Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31302e3132312e302f32342d3234203d3e203536323436.roa
File:                     3130332e31302e3132312e302f32342d3234203d3e203536323436.roa (raw, json)
Hash identifier:          vnVY7O+DRFgVsHEDDIU4P0hJFFHkUSwg9++pryPCSjQ=
Subject key identifier:   62:7F:2D:F2:53:29:AC:39:9A:6A:CC:F7:9C:65:94:4F:E9:12:BC:39
Certificate issuer:       /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6
Certificate serial:       2AAE3C5AA808BCEB18BD60A3569D621619106A50
Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31302e3132312e302f32342d3234203d3e203536323436.roa
Signing time:             Mon 02 Jun 2025 01:03:08 +0000
ROA not before:           Mon 02 Jun 2025 00:58:08 +0000
ROA not after:            Mon 01 Jun 2026 01:03:08 +0000
asID:                     56246
IP address blocks:        103.10.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl
                          rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 19:45:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:ae:3c:5a:a8:08:bc:eb:18:bd:60:a3:56:9d:62:16:19:10:6a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6
        Validity
            Not Before: Jun  2 00:58:08 2025 GMT
            Not After : Jun  1 01:03:08 2026 GMT
        Subject: CN=627F2DF25329AC399A6ACCF79C65944FE912BC39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:74:8f:07:79:92:58:29:d8:39:e3:32:73:df:
                    0d:95:74:c9:f7:f9:c6:ac:48:6d:a2:8f:ce:f0:03:
                    74:38:f5:4f:a4:0e:74:f7:93:68:6c:a0:5a:82:9c:
                    64:6b:c3:6c:80:29:bc:bf:68:98:bd:8a:3f:81:ef:
                    1f:0e:eb:ed:72:80:06:21:ee:6c:4c:f7:e9:60:9f:
                    21:6a:0f:e2:35:26:7c:47:d1:3b:f8:b7:3f:7f:19:
                    c6:a3:20:37:2a:ba:d8:29:dc:9f:ac:8b:a4:8a:a8:
                    70:e6:de:6a:b7:79:9f:0e:fd:73:eb:6b:ab:d0:f4:
                    ed:f3:6d:7c:27:fe:41:0f:6c:9c:54:43:bb:4d:ee:
                    f9:07:20:9f:a3:14:21:db:f0:1c:45:b6:eb:01:58:
                    61:2e:f2:59:68:c9:52:d4:0e:46:68:bd:4e:90:04:
                    a1:64:4d:e4:8e:14:4e:79:59:74:00:e7:8d:29:d6:
                    d4:71:f3:03:0c:15:5e:28:59:8a:10:fa:d8:59:fc:
                    9f:49:06:a7:80:7b:e9:74:fb:da:ef:c3:a3:81:9e:
                    49:a3:2e:cb:08:b2:cb:1b:11:12:86:2e:55:6d:97:
                    41:6b:4f:cb:b5:de:da:13:95:ee:47:e2:51:89:ab:
                    34:07:46:2a:72:10:4a:52:39:eb:4e:78:f4:0c:b6:
                    53:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:7F:2D:F2:53:29:AC:39:9A:6A:CC:F7:9C:65:94:4F:E9:12:BC:39
            X509v3 Authority Key Identifier:
                keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31302e3132312e302f32342d3234203d3e203536323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:72:7c:5c:a2:4e:00:52:41:e7:87:39:1c:69:47:d2:ea:76:
         56:fc:13:e5:4e:50:bf:a6:cf:b2:6b:56:63:12:14:2d:9a:6c:
         7c:39:96:40:51:8e:50:3a:09:8b:1e:8c:d1:c4:5f:e6:c5:d0:
         9c:0a:d1:f2:03:9c:11:66:1c:21:9e:5f:c7:6f:e9:08:0f:9a:
         81:94:b2:b1:39:7d:12:fb:83:5a:32:69:0b:6b:c7:e2:97:96:
         a9:aa:e9:f6:53:31:f7:f6:80:8a:f9:1b:4e:51:63:45:6c:07:
         95:e6:a5:b4:55:15:03:61:f5:15:6d:77:16:25:f7:a0:39:0b:
         ff:3a:a8:e8:94:5a:f1:0d:aa:41:c4:2c:29:65:ee:a2:5c:b6:
         05:40:41:ce:7a:69:43:70:37:75:fa:fa:52:8e:48:c5:68:ad:
         0e:fe:81:c1:fc:b9:42:f3:9a:e8:e4:73:b5:f0:7e:41:90:41:
         6a:e8:37:6a:79:9f:a0:c4:d7:f8:24:4d:7e:4d:b9:a7:94:f5:
         35:df:ba:20:bd:cd:cc:14:8b:3a:e2:ab:6f:6c:62:70:8d:f0:
         d7:3c:74:dd:53:42:bc:8d:b2:50:25:ab:fc:20:d6:0f:0c:cb:
         6f:4e:c7:57:44:d0:12:b8:17:fc:f1:8a:a0:c7:ae:b1:92:cc:
         10:58:c3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:54:12 2025 by rpki-client