Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/3130332e37312e3235352e302f32342d3234203d3e20313335343731.roa
File:                     3130332e37312e3235352e302f32342d3234203d3e20313335343731.roa (raw, json)
Hash identifier:          gIKkIGkZm7OxQ7k8KYXU1OguRf76El1DoB7NPk29hSo=
Subject key identifier:   96:33:E7:3D:56:17:61:4C:69:68:F9:92:F6:F5:55:BE:9E:E1:0C:3C
Certificate issuer:       /CN=EDBD845A9597FEC4AD90030F9018E4B8B63FCC77
Certificate serial:       7B48C5C080C2690973162A14FE7678000D4C7BDC
Authority key identifier: ED:BD:84:5A:95:97:FE:C4:AD:90:03:0F:90:18:E4:B8:B6:3F:CC:77
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/3130332e37312e3235352e302f32342d3234203d3e20313335343731.roa
Signing time:             Mon 02 Jun 2025 02:01:56 +0000
ROA not before:           Mon 02 Jun 2025 01:56:56 +0000
ROA not after:            Mon 01 Jun 2026 02:01:56 +0000
asID:                     135471
IP address blocks:        103.71.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.crl
                          rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 17:21:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:48:c5:c0:80:c2:69:09:73:16:2a:14:fe:76:78:00:0d:4c:7b:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDBD845A9597FEC4AD90030F9018E4B8B63FCC77
        Validity
            Not Before: Jun  2 01:56:56 2025 GMT
            Not After : Jun  1 02:01:56 2026 GMT
        Subject: CN=9633E73D5617614C6968F992F6F555BE9EE10C3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:49:1d:bf:b0:54:59:2a:05:ac:a8:d5:b6:42:
                    0b:d8:e2:3b:98:d9:0b:91:90:d9:ff:95:a2:d6:71:
                    17:6f:71:97:2f:9d:b4:10:cc:ad:bf:08:fc:76:65:
                    b6:e7:19:eb:67:92:dc:bb:eb:2d:86:44:40:80:19:
                    47:32:ca:f5:29:60:3e:2a:fd:d1:55:75:c6:8c:58:
                    6c:ee:18:8a:2b:c0:e9:1d:69:56:92:99:b4:84:27:
                    ab:c3:a5:ec:b7:20:94:6c:a2:40:c3:fd:0c:47:f7:
                    9d:7e:27:69:80:c4:f4:e5:ab:84:57:ae:0f:09:cd:
                    38:22:73:07:ad:0c:9c:4a:bb:51:f1:6a:b0:7d:c8:
                    f6:59:da:31:7d:e7:39:23:de:f2:b2:c2:eb:8e:8f:
                    c8:8e:ec:ba:60:23:ba:a5:53:78:93:b5:90:93:bd:
                    c8:75:10:86:64:27:06:08:b2:5c:2f:3e:e6:1e:13:
                    11:ec:a3:6f:95:8c:55:30:48:81:a1:8a:2d:a5:91:
                    ec:99:40:4f:98:4e:c4:31:c1:6e:70:fc:74:a5:e8:
                    a6:ad:b2:cb:49:4e:24:32:2f:cc:f0:21:60:b4:a3:
                    53:ce:93:63:9a:48:68:e3:49:88:e7:47:f4:ff:d8:
                    97:58:2b:80:51:fe:0a:dc:3f:e5:0c:6d:87:37:91:
                    26:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:33:E7:3D:56:17:61:4C:69:68:F9:92:F6:F5:55:BE:9E:E1:0C:3C
            X509v3 Authority Key Identifier:
                keyid:ED:BD:84:5A:95:97:FE:C4:AD:90:03:0F:90:18:E4:B8:B6:3F:CC:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/3130332e37312e3235352e302f32342d3234203d3e20313335343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.71.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:0a:40:6b:e1:e5:ce:88:f8:4c:3a:7c:6b:20:32:d2:0d:ee:
         8f:ed:d5:f5:5f:12:f1:3b:7b:0c:1b:b3:6b:df:70:e2:90:c6:
         ac:99:fa:5d:91:ed:91:3d:21:f7:23:b7:2a:b6:3c:71:0c:84:
         05:b1:76:eb:f9:4a:b9:1d:03:a9:1a:83:47:2d:c2:32:90:c6:
         40:9a:b8:85:9a:76:fa:dd:8f:b7:f3:d6:9d:1a:82:72:e9:f9:
         85:93:d2:44:58:59:25:6a:0a:ae:f8:6f:4a:51:79:72:60:4e:
         64:36:fa:22:aa:a2:fd:1a:e3:ea:af:57:24:7a:13:0d:2b:f0:
         36:90:92:67:91:1c:ee:fb:69:7b:6a:80:16:ee:df:66:50:f1:
         45:2b:26:4a:73:dd:66:c3:57:cd:f5:f2:c3:26:65:8c:1d:31:
         87:58:be:07:3d:b3:2c:66:ce:d0:d4:6d:af:78:fc:e1:9f:8d:
         b3:b9:60:03:a6:92:57:88:d7:c6:66:b0:dd:7a:aa:70:71:3a:
         af:2c:38:e3:f2:78:27:14:c5:3d:8f:8a:bd:b2:5e:ec:c8:eb:
         0b:9f:40:ce:72:55:4d:8f:da:42:9e:c0:a0:b0:5d:1f:68:75:
         f8:4d:f7:f6:d1:c3:2c:7c:35:82:97:ec:4b:80:1b:3c:97:ba:
         b3:b4:1e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:05:00 2025 by rpki-client