Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/3132332e3137362e3132342e302f32322d3234203d3e20313336313036.roa
File:                     3132332e3137362e3132342e302f32322d3234203d3e20313336313036.roa (raw, json)
Hash identifier:          ZxGkvAEYM1RYxTiE3ehAdXEBI4fdfCMSXuZ6FAjl1Wc=
Subject key identifier:   25:2C:C5:91:BF:DF:A8:63:4E:27:72:4B:98:D9:42:62:4F:E7:E6:A0
Certificate issuer:       /CN=55FE929F3DF18E4B5BC4309769AA6C72AFF634CC
Certificate serial:       246F7B959338C63FA9FCD48FA7D1A2FC0BBB7721
Authority key identifier: 55:FE:92:9F:3D:F1:8E:4B:5B:C4:30:97:69:AA:6C:72:AF:F6:34:CC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/3132332e3137362e3132342e302f32322d3234203d3e20313336313036.roa
Signing time:             Wed 16 Apr 2025 09:02:24 +0000
ROA not before:           Wed 16 Apr 2025 08:57:24 +0000
ROA not after:            Wed 15 Apr 2026 09:02:24 +0000
asID:                     136106
IP address blocks:        123.176.124.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.crl
                          rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:6f:7b:95:93:38:c6:3f:a9:fc:d4:8f:a7:d1:a2:fc:0b:bb:77:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55FE929F3DF18E4B5BC4309769AA6C72AFF634CC
        Validity
            Not Before: Apr 16 08:57:24 2025 GMT
            Not After : Apr 15 09:02:24 2026 GMT
        Subject: CN=252CC591BFDFA8634E27724B98D942624FE7E6A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:10:6a:2b:55:fd:60:64:0c:d8:14:ba:20:45:
                    45:99:b9:a1:c2:13:26:e3:62:b2:4a:66:4f:cb:65:
                    41:e4:95:4e:fd:0c:48:fe:81:d5:0a:5b:ba:7f:a1:
                    5d:c9:44:90:3f:ed:b7:67:1d:0e:9d:7b:d4:ca:2f:
                    72:cc:37:d9:d5:56:92:e1:48:8e:ba:f4:f5:bb:fc:
                    04:eb:a8:c4:ee:b6:0d:05:b3:50:68:c2:c1:4c:f5:
                    bb:17:70:4d:4e:42:0c:39:aa:09:e9:df:df:86:e3:
                    19:5f:92:9a:6f:41:b9:83:cb:78:0b:6e:e2:2a:c1:
                    0a:bc:d3:83:b6:79:c5:b7:e5:4f:35:33:d0:d5:82:
                    75:fc:47:56:de:64:0b:d7:b2:f6:2f:d8:43:29:86:
                    7d:98:38:82:d9:29:69:2d:2a:35:58:69:ab:8f:34:
                    2d:62:0f:ef:e4:28:0a:77:e5:25:89:77:d9:c5:ba:
                    f6:63:dd:b2:23:a6:91:e8:1e:f6:00:db:51:9a:f5:
                    0a:52:1a:8e:eb:20:22:41:48:cf:2b:87:61:79:af:
                    b9:55:d0:76:6e:1a:3d:e8:43:13:b8:3c:cc:19:0a:
                    5c:80:7f:cd:5d:5d:b9:90:ff:9e:8d:5f:2b:b1:9f:
                    04:b5:39:b1:84:b7:52:65:c8:19:f4:15:4b:f0:a4:
                    80:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:2C:C5:91:BF:DF:A8:63:4E:27:72:4B:98:D9:42:62:4F:E7:E6:A0
            X509v3 Authority Key Identifier:
                keyid:55:FE:92:9F:3D:F1:8E:4B:5B:C4:30:97:69:AA:6C:72:AF:F6:34:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/3132332e3137362e3132342e302f32322d3234203d3e20313336313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.176.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:c0:c9:10:3a:1d:f5:2e:ab:9b:75:fd:a8:be:15:33:fc:fa:
         f2:3f:70:cb:3f:41:fe:0c:5c:41:43:91:8c:1f:1e:ea:00:c4:
         2b:5c:74:89:19:21:88:2c:2e:fb:ef:ae:fa:ac:59:ec:79:e3:
         7e:1e:71:d8:c9:6a:db:77:09:95:9d:bc:d4:a2:2a:99:74:97:
         f8:21:9e:e1:91:24:50:43:64:d7:30:4b:ad:8e:86:d8:42:54:
         26:3d:01:3a:50:38:a8:d9:b7:e5:b0:0a:4a:9d:08:2b:f6:bc:
         0d:a5:d5:a2:78:d6:2d:10:05:be:4b:85:31:d2:55:cb:70:38:
         ef:99:9a:57:79:2a:10:76:40:75:55:ff:a1:fd:8c:db:be:f4:
         3f:ec:b9:f7:61:75:7d:80:df:41:93:83:c7:9d:82:cb:8b:4c:
         9a:60:b1:61:95:9a:b7:92:d7:cb:11:4f:aa:3b:59:82:1c:b7:
         4c:00:8b:cc:ff:69:dd:ee:bc:47:0b:ea:b0:21:b7:d2:b4:7b:
         3e:fa:d9:f3:8a:fb:5d:de:be:7a:90:da:35:1b:87:58:a2:ee:
         5d:bd:e8:f6:0d:6a:46:91:2b:5b:3d:64:55:16:d6:9a:1e:65:
         b4:3f:7b:9b:2b:51:9e:75:75:19:cb:4a:70:7b:ac:6b:86:b9:
         d9:6d:26:ea
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUJG97lZM4xj+p/NSPp9Gi/Au7dyEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTVGRTkyOUYzREYxOEU0QjVCQzQzMDk3NjlBQTZDNzJB
RkY2MzRDQzAeFw0yNTA0MTYwODU3MjRaFw0yNjA0MTUwOTAyMjRaMDMxMTAvBgNV
BAMTKDI1MkNDNTkxQkZERkE4NjM0RTI3NzI0Qjk4RDk0MjYyNEZFN0U2QTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwEGorVf1gZAzYFLogRUWZuaHC
EybjYrJKZk/LZUHklU79DEj+gdUKW7p/oV3JRJA/7bdnHQ6de9TKL3LMN9nVVpLh
SI669PW7/ATrqMTutg0Fs1BowsFM9bsXcE1OQgw5qgnp39+G4xlfkppvQbmDy3gL
buIqwQq804O2ecW35U81M9DVgnX8R1beZAvXsvYv2EMphn2YOILZKWktKjVYaauP
NC1iD+/kKAp35SWJd9nFuvZj3bIjppHoHvYA21Ga9QpSGo7rICJBSM8rh2F5r7lV
0HZuGj3oQxO4PMwZClyAf81dXbmQ/56NXyuxnwS1ObGEt1JlyBn0FUvwpIAlAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUJSzFkb/fqGNOJ3JLmNlCYk/n5qAwHwYDVR0j
BBgwFoAUVf6Snz3xjktbxDCXaapscq/2NMwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
Yzk3NmVjNS1iMDVhLTQ4MGYtODZkYS1kNTU3Zjg0YTIzNjQvMC81NUZFOTI5RjNE
RjE4RTRCNUJDNDMwOTc2OUFBNkM3MkFGRjYzNENDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTVGRTkyOUYzREYxOEU0QjVCQzQzMDk3NjlBQTZDNzJBRkY2
MzRDQy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NjOTc2ZWM1LWIwNWEtNDgwZi04
NmRhLWQ1NTdmODRhMjM2NC8wLzMxMzIzMzJlMzEzNzM2MmUzMTMyMzQyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzMTMzMzYzMTMwMzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7sHwwDQYJ
KoZIhvcNAQELBQADggEBAK/AyRA6HfUuq5t1/ai+FTP8+vI/cMs/Qf4MXEFDkYwf
HuoAxCtcdIkZIYgsLvvvrvqsWex5434ecdjJatt3CZWdvNSiKpl0l/ghnuGRJFBD
ZNcwS62OhthCVCY9ATpQOKjZt+WwCkqdCCv2vA2l1aJ41i0QBb5LhTHSVctwOO+Z
mld5KhB2QHVV/6H9jNu+9D/sufdhdX2A30GTg8edgsuLTJpgsWGVmreS18sRT6o7
WYIct0wAi8z/ad3uvEcL6rAht9K0ez762fOK+13evnqQ2jUbh1ii7l296PYNakaR
K1s9ZFUW1poeZbQ/e5srUZ51dRnLSnB7rGuGudltJuo=
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:21:09 2025 by rpki-client on console.sobornost.net