Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3130332e3130372e3235302e302f32342d3234203d3e203338353135.roa
File:                     3130332e3130372e3235302e302f32342d3234203d3e203338353135.roa (raw, json)
Hash identifier:          Cz55zbo2bg8BQ/A4k8o5Tsse3KPVQaX+P2Zyl0kj47o=
Subject key identifier:   6E:05:B6:5F:B6:DD:44:EA:C7:21:03:C2:A6:D1:5C:73:45:12:BC:07
Certificate issuer:       /CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
Certificate serial:       1B1BF04888E93EFD66B48C80D4FFAC374422A747
Authority key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3130332e3130372e3235302e302f32342d3234203d3e203338353135.roa
Signing time:             Mon 02 Jun 2025 01:03:18 +0000
ROA not before:           Mon 02 Jun 2025 00:58:18 +0000
ROA not after:            Mon 01 Jun 2026 01:03:18 +0000
asID:                     38515
IP address blocks:        103.107.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl
                          rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 22:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:1b:f0:48:88:e9:3e:fd:66:b4:8c:80:d4:ff:ac:37:44:22:a7:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
        Validity
            Not Before: Jun  2 00:58:18 2025 GMT
            Not After : Jun  1 01:03:18 2026 GMT
        Subject: CN=6E05B65FB6DD44EAC72103C2A6D15C734512BC07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c9:e5:cf:66:a3:70:a8:f5:6e:5b:73:43:bc:
                    7c:a4:cf:24:e0:e8:54:1d:77:e1:1f:b0:74:94:2d:
                    d2:46:49:ed:1f:c5:3e:78:64:40:cf:7b:60:2d:50:
                    24:5e:98:2d:8e:0b:39:a0:0f:c5:42:00:19:aa:0f:
                    c0:aa:b7:21:cf:09:25:fc:99:3e:72:52:8e:e1:0c:
                    bb:b9:86:14:a3:d7:1c:1f:cd:ef:be:e5:ee:38:65:
                    e0:0e:c3:0c:1d:02:0f:c9:b9:33:d9:6b:19:ef:2f:
                    e1:ba:bd:f3:ac:c1:3c:1f:7a:8e:08:f2:b6:0f:20:
                    97:35:ee:f2:3e:45:4b:0f:e7:f1:3d:3b:ff:f0:c6:
                    fe:f5:18:80:b6:d2:5d:b5:da:fe:ff:ca:31:4c:ac:
                    50:dd:d3:c1:a3:67:df:6a:ce:ac:c1:ee:6a:11:25:
                    f6:2a:fc:94:e3:f7:ad:14:ff:ba:02:92:24:4f:0a:
                    75:5d:18:a6:0e:a3:55:6d:5d:95:2a:b3:0b:d2:42:
                    09:0b:dc:7f:25:0b:7c:4f:78:ce:da:0e:cc:13:19:
                    e7:be:c8:1c:7c:13:f2:32:c0:3b:b2:56:d6:dc:28:
                    a4:ac:2e:7d:e8:94:10:89:be:da:4e:98:3e:4d:b1:
                    25:16:c6:22:f4:66:c2:c2:2c:62:0b:27:71:e1:8f:
                    ac:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:05:B6:5F:B6:DD:44:EA:C7:21:03:C2:A6:D1:5C:73:45:12:BC:07
            X509v3 Authority Key Identifier:
                keyid:93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3130332e3130372e3235302e302f32342d3234203d3e203338353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.107.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:b4:e8:50:c3:e9:37:db:de:37:e8:9c:fb:96:53:32:65:fb:
         11:32:c9:92:dc:1f:2b:ed:49:77:80:a6:32:19:4f:bd:3e:aa:
         8f:54:50:48:2a:48:27:ed:1c:4e:7f:f0:4a:ee:1e:27:68:a8:
         a9:82:47:a1:f8:92:aa:8e:8c:e9:9d:b2:c5:54:8d:d1:f9:f6:
         ab:b6:6d:a3:be:5d:99:f0:64:39:d4:7b:81:15:98:a6:be:fa:
         fb:d0:66:14:80:27:22:c1:8b:0b:0f:98:c0:3c:d2:9c:56:d8:
         76:a2:fc:da:0b:5e:17:75:44:f6:27:94:7a:1e:6a:77:aa:da:
         6f:7b:76:2f:20:a8:78:79:2c:53:64:07:db:72:8b:f7:89:56:
         c6:74:77:d1:5a:98:6a:78:1a:59:00:34:db:45:9c:f8:bc:1f:
         e4:3d:d1:0b:f1:5a:86:b0:97:46:67:e3:cf:ef:5c:47:2c:fa:
         65:81:4c:6f:52:84:27:a9:fd:a5:fa:06:da:00:63:fc:6e:1f:
         03:48:71:e8:44:71:fb:34:0e:cb:a9:e3:47:99:7e:1e:50:87:
         38:28:5f:12:6f:f9:cd:31:91:65:c3:4c:77:44:fa:30:c6:a4:
         6d:6d:f3:4e:f8:94:4b:8c:57:0a:62:a5:49:5a:0d:a2:98:ae:
         b2:44:f7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:04:18 2025 by rpki-client