Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/3131332e32302e32382e302f32322d3234203d3e203435373331.roa
File:                     3131332e32302e32382e302f32322d3234203d3e203435373331.roa (raw, json)
Hash identifier:          4OyDyZeEQND65aawqOInlxqrAJlZe0Z4Rsi7/2+kKVI=
Subject key identifier:   A1:A5:C6:73:65:B3:7A:A6:BB:15:11:FB:80:D5:C3:A3:F4:0A:17:80
Certificate issuer:       /CN=8115D30091F8948B76AE0AAC8B4F68550DA321CD
Certificate serial:       61E5D8ADFE4A50D055D594773A01345E474FFAF7
Authority key identifier: 81:15:D3:00:91:F8:94:8B:76:AE:0A:AC:8B:4F:68:55:0D:A3:21:CD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8115D30091F8948B76AE0AAC8B4F68550DA321CD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/3131332e32302e32382e302f32322d3234203d3e203435373331.roa
Signing time:             Mon 14 Jul 2025 09:00:02 +0000
ROA not before:           Mon 14 Jul 2025 08:55:02 +0000
ROA not after:            Mon 13 Jul 2026 09:00:02 +0000
asID:                     45731
IP address blocks:        113.20.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.crl
                          rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8115D30091F8948B76AE0AAC8B4F68550DA321CD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Aug 2025 09:47:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:e5:d8:ad:fe:4a:50:d0:55:d5:94:77:3a:01:34:5e:47:4f:fa:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8115D30091F8948B76AE0AAC8B4F68550DA321CD
        Validity
            Not Before: Jul 14 08:55:02 2025 GMT
            Not After : Jul 13 09:00:02 2026 GMT
        Subject: CN=A1A5C67365B37AA6BB1511FB80D5C3A3F40A1780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3d:18:d2:1a:d5:f8:9a:2c:77:22:af:4d:e2:
                    12:98:88:c6:58:8f:17:ee:40:54:d7:5e:98:f4:24:
                    3d:5c:ca:83:2c:93:b6:78:e5:ac:03:90:30:11:d8:
                    dc:f6:5c:08:89:93:54:f6:c9:20:96:7f:61:60:3a:
                    38:68:5d:2f:4e:27:24:1d:60:00:21:c6:15:2f:ff:
                    11:47:96:8c:ad:5c:26:49:1b:98:65:55:af:20:cb:
                    8b:f4:c4:d3:76:65:50:ba:0d:2b:e8:42:dd:d8:9f:
                    45:6d:2a:4a:6c:7b:3c:f8:c0:df:11:0e:9b:db:7f:
                    db:f1:9d:3a:4d:ed:b9:f4:af:ac:57:8b:d6:23:10:
                    3a:4d:2c:ee:c8:68:5e:7f:30:69:d2:81:42:1b:4b:
                    3e:30:15:23:37:af:9d:1e:57:ec:8b:b7:4c:25:68:
                    33:3b:07:25:55:bb:77:f3:7f:42:0a:36:7b:39:c2:
                    70:75:f9:38:b4:83:be:70:bc:68:8b:b1:f0:a0:e1:
                    a7:a9:14:c9:84:90:1e:50:7d:5b:cd:e0:72:05:4d:
                    ca:de:19:9f:02:23:52:d6:88:0c:0b:6b:b6:54:25:
                    f2:17:6d:9e:83:f0:49:d8:0d:bc:3b:62:f9:59:36:
                    d1:86:e7:a2:ed:f3:4f:68:eb:1f:c6:b6:aa:39:46:
                    56:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A5:C6:73:65:B3:7A:A6:BB:15:11:FB:80:D5:C3:A3:F4:0A:17:80
            X509v3 Authority Key Identifier:
                keyid:81:15:D3:00:91:F8:94:8B:76:AE:0A:AC:8B:4F:68:55:0D:A3:21:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8115D30091F8948B76AE0AAC8B4F68550DA321CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/3131332e32302e32382e302f32322d3234203d3e203435373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.20.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:d8:eb:af:7c:9c:97:b6:db:3a:16:21:c7:70:12:c0:c0:85:
         f7:41:b3:77:a2:5a:ac:ec:71:93:ed:65:6c:96:c8:d0:55:7e:
         86:3e:aa:af:2a:f7:f8:df:ba:71:ef:12:54:f5:d6:94:ae:ad:
         10:d8:94:e3:6d:d8:b7:f8:8b:33:73:f0:9c:1a:16:96:53:3b:
         67:d1:1c:4a:e9:7f:8a:7a:f9:17:5b:61:2c:8a:bc:e2:08:e7:
         f0:fa:ff:71:be:c0:25:66:d5:ca:76:79:fb:4e:6d:9f:b2:86:
         50:db:c9:e3:24:42:e5:73:70:f3:74:6b:1e:0a:1e:56:22:c7:
         9c:0b:0e:63:1f:e7:67:e1:ce:41:2c:ee:75:12:da:2b:1c:01:
         ed:1b:78:7b:74:08:50:3e:fe:71:77:cd:fa:c3:52:59:b0:92:
         af:df:ef:4c:73:1d:53:1c:22:05:f3:85:6a:16:9a:b7:b2:b5:
         f7:3c:97:30:39:7d:1f:db:04:39:06:aa:c2:56:7b:c1:02:8c:
         8c:c0:5c:0b:89:e1:93:ab:65:75:fa:cb:31:a3:6c:a2:f6:7c:
         48:4c:13:e2:61:79:cc:94:30:e4:0b:d3:8d:3e:e3:12:46:6f:
         66:c7:52:1b:c2:0e:41:c3:ab:0c:03:db:c8:27:c3:12:c5:29:
         2a:3f:dc:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:28:35 2025 by rpki-client