Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/3130332e35322e3137312e302f32342d3234203d3e203633383732.roa
File:                     3130332e35322e3137312e302f32342d3234203d3e203633383732.roa (raw, json)
Hash identifier:          8GeHpy3P984a7HFNxAJwy8wpU0ns8pabD1WKnP4tvuw=
Subject key identifier:   93:28:B2:0D:CE:55:44:7B:2A:10:D9:57:9A:4E:0A:26:97:A3:43:5F
Certificate issuer:       /CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19
Certificate serial:       185C052DC5085C6A14DE55035E86408186FA1D63
Authority key identifier: 6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/3130332e35322e3137312e302f32342d3234203d3e203633383732.roa
Signing time:             Mon 02 Jun 2025 02:04:49 +0000
ROA not before:           Mon 02 Jun 2025 01:59:49 +0000
ROA not after:            Mon 01 Jun 2026 02:04:49 +0000
asID:                     63872
IP address blocks:        103.52.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl
                          rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 13:58:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:5c:05:2d:c5:08:5c:6a:14:de:55:03:5e:86:40:81:86:fa:1d:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19
        Validity
            Not Before: Jun  2 01:59:49 2025 GMT
            Not After : Jun  1 02:04:49 2026 GMT
        Subject: CN=9328B20DCE55447B2A10D9579A4E0A2697A3435F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d7:d5:e5:eb:c8:63:34:e1:a3:8f:14:ee:41:
                    43:03:14:37:4a:c0:31:19:56:c2:6d:65:a9:44:54:
                    83:50:1e:92:79:74:aa:74:8b:29:ed:30:fc:c6:d6:
                    f1:96:f8:6c:30:44:e7:fe:fd:ca:ae:af:28:02:9b:
                    a8:af:3e:ed:05:c6:1a:9c:75:f3:f0:c5:31:79:d7:
                    d6:b9:44:af:b8:42:b5:01:60:31:82:3b:44:48:9f:
                    70:09:c4:e7:db:3e:78:35:dd:12:8b:96:bf:4e:a5:
                    6b:6b:90:94:6f:5a:3d:2d:b0:35:21:51:89:50:d6:
                    5a:03:c0:96:93:33:dd:b5:4a:e6:8a:fa:14:67:04:
                    24:17:d8:75:c5:29:6e:7d:b9:a4:64:fc:a4:de:13:
                    a1:fa:19:15:62:c9:24:59:4f:70:79:2b:21:81:ad:
                    4b:8b:c8:2f:0d:67:55:01:45:e7:af:ed:2c:ef:eb:
                    94:ee:ed:52:47:5d:cd:37:89:16:81:27:b1:ff:5e:
                    69:83:ae:f0:a9:d2:3e:33:59:40:6a:d4:0c:4d:41:
                    da:9f:0b:28:22:96:81:8b:2c:c6:52:f7:7b:11:b0:
                    fd:d6:67:e4:7a:1e:f7:ae:88:4e:53:ce:d1:96:4f:
                    26:eb:5d:1d:e5:f6:7f:fd:b3:d2:fb:dd:73:91:4c:
                    15:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:28:B2:0D:CE:55:44:7B:2A:10:D9:57:9A:4E:0A:26:97:A3:43:5F
            X509v3 Authority Key Identifier:
                keyid:6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/3130332e35322e3137312e302f32342d3234203d3e203633383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.52.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:52:62:fb:ca:5d:fb:b8:b3:4b:26:a7:79:ea:8a:7d:08:2e:
         92:ff:05:77:8f:e1:73:73:92:3c:67:79:5d:31:a5:7a:77:be:
         14:9a:41:fc:ae:98:18:ee:ce:9d:a8:77:2d:9c:a7:a7:f2:31:
         7b:73:41:12:d8:57:66:2d:3a:a6:b4:fd:e5:43:12:64:43:85:
         09:23:b9:84:bf:44:5d:89:14:6a:ee:99:d1:7d:f9:4a:ba:56:
         04:fb:8d:ca:d7:7e:06:a7:5d:dd:a9:a4:95:08:1b:36:a5:b7:
         cd:fc:b9:57:6a:89:42:d6:25:cb:51:b2:6d:28:d4:12:8e:8c:
         f4:0c:30:28:8f:10:cd:78:2c:7f:8e:8c:ad:71:fd:88:b2:85:
         55:12:aa:1b:5b:59:df:b4:b2:9f:e0:c2:d6:3c:2e:2b:80:8c:
         22:78:ae:f5:e7:40:62:cc:05:e4:39:b4:4e:b1:30:27:ba:a3:
         1f:65:9d:48:a1:6d:c0:2f:d1:ca:00:e5:c2:49:88:1e:e5:fe:
         a1:1f:0c:f9:58:cc:37:8c:4f:ce:02:cb:75:1c:76:5f:27:e8:
         84:eb:77:da:a5:c0:e2:ec:41:43:e7:d2:a6:5f:95:df:71:34:
         85:1a:aa:f0:87:84:51:6d:c3:d5:80:02:4f:18:4a:6e:5f:93:
         c0:70:2d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:52:20 2025 by rpki-client