Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/3131352e3138372e33302e302f32342d3234203d3e203538333639.roa
File:                     3131352e3138372e33302e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          veTZsRvM1tQPZT/BfON0VJRneiBr6fgc60m5/I3a2Zc=
Subject key identifier:   3B:78:4B:E1:00:86:A9:2A:05:DD:0E:D8:E4:18:B4:DA:C8:06:B9:12
Certificate issuer:       /CN=46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5
Certificate serial:       448BBAB468A7DD42CE0AAAA21105489BE8119ED6
Authority key identifier: 46:A0:85:9F:8C:7C:C2:C2:E7:D5:CB:C8:E4:36:34:F8:A3:DD:AA:F5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/3131352e3138372e33302e302f32342d3234203d3e203538333639.roa
Signing time:             Tue 23 Sep 2025 09:02:24 +0000
ROA not before:           Tue 23 Sep 2025 08:57:24 +0000
ROA not after:            Tue 22 Sep 2026 09:02:24 +0000
asID:                     58369
IP address blocks:        115.187.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl
                          rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 11:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:8b:ba:b4:68:a7:dd:42:ce:0a:aa:a2:11:05:48:9b:e8:11:9e:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5
        Validity
            Not Before: Sep 23 08:57:24 2025 GMT
            Not After : Sep 22 09:02:24 2026 GMT
        Subject: CN=3B784BE10086A92A05DD0ED8E418B4DAC806B912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:68:68:eb:05:bf:1a:52:a1:a6:c6:42:f6:d7:
                    f1:4a:94:2c:85:15:b6:df:35:b2:ea:f2:68:1e:52:
                    db:58:73:67:cd:2b:8b:06:fb:0a:c3:77:ad:d4:04:
                    be:56:30:31:70:33:c0:69:a1:3f:b9:4c:de:3e:fa:
                    ce:db:9e:c2:98:48:c5:1d:14:67:26:10:c9:59:5c:
                    79:05:26:44:ba:55:b0:20:46:39:84:28:9b:f5:30:
                    a8:b7:6c:cb:4a:f6:2a:d7:52:bd:3e:ed:8f:8c:a3:
                    d8:67:80:df:15:5f:3b:1e:ef:66:88:96:41:9a:d6:
                    fa:4b:a2:a5:7c:73:6e:b2:4e:02:3b:f1:f1:47:b3:
                    dd:84:e2:63:78:3a:23:10:bf:04:a6:34:f8:6d:a0:
                    b7:04:93:f5:7c:18:11:5b:e3:33:e6:05:f2:0c:47:
                    30:79:3e:a3:2e:6f:da:a8:f7:93:24:71:7a:96:61:
                    5e:cc:fa:d7:ee:89:6f:0a:b9:94:6e:e8:97:ff:d9:
                    0f:57:fe:ca:d0:24:e5:fc:8a:8a:59:ff:f1:f3:71:
                    1b:2a:90:c4:64:a1:56:5a:e5:54:e7:25:e7:c4:4b:
                    69:a4:cb:5b:a9:ff:48:c5:3c:68:74:71:96:05:ef:
                    db:95:a5:fd:84:7e:cf:f4:89:5f:fc:ce:76:52:4a:
                    90:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:78:4B:E1:00:86:A9:2A:05:DD:0E:D8:E4:18:B4:DA:C8:06:B9:12
            X509v3 Authority Key Identifier:
                keyid:46:A0:85:9F:8C:7C:C2:C2:E7:D5:CB:C8:E4:36:34:F8:A3:DD:AA:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/3131352e3138372e33302e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.187.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:00:bf:13:45:29:e5:4b:4c:d2:a8:1f:e1:0e:18:0b:47:a8:
         7e:0b:20:ee:95:0e:08:b8:16:bf:2c:7a:27:f1:a4:d5:94:8f:
         19:33:f1:61:61:7e:40:b7:4c:e2:66:0f:b7:7c:13:45:be:a9:
         7e:01:4b:7d:86:e5:0b:ca:92:9a:d0:a2:0a:57:38:f3:20:f2:
         2c:18:96:f4:70:f1:66:7e:ac:b1:3c:5e:03:b7:19:07:91:6b:
         18:d9:18:fc:bc:94:2a:f4:65:3b:ee:21:19:e2:e1:d8:f6:e2:
         68:4a:1e:11:0e:c7:42:21:1f:b0:c9:bd:58:a4:5f:0a:7c:62:
         c4:05:53:7d:30:e5:e6:38:e5:c4:29:82:65:3d:14:d1:83:12:
         3e:e9:69:f0:12:76:c1:e9:ef:8c:3f:5a:d6:07:4e:79:f1:7c:
         d9:36:b5:14:4a:49:dc:76:6f:b9:71:f4:4f:f5:5f:fa:70:32:
         a2:ba:b6:21:ac:d8:02:47:aa:2f:e9:96:58:8c:06:b6:4e:90:
         0d:53:e5:a9:56:72:91:c3:69:3d:fd:12:d6:c0:2d:e9:d6:07:
         e0:21:d4:97:4d:f4:a9:49:2b:d9:dc:39:cb:e7:d1:79:a9:37:
         af:08:6e:8c:4a:fa:d9:c9:54:3e:38:f9:52:e8:93:87:91:15:
         60:1d:64:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:43:59 2025 by rpki-client