Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132342e302f32322d3232203d3e203338353135.roa
File:                     3131372e37342e3132342e302f32322d3232203d3e203338353135.roa (raw, json)
Hash identifier:          OqpoVOVJpUhsB4C42PcVh81+Ms4dKWfSDdEhcsKwE60=
Subject key identifier:   49:69:CE:DB:D0:42:34:57:22:52:AB:A7:6B:6E:BC:3A:2C:60:E1:32
Certificate issuer:       /CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
Certificate serial:       6778C78307B15B7F5489DD19E33C5E05FAE007C7
Authority key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132342e302f32322d3232203d3e203338353135.roa
Signing time:             Tue 06 May 2025 05:02:50 +0000
ROA not before:           Tue 06 May 2025 04:57:50 +0000
ROA not after:            Tue 05 May 2026 05:02:50 +0000
asID:                     38515
IP address blocks:        117.74.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl
                          rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 May 2025 16:44:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:78:c7:83:07:b1:5b:7f:54:89:dd:19:e3:3c:5e:05:fa:e0:07:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
        Validity
            Not Before: May  6 04:57:50 2025 GMT
            Not After : May  5 05:02:50 2026 GMT
        Subject: CN=4969CEDBD04234572252ABA76B6EBC3A2C60E132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c9:3d:68:36:1a:b0:1e:ba:68:1f:03:e4:f1:
                    79:ba:07:67:d9:39:08:c1:8f:0c:77:32:4b:a1:a7:
                    e2:be:fd:d6:f5:b5:3e:7a:83:10:dc:e5:0b:39:b2:
                    1b:ba:0a:82:00:c7:64:e9:13:34:b6:35:92:b0:61:
                    53:d4:e3:b3:4a:69:ff:aa:bd:72:06:f8:b6:f6:30:
                    67:03:0b:02:e3:53:a0:71:c7:3c:6b:b5:36:fa:b1:
                    85:00:98:97:74:33:1a:b0:21:0d:fe:11:9c:34:bd:
                    f3:a3:01:e8:98:e8:eb:01:4c:4d:2e:51:5d:d1:67:
                    fd:a9:30:00:12:17:d8:ee:9c:cc:e1:de:2d:f6:9b:
                    56:3b:98:51:ee:62:8d:ec:64:26:b2:b7:e0:77:77:
                    1c:1a:34:69:89:79:65:f2:f5:3b:86:74:8f:b0:0c:
                    8f:b3:a7:da:e1:c4:f9:e3:fb:74:5c:26:ae:a5:8e:
                    56:ef:b8:7e:ff:60:45:e3:0c:72:1d:5b:bd:b2:62:
                    c1:8b:67:47:f6:64:e0:7a:a3:c6:50:c1:fd:a3:77:
                    92:f7:af:f6:22:60:73:de:fe:81:8f:b7:fc:e4:51:
                    a9:5d:0c:2d:84:4f:2c:84:a8:21:61:8a:f5:12:d6:
                    77:54:d0:3b:85:1d:6b:2b:af:67:a6:d4:48:87:f4:
                    26:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:69:CE:DB:D0:42:34:57:22:52:AB:A7:6B:6E:BC:3A:2C:60:E1:32
            X509v3 Authority Key Identifier:
                keyid:93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132342e302f32322d3232203d3e203338353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.74.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:4f:ff:9a:bb:54:d9:09:ef:6f:c0:a8:7b:bd:ed:17:53:8d:
         73:c2:0a:e8:8d:a2:09:57:4c:b9:b9:c2:ad:ec:b5:82:8f:47:
         da:ed:72:4d:ff:fd:a3:48:38:45:cb:ee:6a:3b:45:4d:c8:2f:
         58:f4:24:3e:70:de:fd:19:b8:f0:d5:bf:e3:8a:fe:2f:11:8a:
         bb:f7:9a:ce:e9:00:ef:e6:86:68:81:4e:fc:69:e0:d4:d8:5a:
         4e:cf:54:3f:f6:ae:22:53:09:8d:04:f1:6a:3c:50:48:c4:8a:
         d9:fc:b2:60:d4:82:40:14:60:b6:d4:e1:3c:ad:78:ff:e3:70:
         dc:eb:cf:8e:21:ef:5f:09:32:c9:3d:cc:96:b0:5f:90:52:28:
         d8:fe:f2:00:40:f3:c4:4b:8b:b3:f9:32:29:84:fe:6d:bf:b8:
         4e:07:74:19:3c:53:c6:7e:d2:4e:37:33:4e:44:5c:8f:42:a8:
         b9:73:3e:84:7f:5b:87:9c:2f:ce:27:63:b6:40:bc:7e:73:11:
         b6:7d:62:03:37:db:bd:3a:2c:40:69:b3:da:7b:46:17:90:29:
         74:70:2b:26:ab:9b:b8:c9:a2:a8:c5:4b:c8:a8:9a:2d:a6:1c:
         53:a0:5d:1a:57:94:d0:0d:9b:d0:ed:9b:8b:3e:e5:65:76:8d:
         2b:68:1e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 14:12:53 2025 by rpki-client