Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34362e302f32342d3234203d3e203338313635.roa
File:                     3131362e31322e34362e302f32342d3234203d3e203338313635.roa (raw, json)
Hash identifier:          ETWRSfV4hXZC0gKFe9MMD4rEeHuYCOHE04oGEcb71SY=
Subject key identifier:   EA:B3:CE:9F:38:B1:A7:12:2F:6B:64:5C:86:4A:E9:E9:3A:6A:6B:C3
Certificate issuer:       /CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
Certificate serial:       6DD756856715A1D9795BE616717E3A432D3C7594
Authority key identifier: F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34362e302f32342d3234203d3e203338313635.roa
Signing time:             Mon 27 Jan 2025 02:00:01 +0000
ROA not before:           Mon 27 Jan 2025 01:55:01 +0000
ROA not after:            Mon 26 Jan 2026 02:00:01 +0000
asID:                     38165
IP address blocks:        116.12.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl
                          rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 18:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:d7:56:85:67:15:a1:d9:79:5b:e6:16:71:7e:3a:43:2d:3c:75:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
        Validity
            Not Before: Jan 27 01:55:01 2025 GMT
            Not After : Jan 26 02:00:01 2026 GMT
        Subject: CN=EAB3CE9F38B1A7122F6B645C864AE9E93A6A6BC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2c:cc:c2:c2:7c:61:62:2c:68:33:e8:30:80:
                    71:63:35:22:56:d7:7a:0d:3a:51:60:54:92:fc:bb:
                    54:81:81:d1:df:54:cc:e6:8d:89:9e:06:0d:04:d6:
                    7f:df:a7:8a:4f:06:78:db:10:bf:cb:76:3e:97:e0:
                    e6:b9:85:1c:9e:b4:12:fd:94:23:3b:3a:ad:6c:7e:
                    d1:f8:45:7b:a1:8a:93:ff:c1:6b:ee:bb:bb:5b:91:
                    e7:f3:d7:0c:ca:ae:08:9f:1d:d6:de:68:66:96:f7:
                    a6:0d:d1:8c:c2:3d:ab:5a:d4:77:48:80:36:7e:04:
                    6d:3a:f5:77:c4:61:6f:cd:03:d9:0b:28:fd:f4:21:
                    cc:4b:dc:9e:24:a2:7d:c7:52:80:df:6f:08:5e:e7:
                    33:b0:88:98:3a:d9:4f:25:d2:86:aa:3a:5e:ae:1c:
                    cc:10:98:98:b9:2b:29:3a:29:7e:18:c4:a3:56:46:
                    81:d7:1f:8c:ab:30:cb:78:cc:ba:8f:c6:c3:03:6b:
                    7d:c7:a1:01:85:92:98:38:31:d8:32:ef:a3:91:a9:
                    04:89:43:20:94:43:15:60:f0:15:4d:72:bd:5a:60:
                    2a:61:66:d2:a7:e0:7b:1f:8b:fa:ea:15:34:6e:b8:
                    b3:49:c4:05:c8:48:46:c1:14:a0:ea:c2:6d:5f:ee:
                    91:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B3:CE:9F:38:B1:A7:12:2F:6B:64:5C:86:4A:E9:E9:3A:6A:6B:C3
            X509v3 Authority Key Identifier:
                keyid:F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34362e302f32342d3234203d3e203338313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.12.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:07:30:4c:a0:36:cc:e1:f5:9e:7a:97:dd:e8:14:5b:41:de:
         f3:28:6e:6c:fc:81:29:2a:03:ef:d2:99:15:96:00:69:ec:88:
         0f:a5:ee:e2:53:04:52:92:82:d6:52:6c:4f:63:fd:e5:5c:76:
         fc:9d:95:7c:4d:a2:77:82:20:21:e7:e5:85:d1:ef:8f:4e:f7:
         d4:97:82:57:4d:2a:2a:01:05:63:bf:32:ed:b9:27:19:36:4a:
         dc:b0:8b:80:b4:3d:35:fd:80:a9:9e:70:b6:85:05:3c:0a:02:
         0b:78:13:29:ff:9d:8c:54:80:30:5f:a3:cb:a8:d4:b5:42:1c:
         63:e3:3c:c7:39:88:46:d4:8f:9c:b0:1b:9c:9d:d1:3e:50:96:
         06:da:1f:11:0d:ba:2d:e4:9a:02:29:dd:af:e1:2f:fe:06:7c:
         42:4d:c0:46:f6:00:66:35:18:9a:01:b9:18:13:f9:8e:e7:8e:
         1f:91:68:45:38:d0:2a:79:24:96:53:92:87:bd:f8:36:0f:3b:
         45:64:4e:89:d5:e6:41:91:85:a2:91:5a:f4:ee:3b:7b:df:4f:
         f4:b3:e2:69:fc:73:d1:9b:76:af:c3:7e:8b:ad:4b:7d:26:95:
         4b:9a:32:d4:bd:1f:ea:2f:11:79:8c:37:22:44:a7:8c:c1:46:
         2d:40:c5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:50:40 2025 by rpki-client