Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3130332e36302e3138332e302f32342d3234203d3e20313431363330.roa
File:                     3130332e36302e3138332e302f32342d3234203d3e20313431363330.roa (raw, json)
Hash identifier:          /yhg5qr+BfUwCEkWIHjx5Xurv6fbCx8q1w5UII3HZ8w=
Subject key identifier:   3B:7B:10:D2:FD:A1:31:0E:EA:52:08:A6:19:EB:BC:FE:7A:96:B5:30
Certificate issuer:       /CN=389E7C13CF6344AEB93001CD4C5AC79401252A5C
Certificate serial:       66D3F9CD941D72EBA4A9B9FC240BFF9AFD8EA9E0
Authority key identifier: 38:9E:7C:13:CF:63:44:AE:B9:30:01:CD:4C:5A:C7:94:01:25:2A:5C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3130332e36302e3138332e302f32342d3234203d3e20313431363330.roa
Signing time:             Wed 18 Dec 2024 03:48:48 +0000
ROA not before:           Wed 18 Dec 2024 03:43:48 +0000
ROA not after:            Wed 17 Dec 2025 03:48:48 +0000
asID:                     141630
IP address blocks:        103.60.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl
                          rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 09:33:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:d3:f9:cd:94:1d:72:eb:a4:a9:b9:fc:24:0b:ff:9a:fd:8e:a9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=389E7C13CF6344AEB93001CD4C5AC79401252A5C
        Validity
            Not Before: Dec 18 03:43:48 2024 GMT
            Not After : Dec 17 03:48:48 2025 GMT
        Subject: CN=3B7B10D2FDA1310EEA5208A619EBBCFE7A96B530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:af:30:cd:ff:84:e3:91:25:0a:05:9a:c8:b7:
                    73:4a:19:d9:ba:6d:b2:a1:f8:a1:77:52:3f:56:78:
                    02:13:5d:e8:d4:87:1a:04:2e:7c:19:6d:02:a4:af:
                    ce:1c:f9:bc:5b:6d:48:9e:d0:c3:77:10:08:e9:d4:
                    b6:09:24:50:b6:2b:e8:2f:7a:89:74:65:65:41:fa:
                    aa:7f:4d:4e:3c:b6:de:ff:85:3b:1a:1e:9f:ce:b1:
                    b6:aa:bb:77:13:ee:36:8e:5b:46:d7:51:c3:49:34:
                    8a:8f:e8:0c:7f:53:79:1d:dd:11:9b:e1:d9:d6:c5:
                    ae:03:ba:72:b2:9b:69:87:de:53:07:45:ec:41:53:
                    c0:d9:65:1d:39:2f:31:54:d9:c4:48:10:25:32:fc:
                    1c:c5:4c:58:51:8b:cf:39:22:7f:6b:5e:46:00:bc:
                    9b:45:87:c1:f7:3c:6d:9e:7b:1a:62:5c:63:54:39:
                    c9:94:6e:6e:f0:e5:63:83:4e:94:4f:2c:28:2f:64:
                    54:7d:9d:ee:63:43:df:8d:76:4f:c7:92:09:fc:d8:
                    c7:57:ce:b1:41:33:9d:f0:70:2f:da:b0:16:61:07:
                    57:48:b2:5e:a6:41:28:5c:ca:d4:4a:43:59:85:66:
                    bc:9f:cc:96:b1:35:3a:0d:28:f7:8c:cc:76:35:95:
                    be:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:7B:10:D2:FD:A1:31:0E:EA:52:08:A6:19:EB:BC:FE:7A:96:B5:30
            X509v3 Authority Key Identifier:
                keyid:38:9E:7C:13:CF:63:44:AE:B9:30:01:CD:4C:5A:C7:94:01:25:2A:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3130332e36302e3138332e302f32342d3234203d3e20313431363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.60.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:64:0a:6e:c6:ec:8c:98:55:68:4e:88:ea:f0:aa:df:1e:7d:
         c9:38:32:43:4f:16:98:0c:b6:24:a6:01:18:92:d7:f7:d2:1f:
         b5:72:5f:c2:27:c3:2e:79:f5:b8:19:22:0c:4d:ee:9f:51:4a:
         88:83:db:8c:cf:24:f8:58:a1:80:37:08:10:18:07:9c:6d:1c:
         a7:a9:a0:58:4b:36:a6:4e:83:38:0e:53:f4:27:eb:8b:55:8e:
         21:19:43:a4:6d:9b:7b:48:3b:b9:06:0c:2d:6c:8b:88:20:29:
         c4:b8:2d:e6:c5:87:03:40:13:3f:9f:b5:c5:9f:4c:b0:ca:e7:
         01:ea:20:fc:a8:2f:e6:72:e7:d4:5d:33:22:94:6f:f7:0f:bf:
         d5:54:06:33:e9:fa:cc:f7:71:c4:6f:34:a6:ff:20:46:f7:53:
         04:c1:b6:a5:fe:4f:92:17:22:7b:9b:40:ee:a0:57:45:bd:0e:
         44:32:a6:a4:dc:a8:10:9d:68:81:75:d3:03:b3:d6:63:8e:fa:
         64:c7:b5:8f:b0:ed:e3:06:0b:df:87:7b:18:36:90:62:9f:34:
         52:f8:f1:21:84:db:e2:99:42:85:6b:50:85:77:fe:b5:aa:4e:
         3c:2c:d3:08:58:00:3e:38:45:8d:74:68:cd:21:ea:b3:fe:73:
         08:75:88:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:06:23 2025 by rpki-client