Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/3130332e3137372e382e302f32332d3233203d3e20313437313337.roa
File:                     3130332e3137372e382e302f32332d3233203d3e20313437313337.roa (raw, json)
Hash identifier:          uHzq3FI/OUse3guEAZ2X3n26c+18IEz5AqEGOSkyu60=
Subject key identifier:   B3:FC:5A:81:FA:FA:8F:C0:5F:CE:CA:B4:2F:7F:6D:B9:D5:D9:11:CB
Certificate issuer:       /CN=9A52B6405ED406A7B17C4478D516DF3E37282980
Certificate serial:       17E6D7D9B1B7D39D62E0E22F1EC118A52220BE04
Authority key identifier: 9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/3130332e3137372e382e302f32332d3233203d3e20313437313337.roa
Signing time:             Sun 18 May 2025 14:00:01 +0000
ROA not before:           Sun 18 May 2025 13:55:01 +0000
ROA not after:            Sun 17 May 2026 14:00:01 +0000
asID:                     147137
IP address blocks:        103.177.8.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl
                          rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 17:48:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:e6:d7:d9:b1:b7:d3:9d:62:e0:e2:2f:1e:c1:18:a5:22:20:be:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A52B6405ED406A7B17C4478D516DF3E37282980
        Validity
            Not Before: May 18 13:55:01 2025 GMT
            Not After : May 17 14:00:01 2026 GMT
        Subject: CN=B3FC5A81FAFA8FC05FCECAB42F7F6DB9D5D911CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e9:b7:3f:4b:fc:9d:ed:bc:85:d0:b7:fb:5f:
                    7a:2c:f5:35:31:a5:ab:60:fd:9d:cc:a1:d3:3a:3b:
                    33:5a:9b:cd:83:a2:b0:8c:a2:38:12:70:cc:eb:86:
                    73:25:3b:28:71:1c:6e:8c:44:ae:e8:75:77:28:1a:
                    cb:c7:94:d9:23:bf:89:22:5c:5b:dd:88:c3:a5:ae:
                    30:89:12:cb:fb:f5:42:aa:72:0f:d3:d7:c9:ac:14:
                    90:e4:86:77:7b:11:9b:32:86:4f:c3:79:85:e1:5a:
                    9b:1f:3a:bf:8a:96:0e:2f:8d:b0:97:3f:d8:54:81:
                    bb:7a:db:ec:29:c1:bd:b2:2b:00:e0:2e:49:14:46:
                    a8:2a:a4:e4:34:85:8d:a1:1c:3f:bc:e0:84:64:7b:
                    6e:aa:11:06:f8:46:35:e9:3c:56:10:28:f9:97:d5:
                    0b:db:16:cc:9f:23:ba:78:bb:f6:46:d5:eb:37:55:
                    fc:c5:e7:41:45:02:98:a9:a4:38:b8:ad:bf:94:3f:
                    09:c1:b4:45:29:c5:10:03:06:3a:3c:48:65:88:05:
                    85:9a:fc:42:88:ba:a0:f8:2f:c7:63:92:e7:e4:cf:
                    f0:03:d3:6e:ca:de:9a:fd:d6:39:86:e7:44:53:15:
                    bb:ea:1f:4c:30:7f:5d:30:da:3a:98:57:89:19:d0:
                    54:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:FC:5A:81:FA:FA:8F:C0:5F:CE:CA:B4:2F:7F:6D:B9:D5:D9:11:CB
            X509v3 Authority Key Identifier:
                keyid:9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/3130332e3137372e382e302f32332d3233203d3e20313437313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:6f:3d:93:8a:b3:33:bf:d0:33:69:5c:47:7f:88:ae:17:6f:
         5e:70:bb:23:31:cf:4e:d0:07:d3:38:f4:30:dc:56:84:12:a4:
         e3:1c:df:44:f6:a0:8f:c2:d7:d2:8a:21:e1:e3:06:1e:a5:f5:
         cf:2f:6f:36:af:a9:eb:ec:c2:c3:53:12:7b:6d:5d:07:20:ab:
         1d:0c:53:f8:81:a8:ba:6a:1c:21:5b:5a:84:bc:d7:af:2c:65:
         be:f1:5b:61:35:61:ea:f0:21:6d:fa:ac:00:24:d9:33:af:a9:
         bf:6b:ce:25:f5:54:e1:54:4c:6a:07:b9:02:46:0f:70:9b:bd:
         07:92:82:f4:68:db:4a:46:27:eb:02:b2:af:da:5d:3b:e4:d1:
         6c:b6:ae:5b:f2:da:28:13:a7:c4:f3:fd:9b:63:8f:32:ef:59:
         98:aa:13:8e:db:ca:65:23:90:9f:fc:ab:cf:e9:9e:2c:d8:fc:
         d7:8b:b5:58:23:15:cb:11:72:1b:31:0b:38:01:eb:a3:2f:0d:
         c7:32:e0:61:0d:68:db:b7:2b:fe:82:69:fd:df:ed:bd:a5:f3:
         6d:22:55:85:a0:cf:14:f2:67:f6:33:24:be:dc:05:bf:eb:b7:
         fb:80:10:0b:93:ad:a4:2d:e8:01:eb:f2:21:d5:45:c4:75:3e:
         98:56:c6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:52:03 2025 by rpki-client