Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/3131362e302e302e302f32312d3234203d3e203539313339.roa
File:                     3131362e302e302e302f32312d3234203d3e203539313339.roa (raw, json)
Hash identifier:          tvzxlzO0vwNEL3kdVV0vVfOPTOFF94uCEicPO2IlBZc=
Subject key identifier:   77:99:9D:BC:A6:00:34:A4:99:7B:38:7D:F1:9C:8B:A6:3D:0A:58:3E
Certificate issuer:       /CN=EB7AB53449E52996F1539393C3DA704C6F12F359
Certificate serial:       01A8B83695CCA6686C1D3EB8ADEB22226752A719
Authority key identifier: EB:7A:B5:34:49:E5:29:96:F1:53:93:93:C3:DA:70:4C:6F:12:F3:59
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB7AB53449E52996F1539393C3DA704C6F12F359.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/3131362e302e302e302f32312d3234203d3e203539313339.roa
Signing time:             Thu 01 May 2025 06:01:34 +0000
ROA not before:           Thu 01 May 2025 05:56:34 +0000
ROA not after:            Thu 30 Apr 2026 06:01:34 +0000
asID:                     59139
IP address blocks:        116.0.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.crl
                          rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB7AB53449E52996F1539393C3DA704C6F12F359.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 May 2025 05:27:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a8:b8:36:95:cc:a6:68:6c:1d:3e:b8:ad:eb:22:22:67:52:a7:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB7AB53449E52996F1539393C3DA704C6F12F359
        Validity
            Not Before: May  1 05:56:34 2025 GMT
            Not After : Apr 30 06:01:34 2026 GMT
        Subject: CN=77999DBCA60034A4997B387DF19C8BA63D0A583E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c3:8e:c2:b8:9b:26:ef:12:c9:28:2e:7a:30:
                    1f:b9:d1:16:cc:ba:83:d6:4a:68:f6:c3:d6:e8:a6:
                    f2:75:7a:32:64:18:97:9a:56:d6:cc:1d:aa:2f:ad:
                    e8:04:40:92:d4:6a:1c:f4:20:3f:49:ef:37:2e:37:
                    43:1a:04:49:87:73:95:72:c7:2c:ab:a2:c5:0c:e5:
                    d2:55:54:03:8b:d5:61:c6:9d:75:5d:83:5e:91:5c:
                    c8:6a:25:4f:c3:b5:20:c4:72:cd:db:66:11:c8:51:
                    18:b1:4f:1b:75:09:36:5b:ea:05:5d:43:1d:3e:f5:
                    23:d8:27:a1:c2:4d:58:66:f6:93:5d:73:11:4e:01:
                    f0:a1:b8:4c:40:ba:38:a8:85:dd:1d:ce:dc:8a:b5:
                    68:5e:81:2a:c6:6b:af:12:9b:a0:2d:97:15:fb:bd:
                    5b:3c:fb:56:eb:7b:24:31:fb:01:64:d3:e5:8f:d1:
                    c9:34:0d:cb:d9:71:59:bc:59:42:b6:8e:98:6b:ea:
                    b9:5c:6f:6d:c6:0d:9c:16:f5:41:4f:0a:9e:9c:86:
                    86:15:32:a3:f2:2f:b4:5d:8e:52:b0:ec:37:67:d9:
                    16:89:66:6a:10:74:8f:86:e4:68:03:38:72:d5:df:
                    fb:9c:32:0f:10:d1:07:8c:f6:66:d0:7e:cf:be:59:
                    1e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:99:9D:BC:A6:00:34:A4:99:7B:38:7D:F1:9C:8B:A6:3D:0A:58:3E
            X509v3 Authority Key Identifier:
                keyid:EB:7A:B5:34:49:E5:29:96:F1:53:93:93:C3:DA:70:4C:6F:12:F3:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB7AB53449E52996F1539393C3DA704C6F12F359.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/3131362e302e302e302f32312d3234203d3e203539313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.0.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a3:ae:c3:58:0c:96:cc:7c:f8:74:57:f4:a1:13:3f:72:c8:82:
         1a:23:ac:b5:e6:7f:ee:62:c4:26:33:96:64:ab:3b:06:7e:53:
         e3:94:f5:11:58:8a:99:49:da:de:8d:61:60:7d:6c:fc:9a:c0:
         0d:f9:d2:06:c6:44:dd:3a:69:3b:ca:3b:91:17:db:df:46:de:
         3e:77:f0:5e:1d:81:a1:6e:63:5a:da:19:b2:73:67:cb:69:26:
         6a:cd:f2:d2:a5:f2:0a:7b:94:03:16:c9:da:bb:60:85:d7:3c:
         e7:ec:ea:6a:99:bb:16:ac:b7:51:8b:c4:81:7f:3b:4f:0e:52:
         0d:77:ba:89:40:07:12:b7:14:48:46:7b:59:43:eb:3d:9b:f9:
         db:84:87:3e:47:0c:e6:24:82:a2:03:70:37:98:47:db:68:4e:
         db:7d:3b:b7:04:a0:10:cb:f3:74:b3:a3:38:26:f3:8f:a6:97:
         18:46:44:95:a9:b5:ed:af:18:69:04:b1:7c:49:9c:29:fd:2d:
         01:d0:f2:3f:1c:d4:0c:e5:15:54:d6:39:5a:db:77:b6:b1:1e:
         15:e9:bd:c3:8e:e2:af:7f:9e:28:ba:e6:ee:32:4b:35:c7:c6:
         09:dd:d2:57:bd:3b:9a:19:ec:bb:22:06:1c:20:8d:b7:bd:76:
         df:8b:83:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:19:03 2025 by rpki-client