Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/3130332e32322e3234302e302f32322d3234203d3e203234353233.roa
File:                     3130332e32322e3234302e302f32322d3234203d3e203234353233.roa (raw, json)
Hash identifier:          O8/63tusLe+8VPLAAqnF2wRbO5seVh0CdjonLiqJ+TA=
Subject key identifier:   34:CB:6E:22:05:BD:76:97:64:0D:73:4B:1C:54:AA:DE:77:2E:4A:B2
Certificate issuer:       /CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38
Certificate serial:       677524A6C42E2EF054B5E9C41349280C584EEAC2
Authority key identifier: 11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/3130332e32322e3234302e302f32322d3234203d3e203234353233.roa
Signing time:             Mon 02 Jun 2025 02:03:00 +0000
ROA not before:           Mon 02 Jun 2025 01:58:00 +0000
ROA not after:            Mon 01 Jun 2026 02:03:00 +0000
asID:                     24523
IP address blocks:        103.22.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl
                          rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 20:31:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:75:24:a6:c4:2e:2e:f0:54:b5:e9:c4:13:49:28:0c:58:4e:ea:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38
        Validity
            Not Before: Jun  2 01:58:00 2025 GMT
            Not After : Jun  1 02:03:00 2026 GMT
        Subject: CN=34CB6E2205BD7697640D734B1C54AADE772E4AB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:40:6a:c8:40:fc:1e:f1:c7:9b:22:f6:03:c1:
                    00:92:85:86:0a:ef:78:62:19:44:f9:c7:8f:7e:be:
                    ff:02:7d:51:31:cc:53:b8:5b:6d:df:6a:ad:97:d0:
                    b3:13:24:a1:73:3b:f4:5e:fc:9f:e0:61:aa:0e:54:
                    46:a0:16:3e:09:7d:01:16:75:19:53:aa:e2:77:7c:
                    4b:7f:39:92:dd:fb:06:94:81:1b:80:59:29:86:06:
                    31:cb:cc:ef:ab:8f:6b:bd:40:50:32:a0:f7:d5:1c:
                    57:16:7c:34:59:25:ef:60:be:7f:ef:b1:33:06:a5:
                    e9:47:08:a5:7f:c0:88:0a:36:85:72:24:e0:da:33:
                    73:84:3e:df:aa:61:5f:28:63:6f:96:43:a2:aa:1e:
                    3d:18:f9:70:83:9f:da:1b:ad:86:ea:52:e0:53:c7:
                    db:aa:26:dd:bb:9c:36:b7:1f:68:35:d9:e8:84:6c:
                    cb:9c:e4:9f:db:45:b1:3f:4a:2c:79:17:5c:de:ba:
                    c5:44:62:56:81:df:90:27:01:41:5e:d1:b9:6c:25:
                    85:28:3e:0e:6a:57:c9:2f:f6:a7:72:69:2b:e1:2a:
                    6c:c3:36:79:df:98:21:13:28:d4:94:a0:8b:9c:ba:
                    14:17:3e:9e:69:17:5c:ef:6b:d6:85:35:93:8a:e8:
                    e4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:CB:6E:22:05:BD:76:97:64:0D:73:4B:1C:54:AA:DE:77:2E:4A:B2
            X509v3 Authority Key Identifier:
                keyid:11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/3130332e32322e3234302e302f32322d3234203d3e203234353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.22.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:23:2f:e6:47:ca:9a:40:b7:74:1d:e2:33:2d:a0:4d:cd:cf:
         9b:d5:55:61:36:cb:79:b5:32:25:56:6b:0f:82:0e:e7:1f:a9:
         97:b2:a2:ed:dc:b1:98:80:1c:78:1e:88:1b:9b:c0:df:52:45:
         da:0d:73:dc:82:16:3a:2f:44:70:c0:aa:83:56:93:bb:ce:24:
         a1:9d:36:83:a1:22:1b:5f:b6:0c:40:17:62:8f:83:d5:d8:73:
         bb:f8:9d:74:87:bb:fe:af:c7:fc:1b:b9:a9:01:0d:b3:98:ec:
         f5:85:c8:9c:33:9c:cf:d9:e3:15:b1:b4:6f:03:c7:09:b3:93:
         18:de:cb:54:49:07:de:9b:ff:f9:86:c0:79:b8:b3:65:63:72:
         9d:28:8d:1c:41:cc:b7:39:45:3d:e9:1c:65:42:dd:57:1a:e0:
         d4:7e:3c:03:cf:a2:14:7a:4b:d2:22:06:2a:89:da:24:46:82:
         dc:dc:31:1d:7b:6b:e9:ec:c8:90:97:6c:f5:0c:11:97:39:e1:
         96:f8:f7:12:f9:60:ff:af:59:94:e1:e9:80:72:63:79:bd:33:
         37:42:99:dd:50:5f:59:b9:50:6c:b4:95:6a:60:66:aa:cc:a6:
         9f:da:39:44:bf:48:48:f1:85:5d:7a:41:66:65:4c:fe:af:db:
         48:de:37:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:38:35 2025 by rpki-client