Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/3130332e362e3231342e302f32342d3234203d3e20313331313132.roa
File:                     3130332e362e3231342e302f32342d3234203d3e20313331313132.roa (raw, json)
Hash identifier:          F0a3JFzr6TEGFg4XROWEIEBL9cNyd2bfiVU6lzFtCLY=
Subject key identifier:   5D:56:45:FD:45:D3:99:8C:9E:3E:BA:E7:9D:4A:D9:09:2A:76:B0:F9
Certificate issuer:       /CN=EC62A94970E56AC9FE8B828A542B7EDBA3D116D5
Certificate serial:       446B29982BC77C17736A8DF5B803C334BD16B9AF
Authority key identifier: EC:62:A9:49:70:E5:6A:C9:FE:8B:82:8A:54:2B:7E:DB:A3:D1:16:D5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/3130332e362e3231342e302f32342d3234203d3e20313331313132.roa
Signing time:             Mon 02 Jun 2025 02:04:15 +0000
ROA not before:           Mon 02 Jun 2025 01:59:15 +0000
ROA not after:            Mon 01 Jun 2026 02:04:15 +0000
asID:                     131112
IP address blocks:        103.6.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.crl
                          rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 07:09:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:6b:29:98:2b:c7:7c:17:73:6a:8d:f5:b8:03:c3:34:bd:16:b9:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC62A94970E56AC9FE8B828A542B7EDBA3D116D5
        Validity
            Not Before: Jun  2 01:59:15 2025 GMT
            Not After : Jun  1 02:04:15 2026 GMT
        Subject: CN=5D5645FD45D3998C9E3EBAE79D4AD9092A76B0F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c5:21:9b:35:6b:6b:a6:00:0a:a7:5f:92:4b:
                    af:7c:f6:14:3a:7f:dc:88:d1:99:4b:b4:b5:99:22:
                    c5:c5:2d:81:5a:8a:d3:49:06:b4:a3:3e:83:30:11:
                    a6:14:59:05:c3:80:fc:3d:4b:5e:21:66:43:0e:cb:
                    bf:dd:e5:e2:29:10:9d:0c:05:9a:14:e4:b4:07:d9:
                    01:9d:0d:71:c9:86:f8:19:0b:fc:9a:0e:a1:92:97:
                    d2:15:8f:b2:de:18:75:00:0c:6f:99:7a:7a:1a:3f:
                    e1:3f:14:9d:b1:13:ec:be:7f:d7:fa:f0:87:00:be:
                    2f:84:51:6e:68:cd:00:ff:6a:80:ee:ba:31:17:47:
                    99:34:69:fd:b5:e0:2b:3d:36:2c:86:78:8a:e8:88:
                    b1:d6:e3:af:e9:9c:5c:39:46:d9:d8:a0:d6:f4:5e:
                    c5:7d:14:ee:25:0b:8f:a3:38:72:54:67:c2:6a:51:
                    46:5e:08:d6:86:9d:39:f7:e0:b9:36:cc:f8:00:68:
                    e0:77:1a:fd:b6:e2:82:b8:6d:d2:96:e6:31:d6:d0:
                    5d:79:a2:df:61:2e:0a:52:5c:65:bf:4b:fd:24:22:
                    6c:ed:ec:8d:c9:be:d1:4c:f4:4a:e5:39:c2:25:5c:
                    31:a6:0d:a9:8c:85:6c:e4:ea:f1:b7:d5:6c:41:cc:
                    d9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:56:45:FD:45:D3:99:8C:9E:3E:BA:E7:9D:4A:D9:09:2A:76:B0:F9
            X509v3 Authority Key Identifier:
                keyid:EC:62:A9:49:70:E5:6A:C9:FE:8B:82:8A:54:2B:7E:DB:A3:D1:16:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/3130332e362e3231342e302f32342d3234203d3e20313331313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:35:a9:74:1b:f2:47:83:a9:9a:a8:01:40:cc:4d:f1:1a:28:
         e7:6e:06:f0:48:a5:11:f6:15:81:d4:9b:db:c3:ea:09:3f:43:
         c9:c4:11:75:7c:8f:78:fc:62:b5:08:0a:d5:97:1e:3c:99:d8:
         6b:be:f7:42:cd:ff:aa:53:27:49:f8:c0:06:c9:67:43:20:21:
         bc:27:d4:54:8e:14:78:cc:b5:24:63:4f:a1:8e:82:69:74:f7:
         ca:9b:06:8b:4f:94:ba:9f:a2:a2:00:25:02:94:af:bf:a2:0f:
         46:6a:d6:ce:26:d1:24:6a:69:f4:9e:18:95:97:5e:20:6c:06:
         6b:11:f1:5f:c0:0e:c0:fb:f0:f5:4f:e3:88:4b:e6:19:aa:ae:
         73:f1:03:82:87:5f:c4:e9:53:4c:3b:96:86:ce:ae:ab:fb:6b:
         e8:a0:26:1d:4d:6f:98:82:6d:19:86:33:c1:ab:31:52:10:72:
         09:7a:f4:ba:f9:b8:3a:bb:6f:0e:24:c8:6d:77:4e:5f:54:dc:
         8a:d6:54:75:93:5b:b3:c7:9e:1a:96:38:cd:43:e7:35:d8:28:
         7f:7c:16:ca:b3:f5:d2:69:55:e4:16:c2:50:d0:00:f5:12:a6:
         09:7b:73:ad:c1:8d:51:f1:a3:45:48:7a:14:55:f4:5c:2b:57:
         b1:14:94:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:24:39 2025 by rpki-client