Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3130332e33372e3232372e302f32342d3234203d3e203536323431.roa
File:                     3130332e33372e3232372e302f32342d3234203d3e203536323431.roa (raw, json)
Hash identifier:          Ofhqv7mkbiJdDQEfcosmQvZL6Lhq7AP7WMQ0Va1O1TQ=
Subject key identifier:   53:E0:66:35:12:92:8A:B8:C3:E7:57:5C:AD:FC:4F:B9:83:E4:3B:20
Certificate issuer:       /CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658
Certificate serial:       1BAC1CA2B6318AB483146EB9F71E2F98431E0997
Authority key identifier: C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3130332e33372e3232372e302f32342d3234203d3e203536323431.roa
Signing time:             Thu 15 May 2025 09:00:35 +0000
ROA not before:           Thu 15 May 2025 08:55:35 +0000
ROA not after:            Thu 14 May 2026 09:00:35 +0000
asID:                     56241
IP address blocks:        103.37.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl
                          rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 19:23:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:ac:1c:a2:b6:31:8a:b4:83:14:6e:b9:f7:1e:2f:98:43:1e:09:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658
        Validity
            Not Before: May 15 08:55:35 2025 GMT
            Not After : May 14 09:00:35 2026 GMT
        Subject: CN=53E0663512928AB8C3E7575CADFC4FB983E43B20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1c:15:9d:91:e2:86:8e:bc:40:75:fc:6f:65:
                    c2:8d:46:cd:1e:67:09:e0:b2:d1:97:3a:34:e4:78:
                    9e:91:a8:82:ad:a7:c1:74:b2:15:d3:3c:a0:00:5f:
                    be:b2:bc:2f:5e:0a:3a:af:08:c8:cc:2d:95:90:cf:
                    6d:48:6c:f3:f6:09:87:5c:bb:7a:57:2f:e3:d7:b9:
                    88:9e:60:f9:ec:72:b8:05:c7:2e:1b:95:d0:1d:60:
                    d5:c0:05:82:92:1d:25:32:3f:f6:de:86:70:0a:75:
                    75:bc:37:d9:72:48:10:bd:5b:1c:16:23:b2:2b:86:
                    be:79:f3:6e:3a:af:a5:3e:af:64:3d:a9:f2:25:05:
                    ab:b4:f9:6c:24:50:15:4f:fe:9b:dc:0d:1e:a8:81:
                    4c:82:37:7b:81:92:83:e3:bb:b4:27:21:9b:1d:a6:
                    71:9b:27:97:b4:05:e3:00:38:7a:9d:e8:d4:3c:ee:
                    a9:9c:2e:e3:10:c5:54:7a:1f:79:fe:36:9d:69:fb:
                    25:9c:c1:f4:ff:51:3d:b6:d7:c7:76:93:41:04:7e:
                    9f:8c:27:d9:f0:e6:f2:fd:9c:46:5e:f7:87:50:e5:
                    ec:2c:8b:aa:ad:1b:ca:15:92:49:9b:86:ad:3c:62:
                    88:73:fb:93:53:16:0f:c5:20:b3:89:a9:c9:25:ae:
                    0f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E0:66:35:12:92:8A:B8:C3:E7:57:5C:AD:FC:4F:B9:83:E4:3B:20
            X509v3 Authority Key Identifier:
                keyid:C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3130332e33372e3232372e302f32342d3234203d3e203536323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:21:ba:6f:f3:81:d0:f0:1e:8d:72:08:1e:ed:40:a5:fc:4a:
         55:4a:14:b7:c7:be:be:74:d2:c6:d7:a2:39:12:52:e3:d7:0f:
         57:41:c7:88:79:5e:9d:04:c7:35:6e:e1:fe:19:c4:71:84:5d:
         4a:c2:69:05:06:40:48:2a:41:e3:51:66:3a:b1:42:d0:4c:82:
         50:22:23:50:eb:d1:ff:de:61:71:9a:af:4b:d2:57:13:13:56:
         4e:fc:b5:a8:d0:12:6f:d1:91:94:81:43:78:4c:37:da:85:b5:
         25:7c:00:d3:5c:9f:8c:84:ef:c3:b9:63:ef:94:b1:4e:84:87:
         6b:8e:ff:c2:97:d2:fe:10:0e:3b:27:5a:f5:4d:1f:81:2a:6d:
         db:dd:1e:fb:3c:9f:74:81:e7:6d:50:ef:b0:12:3e:21:e0:24:
         3e:c8:2f:67:0c:0b:bd:21:d5:01:1a:b6:a4:eb:2b:f7:d9:14:
         4c:14:f6:51:0b:9e:75:a4:0e:69:68:10:48:56:38:1e:7f:b4:
         ad:e8:c0:06:db:22:c0:85:93:d5:8d:06:39:e0:6a:a3:b2:95:
         cc:ec:3d:b8:68:3c:02:00:b8:ad:e8:fa:15:b6:40:41:26:2c:
         98:d3:8c:b2:cb:3f:04:6b:33:be:1a:54:69:a6:fd:68:14:07:
         0e:08:a4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:47:44 2025 by rpki-client