Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/3130332e3138382e3136392e302f32342d3234203d3e203538383231.roa
File:                     3130332e3138382e3136392e302f32342d3234203d3e203538383231.roa (raw, json)
Hash identifier:          vv/vovF/hb4Z1SuWQuWHcDR4S/nQChh3Okt6YN7Aqwg=
Subject key identifier:   6B:6D:06:83:66:50:9B:DB:C1:93:08:79:51:C6:42:1B:0C:F0:9D:23
Certificate issuer:       /CN=33EF8ED81E12A39E325D47325D8FDA76CC497040
Certificate serial:       029325B9D1D1AD65B9AEF0215D8D806CF2446D11
Authority key identifier: 33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/3130332e3138382e3136392e302f32342d3234203d3e203538383231.roa
Signing time:             Wed 14 May 2025 07:02:25 +0000
ROA not before:           Wed 14 May 2025 06:57:25 +0000
ROA not after:            Wed 13 May 2026 07:02:25 +0000
asID:                     58821
IP address blocks:        103.188.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.crl
                          rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 17:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:93:25:b9:d1:d1:ad:65:b9:ae:f0:21:5d:8d:80:6c:f2:44:6d:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33EF8ED81E12A39E325D47325D8FDA76CC497040
        Validity
            Not Before: May 14 06:57:25 2025 GMT
            Not After : May 13 07:02:25 2026 GMT
        Subject: CN=6B6D068366509BDBC193087951C6421B0CF09D23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:be:8e:e8:b0:a5:8f:9d:dc:93:5c:5d:d0:6f:
                    5c:e9:f4:f8:47:7f:37:e1:63:bd:a8:7e:e8:9e:01:
                    5a:be:7d:1e:0e:b6:3b:90:26:e1:ad:d6:64:fd:cf:
                    bf:a7:18:b9:16:4d:2c:b7:ca:c0:2e:37:db:89:32:
                    41:5b:1a:da:63:94:4f:ef:40:99:d2:a0:f1:b0:e0:
                    f2:50:47:f9:c5:19:c1:b7:cf:e3:44:93:a1:59:69:
                    11:b8:a5:eb:f9:28:2b:d6:5f:7f:b7:fa:0f:07:0f:
                    67:88:53:d1:06:40:5a:f0:79:21:af:c2:50:07:0a:
                    61:eb:62:1e:30:c9:da:0d:5e:80:45:d9:6f:25:5a:
                    e9:5b:9e:27:ba:f1:78:69:2f:57:21:ae:f4:f2:cd:
                    64:07:df:05:23:54:15:0b:28:a8:5f:d6:e0:61:58:
                    6d:4b:f0:f5:82:e4:31:7c:f0:1f:11:9e:9e:ec:ee:
                    bf:50:1a:38:17:54:4d:87:a0:ec:7f:d4:a1:86:1c:
                    31:43:ca:55:5d:31:a9:d1:b6:2a:d3:c5:54:76:65:
                    97:aa:18:46:e8:36:1e:35:54:37:cf:61:fd:26:65:
                    4b:ca:31:67:dc:20:02:fc:96:a0:93:7b:b1:a4:f2:
                    37:1e:4b:0b:22:a1:c5:a6:7c:e2:bb:9e:37:41:bf:
                    d0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:6D:06:83:66:50:9B:DB:C1:93:08:79:51:C6:42:1B:0C:F0:9D:23
            X509v3 Authority Key Identifier:
                keyid:33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/3130332e3138382e3136392e302f32342d3234203d3e203538383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:74:0b:a6:b6:c5:fe:ef:41:d3:fa:09:0b:b8:c5:d2:3b:b4:
         9a:a5:93:14:36:5e:a3:ca:08:cf:c7:36:19:99:92:4d:be:e5:
         b4:97:35:c5:92:52:af:13:60:2a:e4:21:d8:c4:fa:7a:4b:53:
         e9:12:97:58:b5:0b:51:0e:47:32:4a:18:56:c5:cd:88:3b:43:
         84:82:32:4b:f3:d1:f3:c3:9e:04:73:dc:99:dd:d1:5e:51:92:
         57:b3:1e:aa:ac:cd:40:ef:48:16:ca:14:5b:3a:28:95:0d:e2:
         26:69:4a:e4:f6:9b:3a:07:aa:4b:45:19:4d:1c:03:4c:b6:79:
         0b:b5:0b:7c:2e:38:7b:64:df:3b:f3:68:15:33:55:af:81:45:
         bc:66:d6:5a:4e:b9:5a:4a:b9:bf:0b:02:04:49:b2:e3:5c:36:
         66:3a:bf:b8:22:08:c5:9b:76:80:68:20:4c:c8:38:5d:a5:6a:
         d8:37:11:e0:89:87:07:aa:81:c4:84:a8:79:de:57:7b:aa:eb:
         5b:80:61:0e:82:43:f2:35:45:b9:36:b9:d3:99:e0:85:dc:d6:
         24:7c:f8:8d:30:cb:44:4b:5e:2c:f0:35:2c:df:2f:56:bb:96:
         f8:b4:41:24:cc:9d:58:db:d6:80:ac:be:d9:f9:87:39:43:9c:
         2d:99:3a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:14:31 2025 by rpki-client