Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3130332e3234382e35392e302f32342d3234203d3e203538383136.roa
File:                     3130332e3234382e35392e302f32342d3234203d3e203538383136.roa (raw, json)
Hash identifier:          ItE1oa3zcA/J6v7neMwAUFSJuwJHlB5fYUCcNJ52lrY=
Subject key identifier:   20:EE:10:4D:9D:46:39:AD:F1:2A:78:6D:BB:D7:BD:68:A1:28:A4:DE
Certificate issuer:       /CN=2042008AEC80152F373D2A04DFD3893EE2F92166
Certificate serial:       78E9065516F674DE93BF0E61F215A2F0936784B6
Authority key identifier: 20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3130332e3234382e35392e302f32342d3234203d3e203538383136.roa
Signing time:             Thu 06 Mar 2025 09:00:00 +0000
ROA not before:           Thu 06 Mar 2025 08:55:00 +0000
ROA not after:            Thu 05 Mar 2026 09:00:00 +0000
asID:                     58816
IP address blocks:        103.248.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl
                          rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Apr 2025 21:52:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:e9:06:55:16:f6:74:de:93:bf:0e:61:f2:15:a2:f0:93:67:84:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2042008AEC80152F373D2A04DFD3893EE2F92166
        Validity
            Not Before: Mar  6 08:55:00 2025 GMT
            Not After : Mar  5 09:00:00 2026 GMT
        Subject: CN=20EE104D9D4639ADF12A786DBBD7BD68A128A4DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e3:36:43:8e:09:e0:0f:77:85:80:9d:75:86:
                    b1:2b:61:4c:98:83:3f:a0:62:5c:f2:f8:ec:05:67:
                    3a:9c:19:85:3f:e5:5c:be:61:cc:21:7f:a6:c7:3f:
                    58:74:b6:8a:1f:0e:75:36:0f:07:3c:0f:32:7c:30:
                    99:ed:bd:ef:b7:60:e1:87:91:03:01:2b:4b:62:63:
                    a6:67:97:f8:6a:b7:9a:50:58:6a:62:7b:b2:f4:f6:
                    50:2e:3a:46:fb:e8:5c:4a:52:3d:8b:5d:09:0e:a0:
                    aa:94:e8:60:c4:96:ea:95:11:df:d5:f9:cf:6c:d3:
                    76:c2:22:0f:f9:72:af:65:80:ea:15:57:62:68:50:
                    d3:1a:3b:06:a9:85:79:68:6a:e6:4b:ee:e1:5b:1c:
                    09:33:68:ae:b0:d3:1c:36:cc:90:b8:3d:30:fc:1c:
                    88:bd:5e:50:06:a4:23:40:10:17:e9:ca:7c:2d:d7:
                    a0:f2:22:16:c6:c6:e2:33:fe:1b:7a:dc:1b:b9:fd:
                    9b:44:4d:11:14:1a:85:9a:c6:fe:52:83:19:ab:f7:
                    89:16:34:7f:a6:31:cc:35:c2:ba:22:17:4e:5c:42:
                    d7:ea:f1:c9:a4:79:d8:79:39:bd:12:a7:08:9e:0f:
                    fa:06:98:e7:63:0e:7d:93:9a:86:f8:fb:1f:32:c0:
                    eb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:EE:10:4D:9D:46:39:AD:F1:2A:78:6D:BB:D7:BD:68:A1:28:A4:DE
            X509v3 Authority Key Identifier:
                keyid:20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3130332e3234382e35392e302f32342d3234203d3e203538383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:25:e3:eb:03:5c:e6:d0:69:87:93:60:24:ad:48:cb:bf:e1:
         56:4f:04:ba:fa:79:75:a4:f5:a1:f2:17:05:05:f6:29:74:d9:
         a2:63:cf:0e:c7:78:64:ec:2d:2b:d3:2c:d8:e8:e0:89:2d:8f:
         dd:24:38:e5:b0:9e:49:bc:87:23:8b:62:6d:f2:a3:e6:fb:92:
         c9:81:c3:1d:27:15:a8:0e:b1:61:5b:d4:77:84:09:19:6e:60:
         02:97:13:76:dc:a3:58:e0:d1:10:1c:f0:63:14:ed:fc:a1:3c:
         f6:c8:c2:7c:ba:a2:c1:4b:70:8e:40:db:e5:45:04:c0:83:4e:
         c8:6e:0a:8f:1c:95:5d:6a:a1:9c:9e:3e:25:93:f5:44:06:61:
         7c:ef:3f:78:79:41:44:3e:08:85:39:6f:f5:f6:fb:a5:fa:d7:
         ed:96:8c:3c:83:61:fd:c4:5e:79:ac:41:60:0e:f7:f6:2e:6c:
         ca:7d:72:52:3d:04:2a:67:3b:9e:b1:b3:7f:25:bd:67:c5:26:
         10:f4:52:40:04:e1:8b:73:10:76:1a:d2:03:66:02:4b:ac:fb:
         b0:69:f5:11:78:d4:70:a1:34:36:d4:79:3c:5e:9c:08:5e:8b:
         3b:9d:66:3b:99:14:54:c5:71:b5:0f:bb:6d:5b:18:6a:88:5f:
         30:da:ed:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:50:52 2025 by rpki-client