Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3130332e33382e3130302e302f32342d3234203d3e203338353234.roa
File:                     3130332e33382e3130302e302f32342d3234203d3e203338353234.roa (raw, json)
Hash identifier:          IGGjmk2BP0lsT7Umcp62WU9jd+u0QXqrphB+qmtxzj4=
Subject key identifier:   36:12:FA:AA:90:01:F7:7E:EC:F6:EC:81:50:3D:B4:E6:71:2C:A2:11
Certificate issuer:       /CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A
Certificate serial:       57125DAABFE2AA90321CC3268512545D951523BC
Authority key identifier: 6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3130332e33382e3130302e302f32342d3234203d3e203338353234.roa
Signing time:             Mon 02 Jun 2025 02:02:45 +0000
ROA not before:           Mon 02 Jun 2025 01:57:45 +0000
ROA not after:            Mon 01 Jun 2026 02:02:45 +0000
asID:                     38524
IP address blocks:        103.38.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl
                          rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 03:14:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:12:5d:aa:bf:e2:aa:90:32:1c:c3:26:85:12:54:5d:95:15:23:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A
        Validity
            Not Before: Jun  2 01:57:45 2025 GMT
            Not After : Jun  1 02:02:45 2026 GMT
        Subject: CN=3612FAAA9001F77EECF6EC81503DB4E6712CA211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9f:6c:20:84:c9:85:e4:2e:d8:98:45:1d:74:
                    bb:eb:c2:6d:96:1e:87:10:19:0b:42:e4:b2:10:df:
                    cf:7c:22:12:4f:5e:3a:3f:85:d2:4f:85:20:27:5b:
                    5e:e8:cf:da:ed:b0:ee:6b:b0:b8:a8:bb:29:86:f7:
                    3a:2e:90:1c:29:48:39:23:e6:e8:a7:32:46:6f:e5:
                    b3:70:56:17:bf:08:55:b9:84:e6:02:b8:13:f8:7b:
                    d6:0a:99:00:a0:f4:84:3e:4d:e4:37:7f:a3:2f:b1:
                    46:e1:73:55:2a:0f:0a:d9:29:25:cb:e9:b6:bc:74:
                    a6:b7:55:c6:ac:1d:bc:c4:48:0c:5a:84:f1:1f:8f:
                    ca:5f:62:3f:fc:39:77:b0:eb:2c:de:3e:5e:f1:9f:
                    61:df:ab:0b:d2:e6:9f:dc:b1:b7:51:5d:a0:46:f4:
                    fd:c9:1a:9f:94:64:bd:09:99:45:d0:d9:50:1e:06:
                    d1:90:5a:0f:10:2b:23:17:60:17:d2:5e:59:44:bb:
                    32:c5:c0:72:eb:d4:79:12:de:ae:da:7c:ab:ba:87:
                    af:32:de:ed:7b:d1:df:66:d6:44:d2:f3:f4:a2:fb:
                    5b:16:ba:49:7e:7c:6a:b2:38:36:c2:de:c6:86:46:
                    7f:4f:52:3a:c8:79:e6:68:7c:57:35:96:71:a5:d9:
                    49:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:12:FA:AA:90:01:F7:7E:EC:F6:EC:81:50:3D:B4:E6:71:2C:A2:11
            X509v3 Authority Key Identifier:
                keyid:6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3130332e33382e3130302e302f32342d3234203d3e203338353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.38.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:77:83:2a:40:1e:80:69:27:17:eb:95:6f:8b:27:71:ea:b0:
         96:db:af:49:25:9f:29:d7:fb:75:e0:bc:54:dd:88:1a:6b:74:
         8d:12:78:c7:29:f1:40:4d:a9:f7:23:58:75:eb:fe:bb:d9:05:
         80:89:6c:ee:46:34:9a:8f:4d:07:fb:d9:e3:91:47:d8:ff:1c:
         08:8a:77:30:e9:66:c9:c2:5c:b7:c7:4c:58:47:99:26:3a:24:
         87:20:2d:c6:14:5e:35:9c:b4:d0:86:35:31:8e:ee:ca:58:6b:
         00:57:81:cd:70:ad:af:99:57:c7:e4:87:2a:26:c1:82:70:d3:
         95:36:0d:77:40:27:c1:8f:6b:46:ad:d5:c4:3f:fb:00:be:98:
         9c:90:c7:98:55:db:54:84:82:41:69:e7:ff:12:96:0b:90:dd:
         6d:29:12:0c:dd:cb:85:c6:db:fb:03:86:5d:3e:76:ce:d1:f7:
         17:83:84:4a:d8:71:b4:2e:16:64:92:f1:b1:69:ae:6b:26:a0:
         e2:01:3e:60:d9:2d:d8:d5:5b:64:75:a9:a8:71:b7:0b:68:8e:
         92:b7:c0:9c:0b:f9:8f:b1:57:de:98:d1:f9:dd:25:d8:30:bc:
         4f:7a:33:20:c4:b4:26:e8:35:8d:52:2c:60:8b:87:72:4d:29:
         92:f0:6a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:28:54 2025 by rpki-client