Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/3130332e37372e3135362e302f32342d3234203d3e20313530393432.roa
File:                     3130332e37372e3135362e302f32342d3234203d3e20313530393432.roa (raw, json)
Hash identifier:          mutFIy9cyMdV34tHn/8oq/u/DLJVfOqwJjG4+C2iVbI=
Subject key identifier:   7D:EA:C3:60:91:5F:26:56:F3:A0:42:D7:C2:F3:7E:18:2E:2A:90:DB
Certificate issuer:       /CN=0E8637C23FD7FD1ABF91B025E48040909797EA6C
Certificate serial:       0177684C4B30A529385BDCB4DD35E5BA134289BD
Authority key identifier: 0E:86:37:C2:3F:D7:FD:1A:BF:91:B0:25:E4:80:40:90:97:97:EA:6C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/3130332e37372e3135362e302f32342d3234203d3e20313530393432.roa
Signing time:             Tue 27 May 2025 07:07:26 +0000
ROA not before:           Tue 27 May 2025 07:02:26 +0000
ROA not after:            Tue 26 May 2026 07:07:26 +0000
asID:                     150942
IP address blocks:        103.77.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl
                          rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 19:47:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:77:68:4c:4b:30:a5:29:38:5b:dc:b4:dd:35:e5:ba:13:42:89:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E8637C23FD7FD1ABF91B025E48040909797EA6C
        Validity
            Not Before: May 27 07:02:26 2025 GMT
            Not After : May 26 07:07:26 2026 GMT
        Subject: CN=7DEAC360915F2656F3A042D7C2F37E182E2A90DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e7:2c:03:e0:84:92:e2:b9:9e:7b:1b:eb:b9:
                    4b:4d:9b:3c:92:1f:47:52:4d:ff:cc:e4:bd:ae:b1:
                    1d:06:7d:74:ff:dc:bc:33:78:26:df:c8:e9:c2:a5:
                    53:09:f9:76:e7:0d:a1:07:11:6c:ee:e8:f5:9b:c8:
                    7d:fd:d1:21:1b:d2:2e:8d:6f:a1:1f:0a:7c:e1:1c:
                    53:00:6e:67:c0:1a:71:84:87:bc:a3:75:0c:c6:fb:
                    61:e8:a0:77:9b:b6:e0:59:96:d4:47:70:d2:09:46:
                    5d:ea:28:a7:39:76:e7:d0:e4:a5:ae:bd:43:4b:3c:
                    41:2d:87:49:0b:c6:71:a0:5b:d9:cc:77:ff:74:99:
                    37:7d:54:9c:d8:fc:9e:f8:36:5e:d4:08:25:c1:d3:
                    90:15:c1:4e:8c:c8:08:dc:30:5b:0e:ac:79:2f:22:
                    48:30:6a:c0:2c:33:b5:8f:3f:57:d0:f8:0a:41:0f:
                    3b:54:6f:4d:84:4e:8b:71:71:b7:bd:3b:34:40:ee:
                    47:3e:59:ab:ad:11:11:bb:a2:50:2e:7b:2c:fd:43:
                    b2:b6:8b:60:89:45:77:a4:22:8d:f6:7e:d1:d1:cf:
                    24:80:d4:a7:14:3d:db:2b:b4:48:43:c0:a6:1a:73:
                    e9:83:91:03:dc:f0:73:d1:96:7b:c1:82:e0:bf:94:
                    4a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:EA:C3:60:91:5F:26:56:F3:A0:42:D7:C2:F3:7E:18:2E:2A:90:DB
            X509v3 Authority Key Identifier:
                keyid:0E:86:37:C2:3F:D7:FD:1A:BF:91:B0:25:E4:80:40:90:97:97:EA:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/3130332e37372e3135362e302f32342d3234203d3e20313530393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:05:96:1b:00:2e:c3:cb:f4:90:b0:a7:8c:9c:76:3c:b4:15:
         b1:c2:68:54:dd:e8:5f:0f:d3:c1:94:3e:2c:99:04:d8:ee:83:
         ac:23:59:7f:55:cd:99:04:b6:5d:45:4b:0d:a3:75:46:8a:1c:
         f5:e0:9b:49:0b:ef:65:86:20:90:34:09:00:3a:27:2d:1e:08:
         26:15:37:a0:4a:65:2c:ad:14:d1:c9:a8:ae:ea:d1:c0:d2:d1:
         8d:94:44:85:b5:b6:7a:d7:dc:17:9e:81:82:d2:ce:22:d7:e4:
         cd:3c:d6:de:8c:4f:b4:0b:c0:9d:ca:5d:10:a3:58:87:49:3b:
         bb:7f:66:0a:0e:a4:62:a6:c8:d9:1a:e4:e8:cd:5c:3b:21:ab:
         18:bc:f8:2c:6a:2e:98:fa:8d:92:ed:20:32:68:ef:1a:d5:18:
         75:64:6f:22:b0:e9:75:44:0e:89:11:65:bc:3c:19:21:ca:fb:
         5b:21:9e:f7:9c:dd:9e:bc:18:0b:12:a5:7b:ca:90:db:cb:40:
         75:ee:d7:ba:99:9f:09:51:7e:a1:6f:76:26:7d:84:70:a0:96:
         05:c9:be:cd:88:af:db:ec:72:25:6a:c7:fe:e9:18:3b:3a:00:
         1b:8e:23:6a:1a:10:4f:30:57:e0:72:1c:50:18:aa:d4:74:27:
         2e:17:72:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:14:57 2025 by rpki-client