Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132362e302f32332d3233203d3e203234353235.roa
File:                     3131342e3139392e3132362e302f32332d3233203d3e203234353235.roa (raw, json)
Hash identifier:          oNpncVJTfRMAgA5hknpP2oLCpJDn9cv6T/mEbUw2rog=
Subject key identifier:   8C:60:66:1C:7E:8F:9C:2D:58:F1:4F:4E:AA:FC:CE:F6:2E:8F:30:8D
Certificate issuer:       /CN=ADCB9F9DF56E90B39B5344118194104F46A83702
Certificate serial:       69BE1A747A078C069E02080D39451DEE94D1E603
Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132362e302f32332d3233203d3e203234353235.roa
Signing time:             Tue 22 Apr 2025 08:03:48 +0000
ROA not before:           Tue 22 Apr 2025 07:58:48 +0000
ROA not after:            Tue 21 Apr 2026 08:03:48 +0000
asID:                     24525
IP address blocks:        114.199.126.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl
                          rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 17:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:be:1a:74:7a:07:8c:06:9e:02:08:0d:39:45:1d:ee:94:d1:e6:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702
        Validity
            Not Before: Apr 22 07:58:48 2025 GMT
            Not After : Apr 21 08:03:48 2026 GMT
        Subject: CN=8C60661C7E8F9C2D58F14F4EAAFCCEF62E8F308D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ce:e6:6f:25:a7:5b:b2:cc:90:bc:a2:55:ba:
                    5f:7c:a4:4e:93:21:3a:09:1a:9a:c0:0b:79:b8:5c:
                    ef:a3:95:13:55:9a:a0:2b:b0:37:f5:ad:87:b2:8c:
                    c8:74:d6:7c:9a:7c:f5:cc:0b:69:e5:90:cf:e6:05:
                    ad:a4:8a:8d:b0:90:e6:fa:f5:32:3e:5a:01:a4:08:
                    5e:7e:73:63:e5:ef:b1:0e:c5:67:6f:fa:8e:ea:11:
                    7f:38:fa:4c:ad:6a:a6:61:d8:0a:b3:bf:ff:d9:48:
                    8f:cd:81:61:5e:f6:21:dc:85:9e:0f:a7:56:a9:43:
                    20:63:df:e8:37:37:87:37:97:41:d5:13:78:c6:93:
                    33:2a:8c:0b:80:0b:3c:05:70:81:4e:b9:eb:76:13:
                    c1:f1:2d:63:d9:a3:14:73:d3:bb:b4:35:a7:17:4b:
                    43:ed:7d:96:34:4a:02:4e:ad:d1:fc:74:93:42:25:
                    59:b1:91:ce:9b:a1:b8:28:8e:75:af:8d:ce:d7:71:
                    1f:c0:44:95:00:ad:78:e8:15:63:d3:a2:e1:86:7d:
                    03:58:56:af:b9:bf:7e:47:cb:01:e6:e4:6a:43:f7:
                    21:91:a9:fd:71:9e:fb:51:a6:12:b6:eb:08:44:a5:
                    41:ef:69:98:89:06:80:87:78:a4:16:5e:80:2c:15:
                    65:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:60:66:1C:7E:8F:9C:2D:58:F1:4F:4E:AA:FC:CE:F6:2E:8F:30:8D
            X509v3 Authority Key Identifier:
                keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132362e302f32332d3233203d3e203234353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.199.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:22:f4:56:be:c7:3b:5b:ab:b4:ec:56:38:0e:59:49:ec:bb:
         83:d7:db:2d:56:8d:c5:ba:35:96:13:c7:ab:aa:cc:38:b8:fc:
         b6:72:04:5e:58:5c:2a:c2:4e:64:54:83:0d:04:d7:64:c9:bf:
         68:e1:73:f3:31:c9:d8:7e:ae:15:85:ee:be:9c:8a:f2:b2:fa:
         4a:5f:ca:ad:ba:32:56:cf:53:2c:b5:f6:25:e7:c1:ba:b5:65:
         91:ff:4d:99:90:a8:09:d0:b6:5b:ab:54:f3:26:62:c1:2c:40:
         86:65:29:00:2c:ce:4f:e9:09:9d:b3:27:18:18:f9:cc:0e:1f:
         1c:31:99:16:7a:4c:2d:b9:53:03:3c:d8:4f:80:0a:b4:75:09:
         70:fb:7c:bf:8c:64:21:16:8e:38:67:7b:60:00:02:94:e8:fd:
         93:72:40:d5:21:f7:3c:f7:42:c9:e7:81:6b:ac:02:13:5b:81:
         bd:7b:61:95:19:bb:c1:b7:85:2c:4e:9a:2d:81:8b:bd:44:e3:
         dd:ae:3f:92:00:81:61:c6:76:b8:e9:5f:9e:e0:12:7b:55:91:
         72:c4:f0:12:5f:4e:78:af:f8:b4:74:3d:5e:fb:98:72:66:f3:
         81:46:d2:31:a5:90:b2:13:26:04:b0:8f:86:43:d4:cf:ed:37:
         14:8e:fd:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 15:50:15 2025 by rpki-client on console.sobornost.net