:b1:03:e3:
                    3b:80:fa:59:70:79:c2:1c:59:b8:f2:98:44:cd:aa:
                    01:74:ea:a0:04:36:97:69:59:9d:aa:c4:91:98:50:
                    2d:ed:dd:8c:d4:08:50:02:e0:44:d6:a5:c0:3b:07:
                    07:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F5:83:F0:EA:60:20:01:97:8D:25:CE:7E:73:B7:01:A3:C4:06:24
            X509v3 Authority Key Identifier:
                keyid:F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34312e302f32342d3234203d3e203338313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.12.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:6f:73:25:91:d2:48:39:91:89:5f:63:3e:08:65:f0:14:ef:
         39:ca:fe:eb:a0:91:43:22:34:d1:94:e0:1b:84:7c:db:48:a9:
         d6:a3:20:c8:ce:45:36:76:78:0a:11:6c:3f:8d:64:07:4f:d5:
         ea:66:e0:20:50:40:2f:10:5c:39:73:9c:d3:b2:72:19:ef:8e:
         d0:3e:c5:c2:cc:88:f3:0c:13:01:b9:13:db:b9:f7:1b:d2:39:
         48:a7:98:d9:9e:05:10:31:0a:5d:81:09:c5:b3:95:b4:f5:d4:
         eb:69:8e:e1:2e:2b:ca:30:b4:40:a7:82:89:e3:44:e7:4a:11:
         0d:49:24:f0:a0:b9:ad:57:a7:33:c5:05:66:7f:1c:9e:24:9d:
         8c:0c:99:20:11:d6:bb:2c:46:5b:fa:ef:1c:53:cc:a7:84:06:
         59:7e:47:e0:2a:ed:db:42:0f:f1:2e:ed:7a:2c:74:1c:a2:b5:
         c9:bd:1f:b9:b9:e2:9e:75:db:30:10:57:46:aa:27:05:12:a3:
         d3:57:6f:4f:17:7d:7a:c8:76:57:05:d5:e7:96:36:36:42:a3:
         a1:63:7c:96:39:fe:b3:01:e6:3c:68:51:89:a0:d2:44:cb:7f:
         ba:df:c6:3d:52:e9:08:6a:17:ee:4d:d8:d2:cc:f1:56:c8:6d:
         a6:ac:40:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:51:53 2025 by rpki-client