Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/3130332e3136362e36342e302f32342d3234203d3e20313431393333.roa
File:                     3130332e3136362e36342e302f32342d3234203d3e20313431393333.roa (raw, json)
Hash identifier:          12jFbdnsYk9rD4iS++1s1WoECdiA7iCZNam2RETSvhY=
Subject key identifier:   33:44:29:97:E4:5B:36:4B:C4:AB:99:13:AC:63:1E:E6:E6:72:48:29
Certificate issuer:       /CN=79FE7055A022B9483725E25688019B44DD3B94A7
Certificate serial:       5DE6666618B8EB5C048F4EBAF697A5043CEA9A71
Authority key identifier: 79:FE:70:55:A0:22:B9:48:37:25:E2:56:88:01:9B:44:DD:3B:94:A7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79FE7055A022B9483725E25688019B44DD3B94A7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/3130332e3136362e36342e302f32342d3234203d3e20313431393333.roa
Signing time:             Thu 27 Feb 2025 03:02:54 +0000
ROA not before:           Thu 27 Feb 2025 02:57:54 +0000
ROA not after:            Thu 26 Feb 2026 03:02:54 +0000
asID:                     141933
IP address blocks:        103.166.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/79FE7055A022B9483725E25688019B44DD3B94A7.crl
                          rsync://repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/79FE7055A022B9483725E25688019B44DD3B94A7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79FE7055A022B9483725E25688019B44DD3B94A7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Apr 2025 06:12:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e6:66:66:18:b8:eb:5c:04:8f:4e:ba:f6:97:a5:04:3c:ea:9a:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79FE7055A022B9483725E25688019B44DD3B94A7
        Validity
            Not Before: Feb 27 02:57:54 2025 GMT
            Not After : Feb 26 03:02:54 2026 GMT
        Subject: CN=33442997E45B364BC4AB9913AC631EE6E6724829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4a:9d:d2:d3:b4:c8:51:14:24:44:83:32:7c:
                    5a:f6:e3:1c:e6:af:f3:43:d3:b1:8a:c1:c7:66:e4:
                    cc:44:41:08:22:8e:b4:f1:91:dd:4c:b4:2c:48:4a:
                    93:b7:61:57:aa:76:d5:22:91:8d:80:60:21:f6:73:
                    f2:1f:6b:8c:94:42:71:17:ae:7a:dd:43:07:4a:8a:
                    5e:47:9c:f9:56:60:70:6e:6c:9c:06:7e:ad:ee:bb:
                    94:6a:7f:db:ac:50:6c:ff:b3:61:49:f1:21:86:6d:
                    71:28:b7:cd:dc:ad:a7:03:12:ca:05:be:cc:a9:10:
                    f9:e0:6e:5e:87:2f:eb:e3:19:06:a7:be:25:29:24:
                    a1:2f:b3:a3:15:41:a9:a4:ab:17:98:4c:c8:e6:b6:
                    a9:45:5a:d3:72:33:b5:e4:c9:25:f4:5f:c1:96:c1:
                    43:20:ee:a8:90:b2:fa:2f:98:61:34:39:c7:f5:7d:
                    be:d2:82:73:80:a6:8c:0f:57:32:c9:fc:71:58:71:
                    01:f7:18:22:5b:86:6f:0b:71:61:cf:5b:6f:f6:37:
                    91:6a:25:a9:a1:9b:a4:2f:bf:df:a5:94:09:cc:34:
                    8f:16:76:ab:3b:70:a0:cf:6b:d2:a4:0c:05:b4:ba:
                    0f:fb:29:5d:c0:76:9a:0d:c9:f0:60:dc:02:97:1e:
                    be:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:44:29:97:E4:5B:36:4B:C4:AB:99:13:AC:63:1E:E6:E6:72:48:29
            X509v3 Authority Key Identifier:
                keyid:79:FE:70:55:A0:22:B9:48:37:25:E2:56:88:01:9B:44:DD:3B:94:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/79FE7055A022B9483725E25688019B44DD3B94A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79FE7055A022B9483725E25688019B44DD3B94A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/3130332e3136362e36342e302f32342d3234203d3e20313431393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:d2:9a:d2:11:4d:b7:fb:60:42:1c:3e:26:87:28:ea:11:10:
         55:3b:87:d3:08:31:1b:7a:17:f4:20:52:ed:a8:af:8f:92:3e:
         c7:e2:82:17:8a:6d:af:a2:b4:b6:ad:a7:e2:b5:86:80:f5:4e:
         71:4e:e1:43:4f:f7:d7:07:66:5d:bf:ea:0a:68:ee:88:eb:7b:
         31:5c:83:19:ea:e6:b8:db:96:4e:be:01:02:04:10:86:66:c5:
         96:5c:61:28:97:d0:05:a3:43:5b:67:fe:8d:1d:fa:78:95:c2:
         3e:35:e9:c5:27:52:32:bb:76:85:25:e6:2d:35:26:0b:86:81:
         51:46:3c:08:94:6e:3c:8d:b2:8b:21:6d:da:81:f5:96:45:78:
         e8:32:f6:c1:cb:34:49:4f:ad:2b:8b:3c:e9:e2:6f:9f:1f:4d:
         1a:f3:62:99:a7:f2:41:62:c3:a7:62:26:26:b7:4e:74:33:37:
         e6:8b:9a:0d:e9:3f:3f:65:fb:81:5c:19:74:68:bd:83:92:73:
         80:b9:39:fd:1a:73:75:42:ea:30:e9:6e:b0:84:c1:7e:3b:3e:
         26:d9:33:31:34:35:da:70:7f:44:a8:d2:73:7f:d1:8a:40:89:
         f5:5d:23:00:8a:a1:f1:44:7f:57:a0:2d:d8:7b:c9:82:ae:1b:
         21:38:58:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:24:22 2025 by rpki-client