Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/3130332e3137392e37322e302f32342d3234203d3e2039333431.roa
File:                     3130332e3137392e37322e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          cvr2rock59oqaJDiE9arMS+Z9L88+lzn8zN5bKyApVs=
Subject key identifier:   B4:EC:E6:8E:76:32:49:73:70:D5:0B:71:02:9A:64:17:AC:CF:F0:5D
Certificate issuer:       /CN=AFEE1C7B016628482294E3D894CFC6851BBB63BE
Certificate serial:       48C75C0AD3A2E645797C20C6C69F4E86B06D095E
Authority key identifier: AF:EE:1C:7B:01:66:28:48:22:94:E3:D8:94:CF:C6:85:1B:BB:63:BE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/3130332e3137392e37322e302f32342d3234203d3e2039333431.roa
Signing time:             Thu 05 Jun 2025 08:00:01 +0000
ROA not before:           Thu 05 Jun 2025 07:55:01 +0000
ROA not after:            Thu 04 Jun 2026 08:00:01 +0000
asID:                     9341
IP address blocks:        103.179.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl
                          rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 10:41:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c7:5c:0a:d3:a2:e6:45:79:7c:20:c6:c6:9f:4e:86:b0:6d:09:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFEE1C7B016628482294E3D894CFC6851BBB63BE
        Validity
            Not Before: Jun  5 07:55:01 2025 GMT
            Not After : Jun  4 08:00:01 2026 GMT
        Subject: CN=B4ECE68E7632497370D50B71029A6417ACCFF05D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:67:28:44:c9:ca:2d:d2:cb:3d:3c:02:28:fd:
                    bb:ab:5e:30:44:b7:4f:c9:91:82:98:f5:f6:72:fa:
                    6c:48:68:f6:6a:b2:10:61:54:5d:b4:e3:b6:2f:7b:
                    97:59:1d:ae:9f:9c:b5:b6:15:5e:c3:6e:a3:30:72:
                    a4:ce:88:14:f6:78:3b:0b:91:d3:14:49:0d:8c:33:
                    6d:a6:8f:f0:be:f2:2a:c4:0e:d0:92:11:5e:01:17:
                    98:b5:e9:8a:44:8e:19:51:ce:52:3e:d2:af:48:6e:
                    1a:c5:2b:bc:ae:3d:96:68:07:4a:16:03:e3:69:9f:
                    41:f8:8c:a2:9f:57:ac:96:31:38:70:c2:75:6e:6b:
                    13:be:2c:13:4c:ba:17:33:4d:71:65:dc:c1:9e:21:
                    61:58:33:f6:0e:c4:79:d9:56:7c:45:a5:44:54:fd:
                    71:59:2f:0f:1f:ac:18:c4:60:3a:b5:0c:9a:8a:dd:
                    99:e5:8c:4c:c9:95:4e:e2:41:8d:9e:67:c9:d1:6b:
                    4b:1d:4b:61:e0:f9:0b:59:3e:be:c8:f7:8f:54:29:
                    ba:01:f6:15:8b:48:f2:f8:93:29:32:4b:61:2a:6b:
                    df:c8:b1:f2:17:2e:32:64:1f:dd:38:2b:90:9c:83:
                    3b:e1:b0:13:86:97:01:dc:d5:a3:96:22:7c:67:4d:
                    e9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:EC:E6:8E:76:32:49:73:70:D5:0B:71:02:9A:64:17:AC:CF:F0:5D
            X509v3 Authority Key Identifier:
                keyid:AF:EE:1C:7B:01:66:28:48:22:94:E3:D8:94:CF:C6:85:1B:BB:63:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/3130332e3137392e37322e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:d9:4a:e2:e5:d8:e6:59:31:7f:e2:d2:78:f5:ab:54:a5:af:
         8a:7d:7b:2e:af:a2:75:4c:b6:0a:d6:1b:34:d1:72:78:26:dd:
         1c:2d:eb:7a:47:44:ff:8e:35:5b:04:fb:53:bc:bf:9c:0e:3a:
         b9:27:a4:5d:01:d9:18:0e:85:e6:94:8d:7e:09:c9:21:44:d7:
         89:24:00:16:84:99:c5:ea:34:97:7b:ef:ed:c9:e7:49:1f:b7:
         2a:d5:08:7e:b7:f0:f1:2a:17:18:4a:cd:8c:6e:8f:71:80:45:
         96:61:58:bb:fd:c4:22:88:5c:91:23:6c:4c:39:87:26:cb:ea:
         c8:87:2f:f9:87:44:47:c6:d3:fd:9e:50:1a:d9:da:99:ca:86:
         65:8a:95:52:d7:58:47:c7:0e:38:52:6e:ea:88:92:6f:62:0a:
         fa:67:4a:b5:28:b5:55:f5:3b:42:19:de:12:a9:9c:a0:d4:67:
         08:5c:4f:59:ee:20:b5:c1:c6:ba:12:75:d8:74:9d:c8:f4:e5:
         d9:03:48:58:0d:56:37:02:48:8c:6c:98:07:a3:69:02:41:00:
         bf:4c:1d:ed:cc:42:f0:76:fb:80:37:49:63:93:8e:a9:cc:44:
         79:7f:57:7d:5e:a5:34:b4:53:e4:39:07:07:81:38:80:db:33:
         a9:06:98:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:15:21 2025 by rpki-client