Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3130332e3234382e35362e302f32342d3234203d3e203538383136.roa
File:                     3130332e3234382e35362e302f32342d3234203d3e203538383136.roa (raw, json)
Hash identifier:          Fp3TdqFb3PCcEDYFQYYU/EXsl8Z+niV/5Guw5uw0Pl4=
Subject key identifier:   94:05:AF:47:86:37:9F:9E:C9:19:83:2F:53:6D:3D:CA:85:78:1D:CD
Certificate issuer:       /CN=2042008AEC80152F373D2A04DFD3893EE2F92166
Certificate serial:       4D2CA85BC57C101342ACE5509C9375691AC229BD
Authority key identifier: 20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3130332e3234382e35362e302f32342d3234203d3e203538383136.roa
Signing time:             Thu 06 Mar 2025 09:00:00 +0000
ROA not before:           Thu 06 Mar 2025 08:55:00 +0000
ROA not after:            Thu 05 Mar 2026 09:00:00 +0000
asID:                     58816
IP address blocks:        103.248.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl
                          rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Apr 2025 21:52:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:2c:a8:5b:c5:7c:10:13:42:ac:e5:50:9c:93:75:69:1a:c2:29:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2042008AEC80152F373D2A04DFD3893EE2F92166
        Validity
            Not Before: Mar  6 08:55:00 2025 GMT
            Not After : Mar  5 09:00:00 2026 GMT
        Subject: CN=9405AF4786379F9EC919832F536D3DCA85781DCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8c:a5:ad:98:a5:40:e2:43:f4:91:37:cf:79:
                    66:7a:b7:94:ab:d9:e6:4c:c8:08:d7:cd:39:2c:ea:
                    7b:10:04:94:09:88:8b:bf:f7:f8:6d:95:e9:d0:c3:
                    c3:bd:19:93:cc:ee:1a:0f:cb:f1:d2:dd:7a:64:d2:
                    83:e7:d1:61:66:46:9a:95:db:e9:17:95:5d:fe:5c:
                    5e:e7:f9:11:4f:5f:a6:ae:51:61:3a:e7:0c:04:08:
                    e6:7b:e1:b2:98:b0:b9:00:69:96:21:de:cc:b9:1a:
                    60:ac:7f:36:c5:d0:46:78:15:29:e4:be:20:6e:e8:
                    ca:61:22:6e:93:ae:9a:3e:0e:f4:14:fe:8a:56:64:
                    74:e4:ef:bd:7a:ab:52:11:8c:98:0d:84:0a:4b:94:
                    14:fd:c8:8b:bd:01:3a:0c:e9:e7:2b:b6:ae:f8:cb:
                    65:0a:fd:b5:cf:66:b4:b0:a1:04:b0:7d:70:dd:f9:
                    36:63:31:9e:c4:8b:17:e0:dd:d1:a5:6f:4e:65:45:
                    aa:a7:bd:aa:26:43:51:de:ef:86:35:e4:6a:d5:d9:
                    9e:11:46:16:54:81:ea:e5:d7:c4:f0:64:3e:30:7c:
                    ea:b0:6e:7c:8e:ef:ec:bd:b7:4f:93:07:8f:d0:4f:
                    08:83:b7:83:83:d4:4d:be:42:83:81:b1:59:9a:07:
                    92:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:05:AF:47:86:37:9F:9E:C9:19:83:2F:53:6D:3D:CA:85:78:1D:CD
            X509v3 Authority Key Identifier:
                keyid:20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3130332e3234382e35362e302f32342d3234203d3e203538383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:49:5b:c9:80:6d:2d:7e:0e:74:94:6c:96:ae:46:65:13:02:
         ad:47:b3:d3:1d:c8:a1:f8:2f:04:62:70:e2:8d:be:2f:9e:a8:
         ed:3e:a5:68:c5:28:9a:0a:52:7c:83:64:15:cb:f0:68:64:0c:
         93:35:27:ee:70:ea:71:a6:f3:68:8d:a4:61:e4:4f:ce:2b:03:
         61:3e:16:7e:46:6a:13:7b:03:d4:b8:3d:77:4e:ba:6b:1b:92:
         8c:83:49:78:ad:45:86:28:77:f4:18:e2:00:c2:9e:6a:5c:ac:
         6b:1c:8a:82:f3:cc:9c:56:34:4e:3a:29:0b:6e:17:0d:15:26:
         4c:3c:60:f5:ac:5e:c2:71:30:d5:59:ea:d0:6b:1e:9b:23:ae:
         72:e0:48:04:2d:9d:4e:83:6c:42:43:fa:34:37:48:2d:1f:7f:
         a0:2e:e4:2d:36:8c:e1:d7:c4:d9:70:05:63:11:01:50:fb:f0:
         fa:15:d5:90:97:d0:03:bf:3d:56:aa:cb:86:a5:19:a8:5e:90:
         88:3c:b6:0e:20:d5:4f:17:58:fe:03:47:fd:c2:51:9f:57:c8:
         22:db:5e:d3:f5:7c:7c:2c:2f:54:86:d5:8b:36:e9:e3:07:9b:
         fc:dc:fb:43:29:87:02:3c:90:c4:66:60:8d:3b:8f:d8:9f:29:
         63:6e:f5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:48:10 2025 by rpki-client