Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134372e302f32342d3234203d3e20313430343831.roa
File:                     3131302e37362e3134372e302f32342d3234203d3e20313430343831.roa (raw, json)
Hash identifier:          /Pgqw6Rs+ajT828waAS0R/dEt8fu2pWuzGj9i8zT3Rk=
Subject key identifier:   F9:CF:CB:75:FE:39:CA:6C:46:C4:63:AE:35:58:30:74:F3:DC:68:0C
Certificate issuer:       /CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
Certificate serial:       3EA68267CADCA4AFDAA96FABFAF92312B53DEA8C
Authority key identifier: 0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134372e302f32342d3234203d3e20313430343831.roa
Signing time:             Mon 14 Apr 2025 15:08:26 +0000
ROA not before:           Mon 14 Apr 2025 15:03:26 +0000
ROA not after:            Mon 13 Apr 2026 15:08:26 +0000
asID:                     140481
IP address blocks:        110.76.147.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl
                          rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 16:48:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a6:82:67:ca:dc:a4:af:da:a9:6f:ab:fa:f9:23:12:b5:3d:ea:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
        Validity
            Not Before: Apr 14 15:03:26 2025 GMT
            Not After : Apr 13 15:08:26 2026 GMT
        Subject: CN=F9CFCB75FE39CA6C46C463AE35583074F3DC680C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d6:ed:4c:20:c3:cf:bb:b8:22:3a:42:b1:0f:
                    71:07:89:7b:71:67:e5:f9:2a:7c:ec:a5:6d:99:25:
                    78:75:59:a0:f5:8b:0b:c8:45:28:5b:41:b4:99:d7:
                    8c:dc:bf:8b:19:af:39:f0:88:5d:4f:02:c1:0e:4e:
                    38:c1:11:41:a4:3a:54:e5:6a:ea:cc:0b:9a:ba:01:
                    8f:ec:f3:fd:17:d7:18:ea:5d:a1:99:15:11:4f:c9:
                    2a:bd:f9:38:ec:e5:9a:65:70:e4:74:2f:83:5f:28:
                    50:ea:4c:0b:99:84:41:30:d3:c6:d7:16:df:1d:3f:
                    e4:01:8f:c8:95:e3:11:85:02:e1:68:d0:d9:29:28:
                    61:a2:94:86:08:f6:e4:15:7a:c8:5d:3c:71:f7:dd:
                    d2:2b:4f:ca:ab:23:78:e7:ec:f6:15:1d:b8:a3:8c:
                    d5:35:9d:c9:e0:e7:ba:24:62:84:ee:53:d4:23:a0:
                    2e:52:8d:4c:f7:7c:a7:bc:81:eb:19:b6:b7:27:5d:
                    ff:3d:d9:26:02:c6:6c:db:b2:d9:ff:39:93:b0:04:
                    47:9e:f4:9d:2e:8d:94:4c:8d:d4:09:fc:22:da:94:
                    74:12:78:ed:6a:46:c3:76:3b:16:45:54:5d:d4:c5:
                    a4:5d:a8:ac:37:37:9b:f9:9d:04:c2:aa:4d:8f:cc:
                    18:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:CF:CB:75:FE:39:CA:6C:46:C4:63:AE:35:58:30:74:F3:DC:68:0C
            X509v3 Authority Key Identifier:
                keyid:0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134372e302f32342d3234203d3e20313430343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.76.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:1e:de:86:1b:a2:b9:f4:0e:2d:69:6e:15:01:b7:c3:4e:f1:
         a7:de:be:b3:f5:a0:ad:ee:49:79:34:0b:68:85:67:1a:af:30:
         fb:69:5c:55:57:80:b6:19:dd:c9:cf:5b:c2:ef:eb:be:1c:e6:
         b1:ce:78:ef:35:95:67:df:7c:03:f3:f9:97:b9:17:c0:84:6c:
         80:0a:36:36:cd:db:cc:a8:44:ba:26:39:1c:8a:b6:85:ab:7f:
         32:72:82:5b:ec:e9:e4:8d:1b:68:80:cc:73:6f:2a:c5:05:f8:
         0b:58:d9:87:4e:1a:ab:47:c9:52:00:2c:45:81:4c:0b:12:16:
         d9:d1:d9:4f:c6:d8:85:8e:e3:d3:cb:26:76:34:31:9d:f9:29:
         b6:aa:74:1d:ad:c8:e6:5e:68:40:6c:32:60:41:7f:1f:31:30:
         d6:9b:1c:43:cc:2c:4f:eb:b2:d1:37:38:1d:f5:fd:1a:c8:a8:
         4e:c8:22:82:3e:af:c5:63:f5:2d:56:8b:6c:06:89:db:c7:be:
         cc:b2:31:2d:8b:e6:24:7c:fa:49:ae:f8:f0:61:72:02:c2:96:
         1b:67:7f:57:32:cd:59:80:f1:97:97:ae:04:a4:6b:01:34:9f:
         da:32:a3:de:d5:e1:16:f3:09:ca:67:08:01:da:89:d7:bb:e4:
         ef:f1:d0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:11:51 2025 by rpki-client on console.sobornost.net