Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131322e302f32322d3232203d3e203234353235.roa
File:                     3131342e3139392e3131322e302f32322d3232203d3e203234353235.roa (raw, json)
Hash identifier:          MssHkB6gHjAQ5i3fkEQX8LIOOaaD+rrAVmXOCvKPpZM=
Subject key identifier:   86:64:4E:D6:C4:DE:07:A5:2D:CE:2B:CE:15:14:5B:BA:2E:4F:98:55
Certificate issuer:       /CN=ADCB9F9DF56E90B39B5344118194104F46A83702
Certificate serial:       7926EE56A299D46930E037C5D624EA0368B8A6F6
Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131322e302f32322d3232203d3e203234353235.roa
Signing time:             Tue 22 Apr 2025 06:00:01 +0000
ROA not before:           Tue 22 Apr 2025 05:55:01 +0000
ROA not after:            Tue 21 Apr 2026 06:00:01 +0000
asID:                     24525
IP address blocks:        114.199.112.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl
                          rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 17:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:26:ee:56:a2:99:d4:69:30:e0:37:c5:d6:24:ea:03:68:b8:a6:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702
        Validity
            Not Before: Apr 22 05:55:01 2025 GMT
            Not After : Apr 21 06:00:01 2026 GMT
        Subject: CN=86644ED6C4DE07A52DCE2BCE15145BBA2E4F9855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3a:d1:c6:82:e3:66:51:04:b6:bc:6e:9c:77:
                    b0:ee:d7:f7:77:9f:34:56:a2:6e:e8:9c:5f:6c:dd:
                    18:7b:9d:c4:f5:11:74:c4:88:ac:3d:08:a0:71:a0:
                    77:bc:b0:46:f9:c3:0e:85:bf:ba:a2:ea:51:12:f5:
                    c6:8d:06:60:bd:cc:d6:fa:1e:0c:ff:78:05:7b:76:
                    f2:fa:28:47:c5:ac:b0:20:2e:24:a5:e6:81:20:b7:
                    d9:1a:c8:a4:2a:da:73:bb:06:fc:8a:bf:02:7a:4e:
                    26:f7:7e:4d:a9:8f:28:63:70:b1:ba:64:3a:6f:ce:
                    17:16:1e:1c:97:21:d0:1b:fc:f8:98:49:db:18:ea:
                    33:bd:7b:67:7a:e3:a3:24:03:92:78:cb:b2:d9:f3:
                    e0:69:4a:32:17:30:2c:9a:42:f2:88:16:51:e8:6e:
                    5b:00:1c:16:26:b3:94:fc:bd:2d:ba:b0:f4:d8:2e:
                    ea:1a:d1:1c:19:1c:7e:9e:d2:97:5f:f2:2b:a4:35:
                    cd:9c:0b:94:c7:cf:40:45:83:52:16:10:6e:e3:ca:
                    4c:cc:6e:ed:1b:0e:36:86:c6:d8:cf:0c:05:c3:a2:
                    6e:6c:fa:ea:09:8f:d7:0b:c4:a9:ec:19:ab:43:91:
                    19:98:73:2b:c8:e5:5b:ed:c5:3a:58:a2:82:ca:50:
                    9c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:64:4E:D6:C4:DE:07:A5:2D:CE:2B:CE:15:14:5B:BA:2E:4F:98:55
            X509v3 Authority Key Identifier:
                keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131322e302f32322d3232203d3e203234353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.199.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:1a:f8:6c:e6:b4:6b:46:14:38:40:db:ce:8d:fb:7b:41:25:
         63:be:7e:6f:81:88:f6:53:79:c3:ca:d0:df:c5:94:17:87:76:
         10:0f:0e:f5:e2:fc:2c:82:f8:af:68:c7:19:a4:de:64:88:2d:
         08:a2:8e:cb:00:af:30:83:26:8b:29:69:37:26:21:56:57:5d:
         11:73:68:ee:9c:df:53:54:ae:df:43:ce:67:e1:1a:09:67:eb:
         4e:0c:4b:91:01:2f:8a:2b:ab:b6:eb:9b:67:91:a3:b6:ac:00:
         9d:4e:a7:5a:07:b5:46:a2:0b:50:fb:1f:c4:bc:64:67:73:88:
         03:97:44:98:cf:78:5a:5f:4d:ab:cc:9f:b7:d7:44:1d:e9:1a:
         dd:c1:a6:50:50:2c:94:71:eb:10:df:ec:0c:87:83:1b:38:86:
         77:ef:b0:9c:39:c3:ba:ef:7d:4c:0e:68:97:58:48:29:e5:fd:
         d6:2d:b0:03:e8:38:56:12:c9:7c:0b:b0:0e:69:f2:bb:ed:6c:
         b4:d9:ac:db:1e:bd:9a:5d:2e:26:d7:b3:60:16:90:35:d2:fd:
         91:14:d3:01:21:6a:e7:e9:fa:3a:0d:7a:ff:ff:37:1c:a4:88:
         57:30:5e:76:5c:2c:6b:c6:4d:5e:b7:94:71:f6:d1:68:6e:4d:
         91:10:79:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 15:50:15 2025 by rpki-client on console.sobornost.net