Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3131352e3137382e3136302e302f31392d3234203d3e203138303034.roa
File:                     3131352e3137382e3136302e302f31392d3234203d3e203138303034.roa (raw, json)
Hash identifier:          cA/F4dRQqVseyocCpcE2agAw/XVimr3HwwnooMdskYo=
Subject key identifier:   73:CC:AC:8C:E5:47:AC:E2:E8:81:02:05:3F:21:2E:2C:5D:3B:A7:64
Certificate issuer:       /CN=735D87BA86773AC70137CF53116358A1F3B19766
Certificate serial:       6E6C4E2A319C37A07CD00A63EE1F3DE30B83A94E
Authority key identifier: 73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3131352e3137382e3136302e302f31392d3234203d3e203138303034.roa
Signing time:             Sun 04 May 2025 05:00:01 +0000
ROA not before:           Sun 04 May 2025 04:55:01 +0000
ROA not after:            Sun 03 May 2026 05:00:01 +0000
asID:                     18004
IP address blocks:        115.178.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl
                          rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 May 2025 02:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:6c:4e:2a:31:9c:37:a0:7c:d0:0a:63:ee:1f:3d:e3:0b:83:a9:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=735D87BA86773AC70137CF53116358A1F3B19766
        Validity
            Not Before: May  4 04:55:01 2025 GMT
            Not After : May  3 05:00:01 2026 GMT
        Subject: CN=73CCAC8CE547ACE2E88102053F212E2C5D3BA764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:05:cf:a7:e1:58:1e:91:ff:76:e7:33:0e:b9:
                    64:1f:df:33:5c:56:fb:6a:51:87:3b:a6:bb:b5:fe:
                    5a:b0:a3:83:29:d6:4d:4e:86:f5:83:e2:54:ed:a0:
                    54:29:89:b6:57:ad:5d:f1:bb:55:04:e2:6c:27:bb:
                    87:ee:d2:d2:ae:e1:f1:80:6a:b8:37:47:e7:8e:e9:
                    5f:59:a7:e7:6c:c5:2f:73:be:3d:5b:84:10:18:35:
                    6e:fc:b0:5d:02:1b:1d:e3:7f:08:59:39:19:79:1c:
                    d3:11:52:56:43:eb:2d:d6:84:9f:8c:71:d3:3b:b4:
                    6d:cb:05:08:54:2e:95:49:b7:2d:fc:4c:e5:dd:de:
                    2d:de:d8:b5:b1:25:80:b2:57:51:f9:38:09:7e:da:
                    79:06:05:b0:98:84:df:2f:fb:8a:72:2b:28:be:b6:
                    e2:a8:f9:c3:10:58:3a:30:20:de:17:7a:31:ad:6c:
                    25:21:a3:66:86:5c:33:46:ab:30:f8:95:77:77:74:
                    80:6d:c2:c8:c8:76:4c:89:e4:e7:e8:d4:db:13:b1:
                    fb:59:06:88:eb:a1:93:52:2d:bd:df:cc:d0:90:7b:
                    e7:b9:c3:a2:ee:a9:f9:12:3f:58:7f:a2:c6:8a:20:
                    ce:82:09:d2:9f:95:07:fa:b2:d0:f7:61:4f:d5:fd:
                    e8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:CC:AC:8C:E5:47:AC:E2:E8:81:02:05:3F:21:2E:2C:5D:3B:A7:64
            X509v3 Authority Key Identifier:
                keyid:73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3131352e3137382e3136302e302f31392d3234203d3e203138303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.178.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         09:4e:f1:27:3a:07:f5:40:66:8a:e0:ce:4e:04:a4:29:4a:7d:
         cc:51:ae:ed:57:50:cd:a3:8b:7b:9b:be:ec:34:8b:fa:ff:c8:
         cf:60:dd:62:bd:1e:48:85:d7:0b:2c:60:7c:e8:8e:09:34:40:
         b6:74:b9:2b:22:be:6a:15:c3:e0:60:6c:cb:58:3e:23:d1:5e:
         35:34:ef:bd:25:0f:36:80:33:47:06:e4:f9:a2:50:f6:c2:ac:
         85:10:6e:3c:a7:7a:8a:5d:ee:1a:44:43:79:b6:f8:44:e2:cd:
         38:a8:08:c6:21:44:72:ab:02:48:c8:70:68:6f:c5:c7:18:70:
         3b:2f:57:c2:94:70:63:10:b5:19:cf:e8:c6:4f:04:8c:42:51:
         0a:9c:ce:7f:8a:e7:23:c1:e9:7e:cf:73:13:57:29:49:9d:79:
         61:51:09:fc:ef:e3:f0:07:82:db:71:dd:4a:94:0a:a3:d2:23:
         6b:0e:aa:ea:e3:05:3b:7c:5c:1f:cc:df:07:7f:02:73:26:c9:
         12:a0:24:ca:2a:71:92:f0:de:88:5c:88:bb:70:09:b7:d4:d4:
         af:9c:a6:74:ea:9f:75:3e:20:22:d9:2a:27:cb:1e:c9:c2:43:
         56:47:12:c7:83:88:e2:4f:03:51:e0:61:c4:31:8e:9b:ce:0d:
         ce:db:36:38
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUbmxOKjGcN6B80Apj7h894wuDqU4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzM1RDg3QkE4Njc3M0FDNzAxMzdDRjUzMTE2MzU4QTFG
M0IxOTc2NjAeFw0yNTA1MDQwNDU1MDFaFw0yNjA1MDMwNTAwMDFaMDMxMTAvBgNV
BAMTKDczQ0NBQzhDRTU0N0FDRTJFODgxMDIwNTNGMjEyRTJDNUQzQkE3NjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlBc+n4Vgekf925zMOuWQf3zNc
VvtqUYc7pru1/lqwo4Mp1k1OhvWD4lTtoFQpibZXrV3xu1UE4mwnu4fu0tKu4fGA
arg3R+eO6V9Zp+dsxS9zvj1bhBAYNW78sF0CGx3jfwhZORl5HNMRUlZD6y3WhJ+M
cdM7tG3LBQhULpVJty38TOXd3i3e2LWxJYCyV1H5OAl+2nkGBbCYhN8v+4pyKyi+
tuKo+cMQWDowIN4XejGtbCUho2aGXDNGqzD4lXd3dIBtwsjIdkyJ5Ofo1NsTsftZ
BojroZNSLb3fzNCQe+e5w6LuqfkSP1h/osaKIM6CCdKflQf6stD3YU/V/egjAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUc8ysjOVHrOLogQIFPyEuLF07p2QwHwYDVR0j
BBgwFoAUc12HuoZ3OscBN89TEWNYofOxl2YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
ZjVkMzY0YS1kYTBiLTQ1NDAtOTM0OS01OTMwYmQ3MjVjZTMvMC83MzVEODdCQTg2
NzczQUM3MDEzN0NGNTMxMTYzNThBMUYzQjE5NzY2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzM1RDg3QkE4Njc3M0FDNzAxMzdDRjUzMTE2MzU4QTFGM0Ix
OTc2Ni5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRmNWQzNjRhLWRhMGItNDU0MC05
MzQ5LTU5MzBiZDcyNWNlMy8wLzMxMzEzNTJlMzEzNzM4MmUzMTM2MzAyZTMwMmYz
MTM5MmQzMjM0MjAzZDNlMjAzMTM4MzAzMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFc7KgMA0GCSqG
SIb3DQEBCwUAA4IBAQAJTvEnOgf1QGaK4M5OBKQpSn3MUa7tV1DNo4t7m77sNIv6
/8jPYN1ivR5IhdcLLGB86I4JNEC2dLkrIr5qFcPgYGzLWD4j0V41NO+9JQ82gDNH
BuT5olD2wqyFEG48p3qKXe4aREN5tvhE4s04qAjGIURyqwJIyHBob8XHGHA7L1fC
lHBjELUZz+jGTwSMQlEKnM5/iucjwel+z3MTVylJnXlhUQn87+PwB4Lbcd1KlAqj
0iNrDqrq4wU7fFwfzN8HfwJzJskSoCTKKnGS8N6IXIi7cAm31NSvnKZ06p91PiAi
2Sonyx7JwkNWRxLHg4jiTwNR4GHEMY6bzg3O2zY4
-----END CERTIFICATE-----
Generated at Sun May 11 15:12:10 2025 by rpki-client