Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3230392e302f32342d3234203d3e203338313432.roa
File:                     3231302e35372e3230392e302f32342d3234203d3e203338313432.roa (raw, json)
Hash identifier:          rcQy9K6A496g9N3vwW/BVEMEh81ubo325Yhstno8ULI=
Subject key identifier:   1A:AA:17:14:7C:5F:65:8C:C4:8B:FE:33:E9:F2:A8:96:68:9A:9E:DC
Certificate issuer:       /CN=29A4AE587F980E73A344FD1ED55C47566E609511
Certificate serial:       559DFB2D6EF0631F9743440C41294201B21F2D73
Authority key identifier: 29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3230392e302f32342d3234203d3e203338313432.roa
Signing time:             Mon 22 Sep 2025 14:00:01 +0000
ROA not before:           Mon 22 Sep 2025 13:55:01 +0000
ROA not after:            Mon 21 Sep 2026 14:00:01 +0000
asID:                     38142
IP address blocks:        210.57.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl
                          rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Oct 2025 05:35:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:9d:fb:2d:6e:f0:63:1f:97:43:44:0c:41:29:42:01:b2:1f:2d:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29A4AE587F980E73A344FD1ED55C47566E609511
        Validity
            Not Before: Sep 22 13:55:01 2025 GMT
            Not After : Sep 21 14:00:01 2026 GMT
        Subject: CN=1AAA17147C5F658CC48BFE33E9F2A896689A9EDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e8:70:3a:2b:84:90:cf:04:17:cc:25:b2:e8:
                    e6:c2:bf:9c:80:ed:55:b0:a6:7f:17:38:d2:50:98:
                    9d:5f:21:ae:17:be:34:10:cb:31:24:93:9f:ad:55:
                    43:48:81:83:33:1e:b4:76:2b:27:2c:7b:c6:b0:8f:
                    e4:f3:a1:2b:a4:f4:1e:a2:94:91:07:4b:7e:41:28:
                    fc:a6:21:de:45:6d:41:cf:62:8e:3f:ec:70:af:5f:
                    e6:4b:d5:ed:3d:d7:f0:04:e5:84:16:58:55:f0:60:
                    d8:0d:e3:7c:fd:e7:a1:7a:c6:3d:dc:0f:c9:83:0c:
                    27:bf:57:1b:f8:52:3d:39:6b:5b:86:bf:9b:2f:1b:
                    31:1d:fd:6e:50:d2:a6:8a:98:4d:89:ac:c1:9e:68:
                    2c:0a:df:09:56:9f:d9:89:86:b2:47:df:27:e5:28:
                    d3:2f:07:b7:bd:8e:5c:81:7c:92:2a:f1:06:c0:88:
                    ec:85:7c:44:6c:78:c8:16:a6:2e:c0:a1:47:63:d3:
                    16:6a:57:84:43:8b:f4:31:88:04:4a:b0:d7:79:09:
                    a4:11:39:e9:08:9d:2e:d5:49:27:ab:22:91:be:54:
                    03:09:4d:47:72:33:ca:88:a3:ae:a2:ee:bb:fb:06:
                    e9:70:00:a7:17:e3:de:0f:2e:73:50:1c:43:26:11:
                    39:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AA:17:14:7C:5F:65:8C:C4:8B:FE:33:E9:F2:A8:96:68:9A:9E:DC
            X509v3 Authority Key Identifier:
                keyid:29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3230392e302f32342d3234203d3e203338313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.57.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:f9:bf:38:19:a9:cc:91:cf:9b:02:53:1d:ed:d8:57:ad:21:
         dd:8b:4f:d4:d6:e8:67:d7:4d:75:bd:77:a6:44:d8:36:af:63:
         55:76:8f:9f:ee:bc:a2:e8:a9:56:7f:7b:dd:a6:0f:50:42:e9:
         07:34:51:24:9b:c8:12:60:86:22:3d:97:7f:8e:6a:1d:aa:7f:
         38:67:08:04:c2:2e:68:7b:ab:9a:0c:64:99:13:9d:28:8f:92:
         30:bf:0d:bf:b6:f7:16:81:4e:d1:8c:1c:12:77:2d:00:04:d5:
         6f:4c:61:07:a6:b6:2d:c6:c4:fd:7b:3b:83:36:8a:8e:39:ed:
         77:f9:b8:4b:2a:aa:a9:0e:56:3a:b4:1a:e7:cb:6f:1f:e0:94:
         47:a8:91:bf:d4:fa:b7:f8:a9:63:62:5e:c9:d3:b5:21:88:63:
         c0:58:11:4c:ba:48:3a:d7:0a:69:a0:1b:c9:60:c9:d8:28:d7:
         4e:30:28:70:c4:a7:1c:49:c3:60:24:16:a5:05:e4:89:93:e4:
         80:6d:d8:25:57:b6:15:0d:70:97:7f:7e:98:e7:b5:42:5b:ca:
         1e:85:fe:14:5e:c3:6e:1a:b6:26:07:8b:de:a0:0d:65:0a:01:
         a6:8e:6f:b1:34:8b:3f:f0:31:01:c9:9a:c9:d4:43:f8:11:e6:
         1c:05:c1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:48:25 2025 by rpki-client