Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3130332e32342e37342e302f32342d3234203d3e203436303631.roa
File:                     3130332e32342e37342e302f32342d3234203d3e203436303631.roa (raw, json)
Hash identifier:          p1IlE+POO9hCFBImJs4SWaLDjBIhdLsxh8yaBGtXhAg=
Subject key identifier:   1E:AD:51:70:A4:25:B9:9C:BB:75:9C:FA:AC:84:21:C3:3B:D6:98:C5
Certificate issuer:       /CN=667078BDA093F84040F3016D179CABA67F68A647
Certificate serial:       6F6BC7F2035E6E65DDFBA92BF40B442BDBA42928
Authority key identifier: 66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3130332e32342e37342e302f32342d3234203d3e203436303631.roa
Signing time:             Wed 03 Sep 2025 16:00:02 +0000
ROA not before:           Wed 03 Sep 2025 15:55:02 +0000
ROA not after:            Wed 02 Sep 2026 16:00:02 +0000
asID:                     46061
IP address blocks:        103.24.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl
                          rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Sep 2025 03:34:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:6b:c7:f2:03:5e:6e:65:dd:fb:a9:2b:f4:0b:44:2b:db:a4:29:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=667078BDA093F84040F3016D179CABA67F68A647
        Validity
            Not Before: Sep  3 15:55:02 2025 GMT
            Not After : Sep  2 16:00:02 2026 GMT
        Subject: CN=1EAD5170A425B99CBB759CFAAC8421C33BD698C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:9e:11:e7:08:d6:90:90:06:bf:68:f2:35:54:
                    a7:5e:a9:00:49:52:ff:32:8a:79:98:4a:0c:f0:eb:
                    7e:e8:e9:9a:61:fc:fa:c8:1d:6b:b4:e5:5f:74:a5:
                    3c:8c:07:45:03:14:5b:cb:68:f5:6f:a6:ea:64:d6:
                    c8:e3:88:13:e6:4b:b5:d8:2b:43:97:04:df:15:50:
                    fd:42:31:a7:95:3f:0a:c5:f8:ee:ac:7c:98:76:23:
                    a5:ee:20:f9:bf:64:e9:45:f5:5a:ba:12:e5:b2:aa:
                    b8:05:39:5c:e6:f8:86:80:71:d3:85:de:3d:c7:e6:
                    8c:7f:55:91:ee:79:75:90:39:2a:7c:9d:4b:ee:d0:
                    68:b0:39:16:84:43:15:24:8d:3a:e4:e5:cd:bf:e4:
                    3a:00:8d:ec:cd:62:62:12:49:40:87:18:aa:4a:b4:
                    ac:00:3c:43:f4:8e:c8:4a:7e:14:10:a0:78:6c:9a:
                    ea:a4:cb:4f:2b:92:3d:27:14:f6:a9:09:f5:0c:e4:
                    24:ea:c9:ef:f8:ef:e6:1f:e9:44:7d:68:30:1b:c2:
                    d6:78:96:ed:e5:40:2a:4f:34:71:a5:18:27:6e:65:
                    fe:2f:79:55:7f:20:d3:c0:a3:ce:a2:94:3a:eb:b3:
                    bf:e5:ec:57:58:52:fe:c3:a3:20:70:65:61:c8:53:
                    a4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:AD:51:70:A4:25:B9:9C:BB:75:9C:FA:AC:84:21:C3:3B:D6:98:C5
            X509v3 Authority Key Identifier:
                keyid:66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3130332e32342e37342e302f32342d3234203d3e203436303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:3d:bf:1d:ca:b5:e5:3f:20:9a:85:a9:67:7a:22:e9:46:c3:
         86:d0:cb:ae:64:e1:94:36:91:e3:5e:a9:bd:b9:a7:64:88:f2:
         42:a3:be:3a:6e:de:11:1c:10:d1:e9:d6:ae:b1:41:b8:71:b2:
         e1:22:8b:f2:f6:45:9b:29:83:81:87:5b:51:d6:61:aa:88:00:
         00:48:64:eb:72:cb:7b:a3:f3:e6:87:e4:e4:7c:63:3a:f1:20:
         f0:42:08:af:ba:22:bb:4b:b4:14:f5:af:da:fe:df:d0:ed:5e:
         4f:dd:5d:c3:97:ae:32:16:49:28:47:24:87:23:81:e7:f2:e5:
         6f:61:a8:7c:d6:41:26:62:0b:33:81:61:89:c0:37:33:e6:49:
         7f:e2:39:39:31:ae:9c:f1:71:9e:5e:9b:1e:a4:89:21:0a:cc:
         f3:cc:35:67:90:d1:39:1e:7e:05:38:48:9e:a2:3b:ac:e6:bc:
         12:b7:ce:bd:b5:7f:d0:e0:03:2b:6c:b6:5c:be:c4:8d:04:48:
         e5:e4:ad:2a:4f:77:a6:12:f0:da:9a:d2:e9:10:30:50:70:15:
         0c:86:9f:eb:92:1b:1c:2a:cf:af:ff:5f:19:89:52:39:d0:da:
         71:d7:11:dc:79:d4:34:f0:7b:20:ab:11:eb:19:fc:45:45:d0:
         fc:f6:4f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:14:50 2025 by rpki-client