Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3136362e302f32342d3234203d3e203233363731.roa
File:                     3131312e39322e3136362e302f32342d3234203d3e203233363731.roa (raw, json)
Hash identifier:          Oy5e7U/30QVlyKxMTN7vJxNvo6wTwC5oIUWauMMWfdo=
Subject key identifier:   4B:D3:F1:28:FE:74:DC:D8:78:6D:C6:2A:D2:B9:CE:1B:B7:53:E3:FD
Certificate issuer:       /CN=47661DC42A2BCC5BCEEE73AC8ABA71B12188866F
Certificate serial:       61E3A7FCD40B2985A636A31A42EF78CD20D33BF3
Authority key identifier: 47:66:1D:C4:2A:2B:CC:5B:CE:EE:73:AC:8A:BA:71:B1:21:88:86:6F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3136362e302f32342d3234203d3e203233363731.roa
Signing time:             Wed 27 Aug 2025 05:00:01 +0000
ROA not before:           Wed 27 Aug 2025 04:55:01 +0000
ROA not after:            Wed 26 Aug 2026 05:00:01 +0000
asID:                     23671
IP address blocks:        111.92.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.crl
                          rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 11:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:e3:a7:fc:d4:0b:29:85:a6:36:a3:1a:42:ef:78:cd:20:d3:3b:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47661DC42A2BCC5BCEEE73AC8ABA71B12188866F
        Validity
            Not Before: Aug 27 04:55:01 2025 GMT
            Not After : Aug 26 05:00:01 2026 GMT
        Subject: CN=4BD3F128FE74DCD8786DC62AD2B9CE1BB753E3FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:95:02:da:7a:11:14:36:ab:e6:fb:98:7a:f1:
                    25:e2:63:d7:95:62:cc:8d:62:fc:ce:90:73:66:65:
                    12:61:40:93:2f:33:88:25:4a:49:5b:e3:0d:6d:2a:
                    c4:3e:8e:35:6a:1f:13:7f:57:d2:4d:41:80:2c:f1:
                    99:af:51:b1:1c:7a:da:7f:67:8f:e3:fb:18:2b:26:
                    ae:37:8f:b4:a3:55:f2:0c:52:12:e1:ed:ba:b4:02:
                    72:85:f8:d3:1f:42:8d:d0:b1:39:d3:ce:92:d1:07:
                    34:fa:1d:f3:88:b6:5a:de:09:8f:d0:b3:c8:e1:93:
                    20:fc:08:cd:8a:c5:98:27:41:72:1b:9b:19:4d:05:
                    ac:49:0b:4f:38:88:1e:ab:90:f5:23:ce:56:f4:53:
                    f8:62:aa:74:01:17:1c:9b:71:df:0c:8e:10:f6:ec:
                    db:fd:ed:d8:aa:f8:8e:2f:1a:e5:34:7c:37:ef:c8:
                    d9:aa:c0:5d:d9:70:0f:f2:38:cc:19:85:dd:25:7d:
                    21:7e:3c:63:9f:bb:81:ed:62:76:9f:19:2a:84:23:
                    e6:78:50:58:e2:be:91:8d:f9:33:d0:e5:38:31:ce:
                    bb:93:4d:5c:d9:0c:3d:0f:5b:9a:d4:ca:14:da:f2:
                    46:42:bf:29:af:b9:f4:b2:ef:f2:68:91:32:ff:bc:
                    cc:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D3:F1:28:FE:74:DC:D8:78:6D:C6:2A:D2:B9:CE:1B:B7:53:E3:FD
            X509v3 Authority Key Identifier:
                keyid:47:66:1D:C4:2A:2B:CC:5B:CE:EE:73:AC:8A:BA:71:B1:21:88:86:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3136362e302f32342d3234203d3e203233363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.92.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:a1:bf:97:f9:46:a4:ed:e6:9e:bd:c2:2f:48:32:1d:e2:21:
         4e:66:da:0e:7e:c1:cb:3f:66:86:77:a5:c4:08:35:e3:83:f5:
         fc:b0:9e:90:a3:cb:62:cb:cb:7e:84:c1:75:61:d4:1a:45:cc:
         8d:94:73:d9:07:20:38:bb:b6:98:66:41:42:93:26:61:48:6d:
         26:40:1d:dd:f5:27:b3:5e:c0:d5:f2:88:30:29:c1:29:ae:a9:
         6e:76:1c:8c:f5:e5:cc:3a:c7:01:96:e5:b4:9d:d7:46:65:31:
         d3:92:3a:0c:0c:e5:39:d2:60:81:a9:66:2f:89:c4:ef:5d:50:
         71:bb:7c:9f:79:7d:47:cc:2d:32:a8:d9:3e:a6:fe:d7:e8:39:
         43:c0:f6:d6:10:e7:62:c7:b2:4d:9c:1f:ea:8c:09:77:15:40:
         04:13:f8:42:c4:8e:d6:c0:a9:b5:20:28:9b:63:ad:80:19:f7:
         f5:2f:d9:a0:d7:0b:e6:52:59:dc:76:73:12:25:1f:d4:0d:0c:
         55:65:57:ae:c5:44:af:d2:0c:f2:5b:be:0f:36:f9:89:aa:d8:
         1d:90:96:48:5c:35:62:75:ec:66:bd:7e:09:53:fa:46:f2:58:
         d0:8b:39:98:09:6c:21:d9:1b:04:82:4b:e5:f0:c5:37:a0:44:
         87:af:42:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:45:33 2025 by rpki-client