Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e31362e302f32342d3234203d3e20323632393239.roa
File:                     3132322e3132382e31362e302f32342d3234203d3e20323632393239.roa (raw, json)
Hash identifier:          V10gFKQc+WgMolRvJOryKxPX23lt9/y0uKRD456elbI=
Subject key identifier:   F9:61:4C:9C:F0:69:CB:5F:95:46:76:9B:2C:5C:BD:0F:30:87:95:D3
Certificate issuer:       /CN=00EE953FD699788668C724460F4D8D420238194F
Certificate serial:       07FC4B5906BE50A6C22EA315715C692E8E2530ED
Authority key identifier: 00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e31362e302f32342d3234203d3e20323632393239.roa
Signing time:             Tue 17 Jun 2025 02:00:03 +0000
ROA not before:           Tue 17 Jun 2025 01:55:03 +0000
ROA not after:            Tue 16 Jun 2026 02:00:03 +0000
asID:                     262929
IP address blocks:        122.128.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl
                          rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Jul 2025 20:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:fc:4b:59:06:be:50:a6:c2:2e:a3:15:71:5c:69:2e:8e:25:30:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00EE953FD699788668C724460F4D8D420238194F
        Validity
            Not Before: Jun 17 01:55:03 2025 GMT
            Not After : Jun 16 02:00:03 2026 GMT
        Subject: CN=F9614C9CF069CB5F9546769B2C5CBD0F308795D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2d:36:a8:90:e6:3f:bb:f2:94:1e:95:fd:1e:
                    55:d1:76:9d:93:9d:3f:74:bb:01:24:4e:91:5e:fd:
                    79:01:a9:76:e2:d1:93:8c:4d:5d:4f:a7:7a:a5:7e:
                    42:ee:ca:3f:d7:f0:d0:9e:ce:a5:40:b0:c0:3b:01:
                    e2:b0:dd:56:43:23:9d:42:99:4e:b9:fc:50:dc:d7:
                    3c:74:f6:26:33:0a:9c:19:57:54:0a:96:91:c0:bc:
                    6d:81:02:10:b0:90:9c:48:e2:87:89:29:da:91:88:
                    49:ff:d5:1d:93:c1:72:c7:d7:cf:b0:bb:16:76:52:
                    fb:ce:5b:9e:89:be:03:0e:29:45:e1:44:21:54:b1:
                    97:e7:57:a3:b7:c0:c3:0d:21:7b:f3:09:1d:57:86:
                    62:39:15:57:db:8e:08:14:b8:5f:23:fc:f4:44:c9:
                    02:60:09:b9:4f:c1:cb:95:72:3c:3a:54:43:b2:7b:
                    65:09:aa:29:c6:8a:3a:33:91:2b:aa:91:0a:8c:fc:
                    11:fd:6c:f0:5a:d1:eb:23:40:f1:27:76:4b:41:ca:
                    d8:d8:c7:0b:7c:c4:3a:54:65:50:2d:01:08:78:bd:
                    1b:ea:35:94:5a:f7:d5:c2:5a:7a:00:d2:83:0a:34:
                    10:d0:8f:13:c8:94:68:c3:22:93:77:2e:dc:19:87:
                    c9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:61:4C:9C:F0:69:CB:5F:95:46:76:9B:2C:5C:BD:0F:30:87:95:D3
            X509v3 Authority Key Identifier:
                keyid:00:EE:95:3F:D6:99:78:86:68:C7:24:46:0F:4D:8D:42:02:38:19:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/00EE953FD699788668C724460F4D8D420238194F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00EE953FD699788668C724460F4D8D420238194F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e31362e302f32342d3234203d3e20323632393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.128.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:c5:ee:d5:70:44:bb:88:94:65:01:81:a7:1b:81:1e:2d:e2:
         c1:a6:82:21:f1:71:15:b2:28:f0:5a:28:d3:cd:d9:c1:cd:b4:
         68:54:9e:f9:07:c9:45:c8:a7:14:cf:58:b1:4a:52:2a:20:f6:
         f4:38:1e:81:fe:7c:da:df:5d:ef:48:3c:52:17:68:54:c3:d8:
         c9:46:2b:0f:fe:fc:b5:7f:08:10:c0:4e:e2:11:c5:cc:35:21:
         12:c4:83:7d:d0:df:b8:19:4f:61:8c:4e:91:2e:6e:b6:4b:61:
         bb:05:03:76:28:ad:f7:c9:7c:dc:98:a1:7a:dd:0e:52:fc:1f:
         33:35:1c:44:f4:3e:28:9f:3a:3f:b8:3f:c9:02:4e:b1:3d:b7:
         73:c6:a8:bc:7d:ef:26:bf:3b:8f:f9:55:2e:fc:44:0d:3a:98:
         3f:2a:ae:72:60:34:e2:42:15:62:e0:6f:ed:2f:3d:c7:f8:5f:
         46:f3:52:a1:a1:e5:e4:b4:73:ab:6d:dc:a6:b2:78:bd:db:c0:
         f8:a7:09:9c:89:79:ae:9d:9d:84:06:cf:fd:c5:5a:54:55:0a:
         6d:f6:65:48:e5:7e:f7:d6:1a:3f:f5:1c:03:c5:06:81:90:ed:
         79:c1:51:33:16:18:1c:a3:29:53:f4:59:a7:db:27:41:82:68:
         b3:df:6b:3b
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUB/xLWQa+UKbCLqMVcVxpLo4lMO0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDBFRTk1M0ZENjk5Nzg4NjY4QzcyNDQ2MEY0RDhENDIw
MjM4MTk0RjAeFw0yNTA2MTcwMTU1MDNaFw0yNjA2MTYwMjAwMDNaMDMxMTAvBgNV
BAMTKEY5NjE0QzlDRjA2OUNCNUY5NTQ2NzY5QjJDNUNCRDBGMzA4Nzk1RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClLTaokOY/u/KUHpX9HlXRdp2T
nT90uwEkTpFe/XkBqXbi0ZOMTV1Pp3qlfkLuyj/X8NCezqVAsMA7AeKw3VZDI51C
mU65/FDc1zx09iYzCpwZV1QKlpHAvG2BAhCwkJxI4oeJKdqRiEn/1R2TwXLH18+w
uxZ2UvvOW56JvgMOKUXhRCFUsZfnV6O3wMMNIXvzCR1XhmI5FVfbjggUuF8j/PRE
yQJgCblPwcuVcjw6VEOye2UJqinGijozkSuqkQqM/BH9bPBa0esjQPEndktBytjY
xwt8xDpUZVAtAQh4vRvqNZRa99XCWnoA0oMKNBDQjxPIlGjDIpN3LtwZh8lHAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU+WFMnPBpy1+VRnabLFy9DzCHldMwHwYDVR0j
BBgwFoAUAO6VP9aZeIZoxyRGD02NQgI4GU8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
ODUzZjIyOC0zN2YyLTQ3ZDktYjlmZS00NzZiYWRlMTMzOTMvMC8wMEVFOTUzRkQ2
OTk3ODg2NjhDNzI0NDYwRjREOEQ0MjAyMzgxOTRGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDBFRTk1M0ZENjk5Nzg4NjY4QzcyNDQ2MEY0RDhENDIwMjM4
MTk0Ri5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM4NTNmMjI4LTM3ZjItNDdkOS1i
OWZlLTQ3NmJhZGUxMzM5My8wLzMxMzIzMjJlMzEzMjM4MmUzMTM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzNjMyMzkzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAeoAQMA0GCSqG
SIb3DQEBCwUAA4IBAQB+xe7VcES7iJRlAYGnG4EeLeLBpoIh8XEVsijwWijTzdnB
zbRoVJ75B8lFyKcUz1ixSlIqIPb0OB6B/nza313vSDxSF2hUw9jJRisP/vy1fwgQ
wE7iEcXMNSESxIN90N+4GU9hjE6RLm62S2G7BQN2KK33yXzcmKF63Q5S/B8zNRxE
9D4onzo/uD/JAk6xPbdzxqi8fe8mvzuP+VUu/EQNOpg/Kq5yYDTiQhVi4G/tLz3H
+F9G81KhoeXktHOrbdymsni928D4pwmciXmunZ2EBs/9xVpUVQpt9mVI5X731ho/
9RwDxQaBkO15wVEzFhgcoylT9Fmn2ydBgmiz32s7
-----END CERTIFICATE-----
Generated at Mon Jun 30 11:48:18 2025 by rpki-client