Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3130332e33382e3130312e302f32342d3234203d3e203338353234.roa
File:                     3130332e33382e3130312e302f32342d3234203d3e203338353234.roa (raw, json)
Hash identifier:          pUG22SUqC2uYlPH/7VeYJykxEJC3ysplA444FBieAmk=
Subject key identifier:   E7:7E:44:A0:A9:5B:FC:E1:09:F9:25:4D:09:54:10:29:E7:12:6D:42
Certificate issuer:       /CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A
Certificate serial:       6D2547160D3686EBBD7E8E6DB2F997246D8C6F8D
Authority key identifier: 6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3130332e33382e3130312e302f32342d3234203d3e203338353234.roa
Signing time:             Mon 02 Jun 2025 02:02:47 +0000
ROA not before:           Mon 02 Jun 2025 01:57:47 +0000
ROA not after:            Mon 01 Jun 2026 02:02:47 +0000
asID:                     38524
IP address blocks:        103.38.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl
                          rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 03:14:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:25:47:16:0d:36:86:eb:bd:7e:8e:6d:b2:f9:97:24:6d:8c:6f:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A
        Validity
            Not Before: Jun  2 01:57:47 2025 GMT
            Not After : Jun  1 02:02:47 2026 GMT
        Subject: CN=E77E44A0A95BFCE109F9254D09541029E7126D42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:af:67:e9:dd:76:15:2b:ac:56:f3:b5:f1:ab:
                    c7:f3:d0:eb:17:30:9d:2d:e6:00:ee:f4:6b:6b:cb:
                    a9:67:db:45:97:15:79:79:65:86:10:8a:12:de:b7:
                    73:94:ca:5e:e6:53:6b:4d:b1:f2:b6:45:99:dc:ca:
                    cd:63:e1:1d:4c:23:68:18:95:cc:2c:43:b0:3c:8d:
                    13:2f:f8:c5:c0:a8:70:77:f0:3e:d4:30:44:f5:36:
                    03:3b:f2:c4:7d:e4:88:1d:6f:27:b5:ad:cc:14:3c:
                    b1:14:f6:0d:ac:c8:76:47:d1:59:54:eb:d5:de:7a:
                    d8:45:b4:c3:09:a2:01:cd:6f:91:49:5c:f8:7d:01:
                    75:d2:d9:3c:b5:48:70:de:ef:4a:89:84:56:b0:a4:
                    79:b2:83:56:a0:2f:f2:82:16:2d:20:31:1f:6f:34:
                    b2:d3:68:20:53:ea:84:70:ee:5d:cc:fb:5c:43:af:
                    53:22:35:a9:a2:bc:20:eb:72:94:82:88:6e:51:41:
                    4e:36:67:5c:b2:8d:3d:51:f2:68:7c:e8:95:3b:7d:
                    d2:a9:64:4b:7e:af:9d:61:d7:2c:61:76:a6:fa:b9:
                    ce:d0:da:6b:ff:ee:83:32:57:4e:88:c2:ed:76:c8:
                    ee:37:49:3f:ab:8a:d3:b3:72:c1:ef:6c:36:dd:a0:
                    49:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:7E:44:A0:A9:5B:FC:E1:09:F9:25:4D:09:54:10:29:E7:12:6D:42
            X509v3 Authority Key Identifier:
                keyid:6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3130332e33382e3130312e302f32342d3234203d3e203338353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.38.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:9a:32:41:a9:1d:4c:3c:60:9e:1f:eb:84:34:ba:e5:d4:76:
         97:2b:81:4a:d2:b3:8b:58:7e:28:83:82:cf:b3:4d:ec:c5:8e:
         0e:e2:bb:78:36:d8:4a:45:b9:87:55:2d:a8:1e:ee:83:c6:b2:
         c2:74:83:2a:d9:a4:c9:a1:fc:f7:a9:8b:23:1b:4c:14:d6:be:
         6c:35:2a:e3:db:27:a4:af:10:96:ea:4f:26:93:7a:cd:44:97:
         3f:be:22:fa:8b:ad:63:95:b6:4b:cc:cd:8a:22:67:0f:00:ce:
         73:a5:d0:2e:ad:89:47:b8:03:86:11:44:48:9e:fb:b0:c9:c0:
         c3:35:ab:69:b2:91:15:72:ce:22:50:7a:c4:76:0b:4b:9b:67:
         a0:0e:2e:e9:4d:70:cb:d7:b0:0c:89:f9:5e:27:9e:e0:d3:9c:
         b9:8c:c2:9b:d8:02:c0:68:bc:a0:a0:67:4c:94:f2:26:b4:47:
         0f:db:6e:8e:8d:4e:d4:02:50:9d:cb:39:4a:cc:51:a7:7e:a1:
         ac:fd:39:be:ca:a6:14:b0:26:3b:57:47:6d:ec:dd:ed:d3:7e:
         dd:b9:d4:bb:5e:5a:5b:46:be:03:b7:ae:cd:98:e1:7a:29:9d:
         3b:4a:8c:5c:e9:9e:51:66:5a:94:7c:8d:64:25:ab:4a:8e:c0:
         14:f3:8c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:28:47 2025 by rpki-client