Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3130332e3130372e3235312e302f32342d3234203d3e203338353135.roa
File:                     3130332e3130372e3235312e302f32342d3234203d3e203338353135.roa (raw, json)
Hash identifier:          xgt5xEDp+XFwH8hLX8aUiO3xy0s9+XFKXBjJZ88c3KE=
Subject key identifier:   33:A0:D2:CF:8A:80:DC:97:97:9B:90:81:3C:6E:A0:44:32:9D:C2:8A
Certificate issuer:       /CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
Certificate serial:       290969178F5D2BE81F5ECC96E94C1CF052DF7741
Authority key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3130332e3130372e3235312e302f32342d3234203d3e203338353135.roa
Signing time:             Mon 02 Jun 2025 01:03:17 +0000
ROA not before:           Mon 02 Jun 2025 00:58:17 +0000
ROA not after:            Mon 01 Jun 2026 01:03:17 +0000
asID:                     38515
IP address blocks:        103.107.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl
                          rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 22:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:09:69:17:8f:5d:2b:e8:1f:5e:cc:96:e9:4c:1c:f0:52:df:77:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
        Validity
            Not Before: Jun  2 00:58:17 2025 GMT
            Not After : Jun  1 01:03:17 2026 GMT
        Subject: CN=33A0D2CF8A80DC97979B90813C6EA044329DC28A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:39:f7:ea:9c:b0:9c:f5:0c:08:d9:92:d7:5c:
                    09:4e:ad:5b:06:36:81:3d:3a:02:d0:cf:b4:93:87:
                    98:91:08:b3:5b:09:2f:80:f4:45:52:2c:63:cb:f7:
                    83:8d:5e:4d:6b:5d:3d:8f:b9:7a:76:40:ab:a9:87:
                    ab:50:df:27:06:d8:36:bb:23:6b:2b:55:43:89:71:
                    1f:36:54:bf:df:92:bf:23:0f:24:3e:44:e1:04:52:
                    c4:f1:a8:aa:f9:b0:b1:c0:fd:5d:b8:93:79:9d:cc:
                    29:85:f7:20:9a:71:02:bc:54:b0:82:81:fd:65:51:
                    20:05:3a:74:b4:e2:6f:6a:aa:c8:ad:a2:b5:44:e0:
                    42:c7:0a:61:14:4b:d2:2e:8b:c3:4a:6d:08:cc:8c:
                    64:83:03:c0:4f:8b:aa:bd:32:fd:0f:02:b4:36:e2:
                    cc:85:bc:f8:d5:45:05:e5:3e:2b:06:ae:2f:a2:13:
                    d3:46:48:48:8a:5c:38:13:e6:29:8c:68:31:41:02:
                    65:3e:15:72:8d:8d:85:53:b0:01:ed:4c:03:b3:a6:
                    94:56:65:3c:97:bd:8d:17:77:6f:e1:0b:87:16:1d:
                    1d:ef:cd:06:56:d5:1c:c2:0e:6c:3c:98:ef:6c:64:
                    90:30:a1:02:82:67:1b:05:bc:bd:b7:9e:5e:26:94:
                    52:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A0:D2:CF:8A:80:DC:97:97:9B:90:81:3C:6E:A0:44:32:9D:C2:8A
            X509v3 Authority Key Identifier:
                keyid:93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3130332e3130372e3235312e302f32342d3234203d3e203338353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.107.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:d0:13:ba:79:38:25:3b:b1:69:3e:e5:73:83:45:3f:69:79:
         db:4c:4f:2e:ae:31:d1:29:ab:64:20:f1:1b:56:84:f4:3c:5f:
         f9:e9:d9:0c:7a:6a:76:c6:e5:35:b4:9e:f7:df:b0:f0:ed:db:
         79:e2:25:c6:3d:15:f1:99:bf:ef:48:85:4c:72:13:29:97:c9:
         ba:ff:08:14:14:aa:79:2d:37:8c:e4:ec:81:38:f7:58:14:b5:
         09:45:14:9a:8d:f1:d1:36:13:07:00:c1:0f:ea:2b:bb:a5:1b:
         19:8a:45:b0:6d:4c:e9:a1:d3:ab:70:5d:af:f7:5f:32:02:fc:
         85:23:7d:ce:d9:ae:6e:e4:16:61:b7:a2:5b:2b:df:2f:2c:a5:
         0e:7b:c3:f9:ae:24:d8:3d:2e:1d:5a:7b:1b:95:68:4e:be:71:
         7d:88:51:49:9f:88:0a:ca:85:de:d2:f0:34:9a:e5:fb:b0:74:
         cb:bc:d2:ae:07:bc:08:95:2e:2c:d6:6d:47:4b:70:3f:df:63:
         e3:e3:47:61:12:f4:49:b5:6c:07:78:d4:92:31:18:e3:a6:76:
         1e:d3:b2:58:00:70:3e:4f:58:c5:62:23:52:92:62:54:8d:d7:
         11:9a:a2:45:47:28:76:2c:fa:66:be:1b:49:b8:d2:42:06:ec:
         68:58:77:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:31:52 2025 by rpki-client