Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/3130332e32382e32312e302f32342d3234203d3e203536323536.roa
File:                     3130332e32382e32312e302f32342d3234203d3e203536323536.roa (raw, json)
Hash identifier:          lgU3Sd0WykJyELTKj2IglQHmtI2jqlICc7rdQuDN4Fw=
Subject key identifier:   B4:9E:D0:6F:16:8A:42:AE:55:33:69:98:C2:B9:20:F3:AF:60:D2:53
Certificate issuer:       /CN=EF979072FBF6DABD2A8EAC08A304509E8DC04C66
Certificate serial:       5D067226A25949814898E1BCA98D3052F6297B4D
Authority key identifier: EF:97:90:72:FB:F6:DA:BD:2A:8E:AC:08:A3:04:50:9E:8D:C0:4C:66
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/3130332e32382e32312e302f32342d3234203d3e203536323536.roa
Signing time:             Thu 01 May 2025 03:00:01 +0000
ROA not before:           Thu 01 May 2025 02:55:01 +0000
ROA not after:            Thu 30 Apr 2026 03:00:01 +0000
asID:                     56256
IP address blocks:        103.28.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.crl
                          rsync://repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 19:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:06:72:26:a2:59:49:81:48:98:e1:bc:a9:8d:30:52:f6:29:7b:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF979072FBF6DABD2A8EAC08A304509E8DC04C66
        Validity
            Not Before: May  1 02:55:01 2025 GMT
            Not After : Apr 30 03:00:01 2026 GMT
        Subject: CN=B49ED06F168A42AE55336998C2B920F3AF60D253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:10:5a:1a:05:ee:9c:a5:af:b3:f0:91:9e:a5:
                    e8:3f:c1:bd:7a:f8:b6:4c:11:6d:f9:39:49:b6:7c:
                    b5:b0:b6:65:0b:90:d8:e9:6a:2a:cd:b3:23:71:c8:
                    1e:5f:fe:e3:b3:4a:bd:c4:0c:d4:ee:6c:9a:db:ae:
                    0c:7a:96:94:b6:98:80:47:dd:07:14:13:84:5c:f5:
                    d4:48:43:e8:a6:c0:b6:3c:af:b6:32:67:d8:c3:7d:
                    55:5e:ba:e2:cb:fd:cd:78:60:76:c6:7d:1e:b3:8c:
                    da:c5:ae:90:42:0b:62:be:ea:63:79:1a:b4:82:be:
                    29:20:f3:70:99:f1:6d:6e:b1:5f:a3:c5:22:45:2b:
                    89:c1:cf:5f:44:cd:03:32:30:b6:59:9c:31:19:a6:
                    98:bd:b3:73:58:b6:eb:71:b9:79:1b:50:e9:fa:16:
                    cd:3d:6d:e1:9b:22:af:b2:ed:88:c7:00:8d:ce:10:
                    65:9a:21:51:17:f1:ce:fb:e3:c9:ce:1f:ad:ca:b1:
                    54:fa:68:86:ac:cd:7b:24:19:4d:b1:39:aa:2e:62:
                    17:e3:26:c8:6b:02:3c:91:bb:6e:97:e4:c0:30:de:
                    a8:a8:b9:e2:d2:17:90:1a:6c:b6:c0:a2:70:9b:c6:
                    68:3f:ae:24:3e:39:07:5d:90:9e:e7:ca:1a:ec:e6:
                    d4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:9E:D0:6F:16:8A:42:AE:55:33:69:98:C2:B9:20:F3:AF:60:D2:53
            X509v3 Authority Key Identifier:
                keyid:EF:97:90:72:FB:F6:DA:BD:2A:8E:AC:08:A3:04:50:9E:8D:C0:4C:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/3130332e32382e32312e302f32342d3234203d3e203536323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:a1:a3:0a:6b:c4:c9:e0:63:e0:83:ff:9d:fb:3e:d1:66:42:
         b4:a6:67:e2:fb:25:03:7e:fa:fb:80:7f:35:f6:0a:cb:0a:c4:
         e6:f1:19:b7:89:2b:3d:f5:33:5e:b4:5f:85:06:18:66:ff:31:
         a5:84:c0:9f:e0:af:00:3f:08:ea:a2:1a:ab:74:b0:ff:ba:1c:
         f0:a9:82:ab:24:56:70:1e:ab:d3:b4:bb:9d:ad:47:d5:27:11:
         b6:c8:4f:58:f3:a9:b4:1c:14:e6:b7:b7:92:6f:00:ec:0b:3f:
         3c:79:8b:a4:9b:d5:b0:f0:44:79:41:32:3a:06:17:bf:b7:22:
         04:9a:e2:9f:c8:3d:80:f9:67:64:95:c2:56:97:70:3a:99:91:
         85:a0:3f:ff:68:09:52:24:9f:60:ac:04:2c:e7:73:32:99:40:
         68:37:7b:01:9f:12:62:da:f5:92:b2:4c:34:58:ca:0b:a0:68:
         f9:c3:fb:7d:08:6e:79:c6:5b:56:f2:c6:cb:6e:c9:26:7d:ce:
         48:67:e8:ce:6b:2b:f7:5f:ba:ba:81:f4:fa:94:19:58:8c:01:
         fa:7b:76:db:95:fa:b8:88:d3:d2:00:b5:ba:ef:32:63:19:4b:
         64:5a:39:5c:0c:b4:c8:dd:03:2e:e9:be:7c:b1:74:68:f2:3a:
         98:6b:d9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:47:14 2025 by rpki-client