Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/3130332e37372e3138352e302f32342d3234203d3e20313331373635.roa
File:                     3130332e37372e3138352e302f32342d3234203d3e20313331373635.roa (raw, json)
Hash identifier:          +wBbu1cMZCAeulSyWUHjp9S6buaiwbJ9EYT932oWUfk=
Subject key identifier:   AE:8E:7D:F4:5F:46:49:CB:08:F7:24:F5:9E:A1:A6:69:C5:29:B3:4A
Certificate issuer:       /CN=6FB4DAE76B12CA00E07344A4DD2F933232EC2187
Certificate serial:       6632D38E313663ABD51770475F6518A02D004AB4
Authority key identifier: 6F:B4:DA:E7:6B:12:CA:00:E0:73:44:A4:DD:2F:93:32:32:EC:21:87
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/3130332e37372e3138352e302f32342d3234203d3e20313331373635.roa
Signing time:             Tue 18 Feb 2025 18:00:01 +0000
ROA not before:           Tue 18 Feb 2025 17:55:01 +0000
ROA not after:            Tue 17 Feb 2026 18:00:01 +0000
asID:                     131765
IP address blocks:        103.77.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.crl
                          rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Apr 2025 20:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:32:d3:8e:31:36:63:ab:d5:17:70:47:5f:65:18:a0:2d:00:4a:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FB4DAE76B12CA00E07344A4DD2F933232EC2187
        Validity
            Not Before: Feb 18 17:55:01 2025 GMT
            Not After : Feb 17 18:00:01 2026 GMT
        Subject: CN=AE8E7DF45F4649CB08F724F59EA1A669C529B34A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f2:ca:99:87:bb:55:8d:e8:9f:bd:f3:3d:10:
                    ab:f5:f9:b2:c1:ec:d7:b2:68:4e:60:f3:8c:98:98:
                    af:99:53:03:c8:94:82:c2:d2:7f:49:42:e4:ce:82:
                    73:dc:77:49:03:e8:00:a8:83:30:a9:b8:a9:02:db:
                    ec:13:df:de:95:e4:14:b7:78:25:5c:dd:dd:89:a0:
                    e3:43:df:9c:2e:7e:e5:55:1d:6a:76:58:45:57:fc:
                    99:9d:ef:26:a0:b0:12:96:b6:6f:b8:06:2d:ef:32:
                    ec:8c:a4:f0:6e:ef:87:93:d2:e9:d8:41:0d:ee:6b:
                    12:41:ec:7c:69:c1:d6:5a:c1:b8:ac:05:ea:f9:af:
                    41:df:9a:f2:94:1d:27:96:3e:22:6c:10:63:57:5e:
                    88:a9:cc:b2:30:d2:00:ad:3f:8a:19:24:06:93:81:
                    e6:9b:63:a6:32:04:18:19:80:c8:ad:f4:53:87:19:
                    86:41:e3:1b:72:ee:d2:11:3e:7f:1b:36:10:85:bb:
                    58:6f:7e:8e:b4:d5:5f:ca:ff:41:66:51:d4:71:ba:
                    d4:3b:8d:91:6d:60:5d:9d:f3:59:b5:30:80:5a:f6:
                    da:00:ac:f4:af:05:65:31:10:05:30:2f:41:de:eb:
                    59:14:99:ee:86:03:1e:4d:e9:c4:1d:1b:44:e3:5d:
                    2a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:8E:7D:F4:5F:46:49:CB:08:F7:24:F5:9E:A1:A6:69:C5:29:B3:4A
            X509v3 Authority Key Identifier:
                keyid:6F:B4:DA:E7:6B:12:CA:00:E0:73:44:A4:DD:2F:93:32:32:EC:21:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/3130332e37372e3138352e302f32342d3234203d3e20313331373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:a2:90:5c:02:e0:af:ac:75:3d:fb:67:4d:d5:b8:1d:29:41:
         97:d8:60:4d:d1:c8:02:86:c0:0c:cc:fb:f0:69:a2:e3:8f:ac:
         7d:b6:08:cc:d1:20:3c:9a:65:f2:df:e0:e0:1e:e5:67:4d:b6:
         15:05:f0:eb:dd:b2:9b:2b:d3:a5:4b:ea:89:ba:8e:e4:9f:9a:
         97:95:c2:b2:e5:a3:af:26:f5:ac:d2:48:db:55:f4:58:89:10:
         89:68:18:f5:51:fe:6e:5b:2b:80:67:78:56:89:3f:c5:d6:e1:
         79:e9:6f:23:42:32:49:5e:bf:fb:ed:bc:8b:60:5a:38:23:a8:
         4b:8a:3d:f9:f1:85:3d:5d:33:95:9f:1c:e0:8b:b7:ff:9d:0f:
         cd:ce:5f:88:f4:32:83:78:75:6f:eb:40:81:eb:37:71:f6:4f:
         f7:57:87:f2:28:43:e8:e3:e9:29:75:9c:c9:89:bc:8b:0f:95:
         0b:aa:17:fd:15:b4:88:d4:38:4f:f7:0e:6e:a2:08:32:65:71:
         20:38:c0:6f:b7:b4:24:d0:f5:7a:64:73:8e:af:9d:77:88:c0:
         f6:29:c0:6b:4e:9a:70:4b:91:9e:9a:2f:95:61:e8:93:13:13:
         d9:15:20:86:2a:1d:08:b0:2c:34:a4:26:64:e7:46:30:90:8c:
         63:a2:a6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:28:10 2025 by rpki-client