Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/3130332e3131302e3138342e302f32332d3234203d3e20313337333734.roa
File:                     3130332e3131302e3138342e302f32332d3234203d3e20313337333734.roa (raw, json)
Hash identifier:          t6DqUPB7zlmhbQqkH/Czn9ueyAzHtFeCOGR6aaj9LSw=
Subject key identifier:   B2:9A:BA:4E:6D:74:7C:93:9B:FA:7D:8D:D2:9B:F2:09:16:CF:10:25
Certificate issuer:       /CN=9852ABB8508DE551F1723BC9AC5EC39B35056AE2
Certificate serial:       6B34BCDBF70ECFA1370F9C5C5E1C78216A6850A2
Authority key identifier: 98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/3130332e3131302e3138342e302f32332d3234203d3e20313337333734.roa
Signing time:             Mon 02 Jun 2025 02:04:00 +0000
ROA not before:           Mon 02 Jun 2025 01:59:00 +0000
ROA not after:            Mon 01 Jun 2026 02:04:00 +0000
asID:                     137374
IP address blocks:        103.110.184.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl
                          rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 10:17:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:34:bc:db:f7:0e:cf:a1:37:0f:9c:5c:5e:1c:78:21:6a:68:50:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9852ABB8508DE551F1723BC9AC5EC39B35056AE2
        Validity
            Not Before: Jun  2 01:59:00 2025 GMT
            Not After : Jun  1 02:04:00 2026 GMT
        Subject: CN=B29ABA4E6D747C939BFA7D8DD29BF20916CF1025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f9:f3:10:0b:59:ac:b8:d1:f6:04:0d:d5:a1:
                    a6:73:2a:cb:c9:6e:47:a6:69:35:71:de:a8:41:d6:
                    7a:2c:23:6b:5c:bd:6d:4d:1c:7d:34:2b:7e:bf:b5:
                    d8:61:c3:3c:a9:07:90:e2:6e:cd:ba:62:2b:1b:ed:
                    09:9a:a4:26:c1:22:56:0f:4b:8b:19:a8:b9:53:86:
                    58:0a:58:fd:d0:ee:a5:04:f5:34:10:7b:1f:30:8a:
                    49:14:d3:bf:c0:cb:29:af:64:cb:0b:b0:d1:2d:75:
                    8a:8e:2d:6c:35:83:43:f4:1b:ef:f2:29:25:83:40:
                    b7:9c:c3:c0:24:db:c6:2c:3b:25:b4:ae:bd:4c:76:
                    7f:1f:e0:ea:b0:b9:0c:6b:ea:c2:74:de:a1:92:55:
                    5e:7b:b8:d3:57:ea:22:5e:85:99:e2:42:ce:ff:39:
                    cd:92:b4:d3:91:d4:52:b5:95:98:cb:6c:3a:3e:51:
                    53:71:18:86:68:0d:5b:a6:1f:c9:c0:d2:f4:d9:af:
                    a0:ff:30:15:47:76:aa:f1:be:44:50:b8:81:01:da:
                    31:2c:4e:03:39:30:c9:e3:45:07:87:23:bb:79:3f:
                    b4:93:a1:66:d9:c9:50:2f:eb:0a:2b:2a:06:be:fd:
                    6b:08:0e:73:9e:b4:aa:35:27:c0:dc:4f:a6:dd:c3:
                    34:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:9A:BA:4E:6D:74:7C:93:9B:FA:7D:8D:D2:9B:F2:09:16:CF:10:25
            X509v3 Authority Key Identifier:
                keyid:98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/3130332e3131302e3138342e302f32332d3234203d3e20313337333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:39:a1:7f:e3:63:c5:05:1f:bd:cb:c6:42:11:53:d3:5d:ab:
         ac:95:66:f0:67:77:df:24:56:c9:7c:10:f4:5b:8b:c3:f5:a3:
         c3:33:59:ff:41:01:9f:58:76:1c:9e:60:0b:23:8c:02:af:88:
         23:f4:9d:17:2f:89:09:c7:f3:62:07:2a:34:62:ce:ac:fd:e7:
         a7:c4:18:02:85:06:34:24:32:44:01:0a:89:9f:4e:b0:c1:ea:
         7a:be:67:64:02:f5:b1:ea:08:b5:ca:8b:8a:bb:33:52:2d:8a:
         cd:27:b3:f8:d3:9c:c0:13:b9:14:8f:c2:39:1d:2a:37:d3:59:
         10:fd:00:cb:95:5e:4e:46:12:49:22:8a:05:3f:b5:ff:6d:f3:
         68:b3:d3:06:13:91:f3:30:57:4b:4f:d1:d9:a1:21:c6:27:bd:
         b7:95:c7:2d:e8:e7:43:39:48:2a:ee:72:df:fd:00:e4:29:84:
         23:84:0d:6b:f4:4a:f0:f3:7d:ea:a6:02:64:a6:f0:c5:3c:f2:
         77:bd:31:32:36:b0:8d:84:b0:0d:8b:89:f4:52:bd:2a:6e:94:
         ce:9f:96:6d:87:3c:46:6d:71:17:00:e9:b1:27:30:af:71:9a:
         26:23:e2:89:82:d8:04:36:7d:5b:8c:d2:95:f3:f8:f1:6b:96:
         fe:73:b9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:17:29 2025 by rpki-client