Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130362e302f32332d3233203d3e203234353235.roa
File:                     3131342e3139392e3130362e302f32332d3233203d3e203234353235.roa (raw, json)
Hash identifier:          RzH8mvBWJ3LCJjWOZuYP2ZhpV8wIBBBaLGdEV2NOrOU=
Subject key identifier:   05:2F:42:1C:C4:EE:9B:DB:7B:58:C7:D4:B8:DE:FA:3B:8C:DA:A6:5F
Certificate issuer:       /CN=ADCB9F9DF56E90B39B5344118194104F46A83702
Certificate serial:       34F0EF816C2A3ACEF7AC5A3DC94C438B644B744F
Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130362e302f32332d3233203d3e203234353235.roa
Signing time:             Tue 22 Apr 2025 08:03:47 +0000
ROA not before:           Tue 22 Apr 2025 07:58:47 +0000
ROA not after:            Tue 21 Apr 2026 08:03:47 +0000
asID:                     24525
IP address blocks:        114.199.106.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl
                          rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 17:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:f0:ef:81:6c:2a:3a:ce:f7:ac:5a:3d:c9:4c:43:8b:64:4b:74:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702
        Validity
            Not Before: Apr 22 07:58:47 2025 GMT
            Not After : Apr 21 08:03:47 2026 GMT
        Subject: CN=052F421CC4EE9BDB7B58C7D4B8DEFA3B8CDAA65F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b8:f4:2c:ad:45:70:82:95:d9:2a:70:ad:9b:
                    43:f3:79:4e:7a:f3:15:34:c8:4d:5a:aa:3b:97:35:
                    f6:f6:76:29:d3:98:c7:b5:90:b5:95:81:24:40:d9:
                    bd:73:90:ec:46:92:af:e8:b8:55:47:12:c6:d6:c6:
                    61:56:22:80:1c:3d:3f:5d:33:a1:99:71:f5:8b:44:
                    f6:e5:2c:65:ac:55:a6:23:44:bc:a9:a9:3e:91:99:
                    14:7c:d8:e6:2d:75:f0:b3:51:66:67:91:84:d2:b9:
                    56:aa:9c:a8:0b:9d:05:cc:31:74:e7:76:3a:0a:71:
                    b6:37:c5:d9:43:06:8c:77:36:b7:10:ec:0d:19:df:
                    88:81:22:6c:cc:92:83:69:47:2f:65:ec:50:fa:89:
                    53:99:e9:f9:41:33:fe:46:60:ad:b8:e9:55:be:9f:
                    e2:32:39:fb:c6:70:7d:a4:7e:34:1d:f2:4a:da:5c:
                    0e:23:74:ee:60:fd:b7:b6:cc:d1:80:ce:dc:45:9f:
                    0f:01:a7:a3:da:0f:f6:4b:31:84:04:7b:57:88:cb:
                    1e:17:d2:61:bf:86:e9:7b:8f:f7:1b:9d:f7:35:c4:
                    11:77:69:f7:64:07:0f:61:49:82:5a:94:49:6c:ce:
                    aa:a7:82:20:3b:75:6e:12:40:17:21:64:1b:79:d6:
                    0a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:2F:42:1C:C4:EE:9B:DB:7B:58:C7:D4:B8:DE:FA:3B:8C:DA:A6:5F
            X509v3 Authority Key Identifier:
                keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130362e302f32332d3233203d3e203234353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.199.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:10:8d:37:04:31:b7:56:71:19:88:f1:fb:54:6f:59:ad:08:
         b5:62:50:83:29:ff:06:de:78:8a:d9:bb:af:d8:dd:31:a8:51:
         76:c8:e9:ae:7c:dd:08:84:ae:9f:23:c1:ce:20:00:41:ba:ff:
         f5:c8:70:e3:51:02:9f:14:06:c6:73:ba:66:61:eb:d5:de:c0:
         15:57:aa:58:aa:fb:7d:db:b3:56:40:87:d2:b9:3b:4d:08:2b:
         05:44:50:80:e5:d8:8a:54:15:01:64:e3:4a:d9:90:7e:af:ab:
         5c:60:4d:e5:8e:11:3d:1c:c1:f2:97:62:42:24:04:75:59:03:
         d1:ea:96:68:51:1a:b8:b5:70:b1:17:eb:8c:a6:c4:32:2b:fc:
         17:03:f0:01:b9:2b:be:17:37:a1:26:1e:11:74:55:5b:20:2e:
         74:a7:ef:70:00:02:2d:34:77:8e:75:52:57:b2:88:c9:62:99:
         0f:65:0f:f6:8f:0e:fb:10:0e:e5:7c:9a:df:20:40:56:b8:2f:
         60:26:eb:d7:88:26:d1:40:b2:8c:a5:e8:68:d9:47:b2:a9:97:
         64:e0:8f:f7:f2:38:a7:62:bb:b1:ed:2f:d0:e3:7f:4f:56:47:
         de:42:6d:ad:6e:ca:7d:c6:f4:7f:a0:49:76:9f:3e:12:b3:73:
         79:69:db:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 15:50:15 2025 by rpki-client on console.sobornost.net