Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f32332d3233203d3e203234353235.roa
File:                     3131342e3139392e39362e302f32332d3233203d3e203234353235.roa (raw, json)
Hash identifier:          m/airGlxp140rC6UGU+rovd1Xbhstz+kltGugf5Z2Hw=
Subject key identifier:   0E:9D:B2:DF:AC:F7:6F:3C:4A:55:68:F1:AC:80:AE:7D:76:0C:23:36
Certificate issuer:       /CN=ADCB9F9DF56E90B39B5344118194104F46A83702
Certificate serial:       100EC062AE5636325878761702ECAC928035E2DD
Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f32332d3233203d3e203234353235.roa
Signing time:             Tue 22 Apr 2025 08:03:49 +0000
ROA not before:           Tue 22 Apr 2025 07:58:49 +0000
ROA not after:            Tue 21 Apr 2026 08:03:49 +0000
asID:                     24525
IP address blocks:        114.199.96.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl
                          rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 17:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:0e:c0:62:ae:56:36:32:58:78:76:17:02:ec:ac:92:80:35:e2:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702
        Validity
            Not Before: Apr 22 07:58:49 2025 GMT
            Not After : Apr 21 08:03:49 2026 GMT
        Subject: CN=0E9DB2DFACF76F3C4A5568F1AC80AE7D760C2336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:25:35:ca:e8:4f:4c:ea:fc:83:c1:27:68:49:
                    20:af:85:26:4f:44:d8:dc:57:c8:e8:4b:4a:f2:b8:
                    88:d0:a4:0f:06:f1:8f:15:bc:d8:de:9d:e6:53:b2:
                    e7:73:2f:93:90:8e:1a:fc:cd:ec:1b:c7:bc:e8:67:
                    50:17:55:d7:ca:48:1a:b5:7c:06:61:b4:af:09:b8:
                    82:c0:1e:15:5b:8a:0b:f2:f1:ff:ec:c5:32:72:f7:
                    72:29:bc:4e:25:94:23:98:99:68:07:68:57:99:c1:
                    ba:9b:35:92:12:1e:cf:52:2a:0a:c4:ab:d2:85:69:
                    d5:62:fe:95:4a:d9:e5:43:30:2f:c8:0f:78:9e:da:
                    65:72:9b:d1:54:ed:8f:59:a9:ae:4c:0b:ed:ca:81:
                    f0:b6:14:de:f6:66:b9:fa:64:26:57:d0:a1:90:11:
                    17:2a:f2:5f:3d:b0:9c:c7:70:a1:c9:04:05:40:27:
                    2c:db:bd:ba:b9:ee:1d:cc:b2:d9:56:0a:ef:25:be:
                    b2:65:07:a0:75:e4:01:07:87:c8:24:60:f1:96:53:
                    a9:10:df:1d:50:f0:57:34:8e:a8:72:3e:cd:e8:e4:
                    b5:af:b6:6a:9c:55:48:85:7d:47:61:fd:06:85:6e:
                    3c:c0:4d:00:8f:6d:ac:93:93:64:d7:a4:69:dc:b3:
                    5f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9D:B2:DF:AC:F7:6F:3C:4A:55:68:F1:AC:80:AE:7D:76:0C:23:36
            X509v3 Authority Key Identifier:
                keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f32332d3233203d3e203234353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.199.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:59:85:b8:20:5f:6d:3d:3e:e5:88:ee:f6:a7:58:24:3a:f8:
         8f:f5:d8:b5:a8:12:09:4f:1f:de:a6:e3:fa:a5:c8:46:cf:6c:
         86:e7:0a:1e:1c:98:66:83:83:9b:57:56:00:cf:cd:9c:7e:ab:
         bd:37:24:2b:1e:56:44:74:eb:ce:49:b5:39:07:c7:82:e4:47:
         9c:1f:8a:8c:e6:a5:6f:44:15:d4:9c:6f:b7:d9:fe:0e:22:e2:
         25:54:39:93:fd:46:01:67:b1:ea:85:e8:35:14:23:64:f8:24:
         a0:cb:ad:c3:9b:af:c6:8c:59:85:ad:37:13:39:5b:1c:8c:a6:
         b0:03:48:3a:0d:58:ca:e2:70:83:e2:93:90:1e:ca:c5:62:39:
         1c:ad:6b:1f:68:f1:65:98:a0:62:f6:08:28:b3:cd:2f:7a:f2:
         2a:05:70:ef:c2:1b:52:3c:da:4d:2d:f7:04:25:45:9e:5d:80:
         b2:d2:15:fb:39:9a:c5:72:89:a2:f7:36:51:4a:be:43:5f:0f:
         8a:c1:80:bd:c0:9d:b6:fc:8e:d7:2e:c4:b6:3b:a1:24:54:3d:
         98:27:c2:a5:61:31:03:4e:ec:72:43:ae:7a:8d:37:27:4a:c7:
         f2:a9:ec:41:df:92:73:e3:d1:2b:75:ad:e9:fc:0d:bc:9b:43:
         71:7b:05:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 15:50:15 2025 by rpki-client on console.sobornost.net