Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/3132332e3137362e3132312e302f32342d3234203d3e20313336313036.roa
File:                     3132332e3137362e3132312e302f32342d3234203d3e20313336313036.roa (raw, json)
Hash identifier:          r8iJ58dsXOZfFn+sGNtTF7NeubUmolsQCEckXXcjUgw=
Subject key identifier:   25:F6:44:AF:67:23:0B:F7:B5:AA:9A:9A:11:8C:31:12:B6:F0:C1:E1
Certificate issuer:       /CN=55FE929F3DF18E4B5BC4309769AA6C72AFF634CC
Certificate serial:       50CAF24763804A15ABB142E92031434485B5F384
Authority key identifier: 55:FE:92:9F:3D:F1:8E:4B:5B:C4:30:97:69:AA:6C:72:AF:F6:34:CC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/3132332e3137362e3132312e302f32342d3234203d3e20313336313036.roa
Signing time:             Wed 16 Apr 2025 09:02:24 +0000
ROA not before:           Wed 16 Apr 2025 08:57:24 +0000
ROA not after:            Wed 15 Apr 2026 09:02:24 +0000
asID:                     136106
IP address blocks:        123.176.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.crl
                          rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ca:f2:47:63:80:4a:15:ab:b1:42:e9:20:31:43:44:85:b5:f3:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55FE929F3DF18E4B5BC4309769AA6C72AFF634CC
        Validity
            Not Before: Apr 16 08:57:24 2025 GMT
            Not After : Apr 15 09:02:24 2026 GMT
        Subject: CN=25F644AF67230BF7B5AA9A9A118C3112B6F0C1E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:86:d5:e4:c8:c8:60:d7:d7:30:9b:a3:e1:06:
                    73:4d:71:52:2c:e1:8d:cb:fc:17:0c:f1:6b:79:ac:
                    51:45:f3:26:bb:7b:e1:b5:f3:81:1f:28:ff:31:1f:
                    e7:5b:db:29:54:e5:43:98:db:f1:60:98:2e:62:90:
                    e3:d0:bc:eb:72:6d:de:5d:2a:30:f2:cf:11:db:0e:
                    fb:24:a4:13:62:5b:d7:0e:5e:d6:cb:6a:5d:53:dd:
                    3d:7f:a1:ae:c3:ad:6c:b6:e8:a8:96:e3:4d:17:48:
                    ab:0e:ff:26:f7:ff:60:39:36:42:65:2a:02:93:cb:
                    72:95:9d:7f:0f:8f:6e:12:f5:fb:42:3c:18:ac:1c:
                    c8:63:87:cb:80:0d:a4:22:18:d9:d4:93:1e:9e:56:
                    62:92:47:4f:9b:03:d0:55:49:7d:d1:76:e8:66:35:
                    65:d9:bf:71:d8:88:fd:8c:71:28:14:03:d0:c1:84:
                    44:c1:a9:ca:e5:b6:11:c3:3f:36:9a:2b:ec:30:c7:
                    38:1e:07:0e:e6:84:fb:a5:7a:9f:fb:6d:b1:a4:b9:
                    21:5d:e1:1e:00:28:0d:b8:b6:36:c8:6d:7a:bb:6e:
                    d5:6e:c4:b1:05:1b:5e:eb:17:1b:8b:55:e6:5a:24:
                    04:1c:29:3d:e3:86:07:19:81:6a:fb:8a:56:9a:47:
                    8c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F6:44:AF:67:23:0B:F7:B5:AA:9A:9A:11:8C:31:12:B6:F0:C1:E1
            X509v3 Authority Key Identifier:
                keyid:55:FE:92:9F:3D:F1:8E:4B:5B:C4:30:97:69:AA:6C:72:AF:F6:34:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/3132332e3137362e3132312e302f32342d3234203d3e20313336313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.176.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:a8:1b:13:8f:dc:98:1c:bf:e6:0e:76:ea:9c:ba:6e:07:a0:
         ea:bf:ec:c4:66:5e:1a:56:04:63:7c:63:c7:ab:fe:de:ca:b6:
         6b:d7:10:f2:db:5f:3a:9b:63:45:a3:fc:3b:ed:2a:74:8d:6c:
         99:18:74:02:f6:ec:ff:68:93:f2:76:e9:fc:41:4b:31:5c:0d:
         48:30:a5:d8:01:89:a5:9d:c1:a6:bb:41:fa:42:7b:82:6e:8d:
         de:9c:c1:5c:bc:ca:12:5b:c1:8a:48:e7:0c:4d:47:f2:f7:6a:
         0a:ff:92:02:a9:62:40:64:be:b4:3c:ee:19:35:77:8f:03:32:
         10:75:dc:01:37:f4:dd:d3:22:e7:04:c7:c4:9b:fa:53:78:8b:
         49:84:47:86:12:0c:59:70:e8:0d:bc:80:4e:b7:94:5e:d6:18:
         81:7e:5c:0b:be:e4:43:4a:8f:61:5b:f4:59:90:f3:30:e3:8d:
         5a:cc:5b:9a:fa:98:8a:41:78:b2:c3:bc:68:80:2f:ae:2e:58:
         59:a9:46:df:74:9a:8c:5d:01:fa:64:fc:4d:38:19:65:cc:a2:
         b5:92:a5:0b:0a:61:c7:7c:eb:aa:55:61:17:eb:85:f4:c5:4e:
         16:b6:46:af:33:5b:d1:47:52:33:b3:6c:4a:ac:e3:ec:9e:ac:
         e8:48:dd:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:21:09 2025 by rpki-client on console.sobornost.net