Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/3130332e3137332e3133332e302f32342d3234203d3e20313437303834.roa
File:                     3130332e3137332e3133332e302f32342d3234203d3e20313437303834.roa (raw, json)
Hash identifier:          RhPETTtt6gaQ4OMJ7F1vFmkR8a1hA84ISSi5ZYyEB1o=
Subject key identifier:   55:26:61:E5:F3:0B:72:37:6C:E5:5B:7A:AD:A7:A3:C2:A3:0C:08:9A
Certificate issuer:       /CN=26AE16DF2BF0FD5184FEC655250D244739FA9FC4
Certificate serial:       6DFE2AB77DB8FD36A29CA897D41ECF04518DC393
Authority key identifier: 26:AE:16:DF:2B:F0:FD:51:84:FE:C6:55:25:0D:24:47:39:FA:9F:C4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/3130332e3137332e3133332e302f32342d3234203d3e20313437303834.roa
Signing time:             Sat 05 Apr 2025 05:11:11 +0000
ROA not before:           Sat 05 Apr 2025 05:06:11 +0000
ROA not after:            Sat 04 Apr 2026 05:11:11 +0000
asID:                     147084
IP address blocks:        103.173.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.crl
                          rsync://repo-rpki.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Apr 2025 07:08:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:fe:2a:b7:7d:b8:fd:36:a2:9c:a8:97:d4:1e:cf:04:51:8d:c3:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26AE16DF2BF0FD5184FEC655250D244739FA9FC4
        Validity
            Not Before: Apr  5 05:06:11 2025 GMT
            Not After : Apr  4 05:11:11 2026 GMT
        Subject: CN=552661E5F30B72376CE55B7AADA7A3C2A30C089A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:14:2f:ef:6f:ed:13:f4:0a:12:73:d9:9e:40:
                    72:24:11:be:4a:0e:61:dd:dc:d0:68:ef:63:18:22:
                    d7:ef:c3:06:74:a2:8f:74:3c:fb:07:37:1d:88:ab:
                    4a:50:96:a1:23:d6:2b:49:98:21:41:ba:04:e4:b2:
                    1c:a4:4c:6e:6a:f6:db:39:a9:a9:c5:a7:ed:66:75:
                    8b:55:92:57:90:7c:f5:b8:38:bf:58:d4:2f:43:e3:
                    df:ee:7f:89:91:37:1a:e5:f9:70:93:45:f0:35:7c:
                    2d:7b:15:da:07:72:d6:86:73:8c:70:96:aa:28:bb:
                    3e:5b:46:5a:b8:8a:81:4a:c0:b8:58:42:99:51:cd:
                    b6:1f:99:2f:e6:2e:ac:7e:32:77:2a:2b:87:32:8d:
                    33:ed:52:75:e3:d6:6e:fa:6b:c0:6c:6f:99:27:85:
                    b5:63:1f:a6:2f:4a:67:72:90:66:c1:4c:af:32:0f:
                    fe:a5:e1:37:d3:84:68:97:c9:be:e2:e6:d0:4b:ec:
                    a1:3e:e4:88:16:62:fa:fd:fb:49:c2:94:7f:1f:c6:
                    f8:bc:78:52:4b:87:1b:15:49:52:a8:5a:f5:31:7d:
                    98:5a:38:4b:40:cd:c4:49:72:be:8d:c6:e5:ea:27:
                    12:50:1a:ed:c2:46:58:1b:7f:4a:4e:65:25:8e:9d:
                    76:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:26:61:E5:F3:0B:72:37:6C:E5:5B:7A:AD:A7:A3:C2:A3:0C:08:9A
            X509v3 Authority Key Identifier:
                keyid:26:AE:16:DF:2B:F0:FD:51:84:FE:C6:55:25:0D:24:47:39:FA:9F:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/3130332e3137332e3133332e302f32342d3234203d3e20313437303834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:92:4b:83:87:07:42:6b:b6:2d:ab:91:f2:6d:20:2d:7d:f6:
         35:2c:bf:75:2b:dc:76:b2:4e:41:7c:07:c6:d9:6f:a5:9d:63:
         ba:be:54:e2:14:62:99:e9:b9:27:16:34:a5:09:da:a2:86:f9:
         d5:cf:a6:a8:2c:8d:37:d0:1a:76:5d:58:01:77:e2:b7:04:46:
         c1:82:b2:6e:f6:8f:ab:c2:cf:aa:bb:f0:56:57:b6:7e:4a:bc:
         16:b5:8f:60:51:c1:c5:0b:6d:42:4c:3f:c2:45:82:5c:88:4b:
         b6:86:8f:58:96:00:20:7c:5c:2d:72:46:32:35:71:01:f1:e1:
         ef:58:03:57:1a:59:2a:0f:03:39:25:43:ab:ed:7c:74:60:ca:
         12:77:d2:70:7a:7d:d0:04:94:c0:c3:77:84:f8:1c:c1:99:c2:
         0c:0a:c1:17:ab:ee:6a:b5:5e:e9:04:8c:61:20:4f:ed:e8:c5:
         f2:eb:ea:88:f1:32:b5:9c:1c:85:34:66:17:74:34:8f:12:c4:
         1a:0c:62:64:fc:3d:87:51:fc:55:e4:c3:29:ba:7a:f2:19:25:
         8a:9e:87:ba:a5:dd:58:f4:4a:11:35:53:f4:70:03:4c:cf:39:
         bc:49:8c:57:c1:37:2e:13:00:0d:a3:c7:4c:77:28:f1:df:03:
         d6:6a:fa:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:56:57 2025 by rpki-client