Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131382e302f32332d3233203d3e203234353235.roa
File:                     3131342e3139392e3131382e302f32332d3233203d3e203234353235.roa (raw, json)
Hash identifier:          plyebsyNMJiCDl9iVSFri6gYYrwpK7Ue+jNWkp9wDsg=
Subject key identifier:   73:83:3E:9B:B8:CB:82:A8:03:A0:7F:DA:8B:44:A6:AD:55:6C:84:0E
Certificate issuer:       /CN=ADCB9F9DF56E90B39B5344118194104F46A83702
Certificate serial:       4D7AF1E50B45F5B6E59B1AF41B051142D6F210FD
Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131382e302f32332d3233203d3e203234353235.roa
Signing time:             Tue 22 Apr 2025 08:03:49 +0000
ROA not before:           Tue 22 Apr 2025 07:58:49 +0000
ROA not after:            Tue 21 Apr 2026 08:03:49 +0000
asID:                     24525
IP address blocks:        114.199.118.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl
                          rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 17:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:7a:f1:e5:0b:45:f5:b6:e5:9b:1a:f4:1b:05:11:42:d6:f2:10:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702
        Validity
            Not Before: Apr 22 07:58:49 2025 GMT
            Not After : Apr 21 08:03:49 2026 GMT
        Subject: CN=73833E9BB8CB82A803A07FDA8B44A6AD556C840E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:de:aa:87:79:03:5e:46:8f:c2:ba:9b:77:66:
                    f8:3d:f7:be:0d:24:41:9f:ba:34:69:31:da:d9:b5:
                    4c:f0:98:b1:dc:a1:61:07:d8:99:fb:0c:92:07:f1:
                    6f:1c:8f:09:5c:c9:66:40:66:b6:4c:a2:6c:a1:49:
                    df:c8:f6:9f:fb:36:3b:1a:f6:e6:3c:4e:ac:04:24:
                    db:0a:b8:80:71:19:81:ca:e4:da:5d:d3:e3:4d:dc:
                    eb:2b:51:a3:17:08:85:47:cf:90:aa:ad:f5:f0:e7:
                    cd:43:aa:50:29:3a:b1:0c:3f:39:1c:3d:d0:47:af:
                    39:71:df:71:3a:7b:9f:06:e1:35:ac:aa:b0:02:b3:
                    b2:88:31:a8:22:ae:5d:ca:c8:50:7e:77:90:ae:98:
                    0c:00:bb:d2:0b:ba:a9:b4:ec:f9:6e:19:91:e5:fe:
                    0d:f7:a3:da:46:49:e3:00:16:f4:9c:c5:64:9c:38:
                    d1:0c:07:44:f7:66:30:fb:3d:9c:ab:34:50:47:73:
                    8c:f3:a8:94:e4:17:84:b5:55:80:f1:de:fa:e1:88:
                    b0:7a:b6:05:77:6b:e9:70:0d:51:2e:db:a0:e4:18:
                    bf:5b:30:65:7c:ae:d9:ad:0f:f4:c3:47:30:f0:c0:
                    2b:e3:ef:8d:31:ef:7e:42:46:4b:7c:0f:6f:18:5d:
                    1e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:83:3E:9B:B8:CB:82:A8:03:A0:7F:DA:8B:44:A6:AD:55:6C:84:0E
            X509v3 Authority Key Identifier:
                keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131382e302f32332d3233203d3e203234353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.199.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:9d:78:d2:3e:81:77:c5:04:88:f3:47:08:49:48:71:3b:70:
         8f:06:91:61:4c:92:a5:99:e2:b7:cb:9a:4a:81:e1:b5:9d:d4:
         4c:1a:b9:ae:3b:71:83:f9:bc:ec:1c:eb:4f:46:a4:52:b6:e3:
         6f:e2:28:d9:84:ab:a6:f3:50:f1:e9:bd:9b:c6:e6:b0:4e:29:
         8b:9a:6f:18:8d:c4:84:4d:6a:b0:9f:15:4a:61:9c:31:89:7c:
         15:05:ac:74:bc:55:5d:22:db:a4:06:0b:e7:eb:17:4e:f6:7d:
         72:92:b7:cc:26:92:71:6c:5d:52:e1:9b:7b:8d:9c:8d:55:fc:
         b3:67:31:e3:c8:6a:23:6a:f0:08:6f:be:aa:b0:bc:61:8d:4f:
         49:f8:b1:32:e1:07:6f:d0:a5:dd:d8:39:e1:29:b2:29:8e:32:
         69:b7:2a:07:60:b5:f3:67:1d:0c:73:ee:93:3a:e1:8e:af:44:
         be:0f:54:23:5b:48:1b:2e:f1:44:02:0a:0a:23:43:34:7a:d5:
         f4:bf:33:89:fc:77:29:b2:5a:a2:a0:e9:8a:46:e4:99:d1:e3:
         d3:e8:ed:d6:c0:9c:30:11:0d:c9:fa:36:d8:c0:e7:1d:40:fb:
         ba:86:45:e0:f0:c4:40:03:e9:0c:06:48:97:f1:d0:65:c1:d1:
         d1:a7:0b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 15:50:15 2025 by rpki-client on console.sobornost.net