Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/3130332e3231372e3231362e302f32342d3234203d3e203234353239.roa
File:                     3130332e3231372e3231362e302f32342d3234203d3e203234353239.roa (raw, json)
Hash identifier:          CSDWBlIV2G6aqdhFlFLDoZ0ooert/+t0AJaoDV04pCg=
Subject key identifier:   36:1C:CA:C3:AA:66:DC:96:21:8E:8E:13:F6:F8:F4:58:50:AB:4B:44
Certificate issuer:       /CN=37DE961707CEC8F63834DCDB8C5A278376D51AC8
Certificate serial:       6EE45B82B19F5389418FFFA005A61DE7FA37AAF2
Authority key identifier: 37:DE:96:17:07:CE:C8:F6:38:34:DC:DB:8C:5A:27:83:76:D5:1A:C8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/3130332e3231372e3231362e302f32342d3234203d3e203234353239.roa
Signing time:             Mon 02 Jun 2025 02:05:01 +0000
ROA not before:           Mon 02 Jun 2025 02:00:01 +0000
ROA not after:            Mon 01 Jun 2026 02:05:01 +0000
asID:                     24529
IP address blocks:        103.217.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl
                          rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 17:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:e4:5b:82:b1:9f:53:89:41:8f:ff:a0:05:a6:1d:e7:fa:37:aa:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37DE961707CEC8F63834DCDB8C5A278376D51AC8
        Validity
            Not Before: Jun  2 02:00:01 2025 GMT
            Not After : Jun  1 02:05:01 2026 GMT
        Subject: CN=361CCAC3AA66DC96218E8E13F6F8F45850AB4B44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fc:7d:b6:a6:23:b8:f6:91:5f:d3:5e:80:6b:
                    0b:00:a6:aa:71:87:c8:41:17:0d:38:23:65:a8:67:
                    41:6d:25:e2:3a:f4:78:c1:79:ff:ca:2c:89:aa:a6:
                    0a:24:f2:84:ea:50:6d:35:ca:c6:f4:c5:a2:73:41:
                    39:3c:d6:09:6f:42:b3:c0:e5:b4:79:b2:41:02:46:
                    d3:bf:ec:c2:a4:bf:6e:d0:a4:4f:1f:2c:76:2f:80:
                    0e:5d:79:21:e5:65:c8:01:14:5c:d6:97:0d:ca:54:
                    3a:0c:50:70:3b:91:c5:ca:89:cc:88:e2:7c:e1:30:
                    84:56:2b:87:d7:35:1c:0e:c9:8a:7b:4f:61:df:0c:
                    6e:53:5d:63:48:10:ac:91:ec:14:5b:e6:d0:29:27:
                    6c:72:2d:b9:2b:56:c4:9a:5e:b4:80:5a:6c:2a:a4:
                    16:70:24:27:cb:3e:67:c6:81:f3:39:e6:05:ef:03:
                    3b:f8:ff:b1:76:10:40:22:6c:a9:78:67:33:fb:1a:
                    c6:4b:d1:c4:ad:d4:dc:86:bd:9c:c6:80:78:cc:9e:
                    3c:d6:2b:d0:b9:df:47:46:e2:7c:fe:df:8e:81:73:
                    14:da:a5:95:97:79:fd:eb:37:f0:ab:3f:87:b7:9e:
                    c9:90:30:1c:20:7e:d2:82:ff:c7:f8:78:f4:49:38:
                    d1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:1C:CA:C3:AA:66:DC:96:21:8E:8E:13:F6:F8:F4:58:50:AB:4B:44
            X509v3 Authority Key Identifier:
                keyid:37:DE:96:17:07:CE:C8:F6:38:34:DC:DB:8C:5A:27:83:76:D5:1A:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/3130332e3231372e3231362e302f32342d3234203d3e203234353239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.217.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:7e:2d:07:c6:44:f2:10:9e:a8:b4:d7:d3:4c:68:b6:be:bd:
         8c:e6:fa:26:6f:94:b9:3e:51:94:03:a2:2f:91:6b:40:ef:de:
         cd:44:eb:e0:50:9d:22:94:01:db:15:54:de:a3:ce:10:68:42:
         05:a0:6f:7f:41:b7:49:c0:e7:ea:8e:5c:e7:6b:dc:36:03:f4:
         e7:91:de:44:fa:cc:8a:8a:ba:6e:17:c1:99:1c:0e:43:2f:88:
         57:5e:4c:7c:f4:43:9d:88:6a:41:5f:b3:f4:af:bf:e9:a1:a8:
         66:a8:fa:22:8f:12:0a:94:3d:a1:e8:76:1a:2f:a8:f2:af:72:
         ce:33:9e:7d:e6:0d:f1:da:9a:24:c0:7a:bd:4c:fa:81:19:3e:
         c4:4d:ff:c7:1d:d8:3a:0f:58:90:35:39:d8:f6:bf:18:a2:5d:
         f3:2c:59:05:e4:e7:e9:cb:f0:3f:69:fb:84:a2:c0:e4:f6:ba:
         51:f7:44:96:73:a2:7c:74:56:79:18:3b:e9:e3:bb:e7:c1:41:
         5c:60:e3:7b:81:af:1f:01:30:58:8b:21:af:7b:1d:91:ac:31:
         d7:80:e9:97:5c:e1:6a:82:64:1b:89:f7:ce:65:34:d8:21:bb:
         cf:a3:d5:4d:64:03:bc:70:df:36:5b:ad:20:d6:80:bf:ed:3d:
         9e:54:dd:31
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUbuRbgrGfU4lBj/+gBaYd5/o3qvIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzdERTk2MTcwN0NFQzhGNjM4MzREQ0RCOEM1QTI3ODM3
NkQ1MUFDODAeFw0yNTA2MDIwMjAwMDFaFw0yNjA2MDEwMjA1MDFaMDMxMTAvBgNV
BAMTKDM2MUNDQUMzQUE2NkRDOTYyMThFOEUxM0Y2RjhGNDU4NTBBQjRCNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr/H22piO49pFf016AawsApqpx
h8hBFw04I2WoZ0FtJeI69HjBef/KLImqpgok8oTqUG01ysb0xaJzQTk81glvQrPA
5bR5skECRtO/7MKkv27QpE8fLHYvgA5deSHlZcgBFFzWlw3KVDoMUHA7kcXKicyI
4nzhMIRWK4fXNRwOyYp7T2HfDG5TXWNIEKyR7BRb5tApJ2xyLbkrVsSaXrSAWmwq
pBZwJCfLPmfGgfM55gXvAzv4/7F2EEAibKl4ZzP7GsZL0cSt1NyGvZzGgHjMnjzW
K9C530dG4nz+346BcxTapZWXef3rN/CrP4e3nsmQMBwgftKC/8f4ePRJONHFAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUNhzKw6pm3JYhjo4T9vj0WFCrS0QwHwYDVR0j
BBgwFoAUN96WFwfOyPY4NNzbjFong3bVGsgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
MjJmNTE1Mi1hMjk1LTQ3YjctYWRkYy1mYmZlZjMyNDdlM2IvMC8zN0RFOTYxNzA3
Q0VDOEY2MzgzNERDREI4QzVBMjc4Mzc2RDUxQUM4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzdERTk2MTcwN0NFQzhGNjM4MzREQ0RCOEM1QTI3ODM3NkQ1
MUFDOC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYyMmY1MTUyLWEyOTUtNDdiNy1h
ZGRjLWZiZmVmMzI0N2UzYi8wLzMxMzAzMzJlMzIzMTM3MmUzMjMxMzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjM0MzUzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ9nYMA0GCSqG
SIb3DQEBCwUAA4IBAQC1fi0HxkTyEJ6otNfTTGi2vr2M5vomb5S5PlGUA6IvkWtA
797NROvgUJ0ilAHbFVTeo84QaEIFoG9/QbdJwOfqjlzna9w2A/Tnkd5E+syKirpu
F8GZHA5DL4hXXkx89EOdiGpBX7P0r7/poahmqPoijxIKlD2h6HYaL6jyr3LOM559
5g3x2pokwHq9TPqBGT7ETf/HHdg6D1iQNTnY9r8Yol3zLFkF5Ofpy/A/afuEosDk
9rpR90SWc6J8dFZ5GDvp47vnwUFcYON7ga8fATBYiyGvex2RrDHXgOmXXOFqgmQb
iffOZTTYIbvPo9VNZAO8cN82W60g1oC/7T2eVN0x
-----END CERTIFICATE-----
Generated at Sat Jun 7 05:49:05 2025 by rpki-client