Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/3130332e31372e37362e302f32342d3234203d3e20313331373831.roa
File:                     3130332e31372e37362e302f32342d3234203d3e20313331373831.roa (raw, json)
Hash identifier:          rB8zcfhigYxp6rZG5kgxX6r/oJS8xphHw/YAzK8Sodw=
Subject key identifier:   09:30:E9:10:2E:9C:04:6B:7A:06:3F:CD:C4:D6:E3:50:48:88:09:08
Certificate issuer:       /CN=5234A428BC63559E2511B3EFFB085B82B195A8ED
Certificate serial:       069DD317A4F3964E63B640AA6FB289B96D5B365C
Authority key identifier: 52:34:A4:28:BC:63:55:9E:25:11:B3:EF:FB:08:5B:82:B1:95:A8:ED
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/3130332e31372e37362e302f32342d3234203d3e20313331373831.roa
Signing time:             Thu 27 Mar 2025 16:39:46 +0000
ROA not before:           Thu 27 Mar 2025 16:34:46 +0000
ROA not after:            Thu 26 Mar 2026 16:39:46 +0000
asID:                     131781
IP address blocks:        103.17.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.crl
                          rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Apr 2025 16:26:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:9d:d3:17:a4:f3:96:4e:63:b6:40:aa:6f:b2:89:b9:6d:5b:36:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5234A428BC63559E2511B3EFFB085B82B195A8ED
        Validity
            Not Before: Mar 27 16:34:46 2025 GMT
            Not After : Mar 26 16:39:46 2026 GMT
        Subject: CN=0930E9102E9C046B7A063FCDC4D6E35048880908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:53:fc:03:4f:fb:17:a9:3a:57:24:55:96:09:
                    16:8d:9f:6f:c1:03:5a:f6:cd:a8:cc:3b:90:6d:e0:
                    63:19:a4:6b:03:e1:4a:7c:e7:0f:a3:4d:64:27:b4:
                    7c:e3:3e:d8:01:27:23:c5:56:f4:e2:f9:74:b8:17:
                    29:96:51:0c:62:7e:74:58:57:a2:61:02:1b:65:7e:
                    a4:33:0c:99:22:ee:7c:6a:c3:81:86:5c:c5:e6:5b:
                    3d:35:e5:d6:bf:81:e5:aa:c4:61:36:30:a6:33:6c:
                    33:ed:60:07:e5:0f:e3:17:2e:51:bc:5f:69:cf:73:
                    4d:66:0f:c9:dc:e5:3d:43:fe:36:c6:db:0a:dc:99:
                    eb:ae:fa:f3:f4:ce:1c:ef:5c:4d:e3:b3:c2:91:13:
                    53:d5:59:79:7e:81:49:c8:e9:05:f3:89:9e:96:e9:
                    eb:5e:4d:ae:f8:d6:da:91:93:df:a2:1a:4b:07:cb:
                    69:3a:dc:cd:ed:80:cb:e3:20:0e:0b:46:2d:c3:c5:
                    f6:c0:06:98:68:9a:95:40:da:72:99:f2:db:ff:a2:
                    ba:10:ef:24:97:88:32:98:2a:a0:2a:00:26:de:56:
                    96:96:a9:0c:38:b2:65:72:e5:bd:b7:69:58:1d:09:
                    63:18:39:a2:ac:13:bd:2e:95:f9:26:c7:47:e9:e6:
                    fc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:30:E9:10:2E:9C:04:6B:7A:06:3F:CD:C4:D6:E3:50:48:88:09:08
            X509v3 Authority Key Identifier:
                keyid:52:34:A4:28:BC:63:55:9E:25:11:B3:EF:FB:08:5B:82:B1:95:A8:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/3130332e31372e37362e302f32342d3234203d3e20313331373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:76:4b:d8:39:63:2b:98:ba:90:93:bd:ff:3b:e4:ac:f5:d5:
         b4:06:d9:ac:a3:d8:da:f8:9d:af:54:e5:4e:3f:0b:be:60:88:
         34:ed:82:04:e0:f6:2f:4e:9b:70:9e:87:8f:b5:61:ee:58:02:
         47:61:36:72:2d:e2:5f:48:1d:cd:d4:ea:8e:55:3d:c0:7c:e9:
         a1:08:25:db:f8:f4:82:c1:c8:58:8b:3b:41:f0:9d:3f:fb:24:
         0f:03:9b:08:47:9d:b5:85:d2:a4:70:0e:26:30:65:0c:68:90:
         b0:25:74:c4:40:d1:46:19:54:44:56:94:88:74:af:39:6a:25:
         3c:f4:7e:04:29:e9:93:94:67:42:88:ba:c0:75:20:d6:99:a3:
         08:60:e8:5a:6d:3f:44:ac:3a:ad:04:76:99:40:05:d2:01:ff:
         14:16:ab:a0:64:d4:a7:b1:88:e1:d3:ba:a3:c6:f0:1c:6e:4b:
         75:db:e8:2c:0c:f9:2a:fd:9e:9f:67:b2:15:ad:6c:f1:a2:a0:
         5d:2a:8d:5d:5d:e5:26:91:00:0d:77:00:68:18:6d:e2:2f:51:
         af:4d:1d:ef:fd:5e:72:b0:f6:64:50:7f:32:30:c6:16:8a:bf:
         ba:f0:a1:c3:2c:67:09:17:b9:5d:07:7f:c3:8c:7b:48:67:d9:
         9f:e7:92:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:36:42 2025 by rpki-client