Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130302e302f32342d3234203d3e203234353235.roa
File:                     3131342e3139392e3130302e302f32342d3234203d3e203234353235.roa (raw, json)
Hash identifier:          9y7esIeX3ACCkHIlgA2/f8P7FP9NMoPvDtJaPKO6U6o=
Subject key identifier:   5F:53:C1:4F:DE:A2:69:FF:06:03:10:65:38:09:2A:01:24:1B:31:6A
Certificate issuer:       /CN=ADCB9F9DF56E90B39B5344118194104F46A83702
Certificate serial:       35C688AABC723ADAEA436E87AC2F4A55119E18BD
Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130302e302f32342d3234203d3e203234353235.roa
Signing time:             Sat 03 May 2025 09:00:04 +0000
ROA not before:           Sat 03 May 2025 08:55:04 +0000
ROA not after:            Sat 02 May 2026 09:00:04 +0000
asID:                     24525
IP address blocks:        114.199.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl
                          rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 May 2025 02:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:c6:88:aa:bc:72:3a:da:ea:43:6e:87:ac:2f:4a:55:11:9e:18:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702
        Validity
            Not Before: May  3 08:55:04 2025 GMT
            Not After : May  2 09:00:04 2026 GMT
        Subject: CN=5F53C14FDEA269FF0603106538092A01241B316A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2a:08:7d:70:34:d1:a5:f8:65:ec:31:07:bd:
                    c1:66:e2:2f:e4:57:3d:5d:4d:63:ec:9f:d7:1d:2a:
                    50:c1:23:f3:34:1b:ce:c6:62:ce:3d:97:52:79:bd:
                    c0:87:d9:d3:03:43:34:a0:0e:bd:bf:7a:9b:f2:d9:
                    0c:de:7d:a0:92:42:f5:76:73:53:d5:97:e8:89:96:
                    d1:1f:87:6a:5c:f9:dc:4c:15:04:e6:ac:37:d9:f5:
                    3b:c3:87:76:c8:84:42:b5:9a:a3:d2:61:da:8f:d8:
                    76:57:83:3d:94:9b:d0:eb:27:01:25:9f:61:9c:0a:
                    72:73:e6:ce:a0:d5:d3:4e:41:f0:60:fb:29:05:86:
                    10:60:05:90:97:96:09:da:bb:93:b3:4c:79:34:34:
                    a8:85:af:84:37:fa:00:61:82:5f:01:64:1f:65:16:
                    95:db:61:8d:f3:fe:cd:19:9b:90:37:20:10:a6:40:
                    15:a4:7b:6e:a2:a1:b8:2c:9c:77:81:b4:5d:38:fc:
                    89:ac:c0:56:c6:66:a6:2d:40:f3:24:38:4b:74:42:
                    d7:61:58:89:a7:21:a7:c0:e2:ec:48:e5:e0:44:da:
                    b5:04:38:e5:a8:85:d8:3e:f1:24:12:57:4c:27:15:
                    d7:96:b5:d1:e5:51:0b:26:da:9b:a0:44:5b:01:c8:
                    25:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:53:C1:4F:DE:A2:69:FF:06:03:10:65:38:09:2A:01:24:1B:31:6A
            X509v3 Authority Key Identifier:
                keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130302e302f32342d3234203d3e203234353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.199.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:4b:32:ae:d4:7f:68:20:5f:78:fd:db:52:a1:66:9c:55:47:
         17:d2:85:0e:bf:fc:9c:f9:b6:ed:28:b3:bc:e4:fb:16:fe:59:
         9b:65:c3:97:11:e5:ac:f1:38:9f:b2:18:7c:a9:e2:03:ff:ec:
         5b:f2:66:b0:ce:0a:2e:06:28:17:a4:c6:72:9e:88:c5:1d:e9:
         8f:20:82:aa:e4:50:57:65:56:b4:88:3f:00:f9:19:77:ec:d0:
         1b:b3:ae:a4:4c:0b:ef:d5:6a:4a:f7:be:c0:e7:2d:f1:0c:83:
         2f:b1:01:c0:dc:53:f6:55:2c:04:b0:db:11:10:52:84:f0:f2:
         83:94:c4:fa:78:c7:b1:94:c1:9f:d7:9d:d8:c0:b5:e1:a2:4f:
         3e:61:01:96:96:99:de:30:86:27:a2:fb:a5:34:f4:d7:f1:aa:
         60:29:6f:1f:ba:34:0a:02:c9:c5:df:de:34:8d:07:50:41:3c:
         43:07:4e:35:2f:4b:3c:5d:36:6c:24:46:75:f3:d6:63:7f:fd:
         97:2b:7c:e4:c8:70:e0:f8:01:40:56:85:3f:b7:54:6f:cd:61:
         30:2e:97:9a:94:4f:03:ae:06:4c:61:64:ab:23:47:6b:d7:35:
         3f:ef:ba:1e:c9:a2:06:39:17:d2:88:be:a8:11:63:ea:f6:7f:
         ad:53:ed:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 07:37:26 2025 by rpki-client