Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/3130332e3130352e3231372e302f32342d3234203d3e20313336383739.roa
File:                     3130332e3130352e3231372e302f32342d3234203d3e20313336383739.roa (raw, json)
Hash identifier:          53ft/WhPjye+nSDyUftcJDnYQUtRg5S6KBcOixjRbkM=
Subject key identifier:   03:6D:7E:E3:5D:EC:A8:C0:88:27:C3:23:35:89:3C:94:A0:10:94:39
Certificate issuer:       /CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1
Certificate serial:       76EE0F3AEB02ED8E8790F4A3121B1A38A091D863
Authority key identifier: 22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/3130332e3130352e3231372e302f32342d3234203d3e20313336383739.roa
Signing time:             Mon 01 Jul 2024 01:05:02 +0000
ROA not before:           Mon 01 Jul 2024 01:00:02 +0000
ROA not after:            Mon 30 Jun 2025 01:05:02 +0000
asID:                     136879
IP address blocks:        103.105.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl
                          rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Feb 2025 12:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:ee:0f:3a:eb:02:ed:8e:87:90:f4:a3:12:1b:1a:38:a0:91:d8:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1
        Validity
            Not Before: Jul  1 01:00:02 2024 GMT
            Not After : Jun 30 01:05:02 2025 GMT
        Subject: CN=036D7EE35DECA8C08827C32335893C94A0109439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:59:c6:51:bd:19:06:d7:1e:68:b6:ad:94:29:
                    1b:17:25:9b:60:78:64:c8:62:c0:d1:44:89:3d:e9:
                    fc:f4:c7:03:26:65:5b:3c:20:4c:0e:82:c1:38:1c:
                    02:09:ca:27:07:94:4e:17:5a:3e:ba:e8:51:11:c9:
                    48:d4:35:c6:de:30:d1:16:88:27:d5:1c:0b:f2:59:
                    c6:0f:6a:85:1e:e5:57:9e:c8:88:cf:3f:df:3c:53:
                    59:7d:f3:9c:d2:f1:80:20:30:92:ce:71:8d:f5:25:
                    8e:8f:83:6a:3a:96:0e:6a:23:90:73:3d:35:1d:98:
                    55:7b:9f:2d:7d:eb:1f:7f:5c:7a:c5:12:c4:55:a9:
                    38:2b:9d:11:d8:c3:dd:04:ca:20:82:1a:fc:24:05:
                    03:66:12:53:11:35:1a:80:07:61:0b:83:9b:60:27:
                    ee:58:80:7e:83:83:d3:22:46:45:b3:bd:fb:1a:50:
                    2b:de:06:e9:6c:b2:a1:1b:4a:d2:4b:09:cc:a7:5e:
                    18:15:35:1e:65:cc:df:7f:d5:09:52:6b:73:6c:9b:
                    e1:b5:65:e1:27:c2:85:3d:19:d2:29:ec:54:11:fc:
                    47:2e:06:e8:3f:12:b6:63:94:04:7d:bb:a9:9e:01:
                    cb:75:9a:c4:60:36:a6:bd:7b:4a:36:bc:d2:f7:9a:
                    c1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:6D:7E:E3:5D:EC:A8:C0:88:27:C3:23:35:89:3C:94:A0:10:94:39
            X509v3 Authority Key Identifier:
                keyid:22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/3130332e3130352e3231372e302f32342d3234203d3e20313336383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:24:c7:64:06:8e:24:4c:af:91:ff:22:ef:89:72:cc:6d:f2:
         87:fb:c3:e4:0c:39:59:9b:df:a1:8b:20:77:8f:14:cf:13:c4:
         7d:b4:6d:b6:64:d2:28:a1:27:86:68:d9:02:cb:cd:2d:ca:6b:
         c2:07:bc:89:c4:86:e8:6e:3f:b0:f2:a5:14:07:44:b1:ad:4e:
         90:64:56:59:8d:e5:54:5c:62:46:09:cf:09:6d:4d:f9:05:98:
         bc:c5:29:6e:ae:f3:12:80:8e:ea:2c:d4:78:28:03:38:6d:ea:
         9d:fc:a3:b8:7a:3e:a4:f9:e6:1c:e3:79:97:88:2c:42:bd:ca:
         41:c1:4f:e8:02:b9:22:92:34:b1:2d:7d:cb:1f:fd:0e:10:22:
         3f:67:c1:61:7e:24:8f:90:f0:54:49:66:4d:7e:11:d6:a3:9d:
         33:41:dc:e0:ea:d8:7f:83:25:ad:99:6e:ba:f7:ad:5a:4c:b3:
         ec:bf:dd:26:16:c3:af:c8:cf:6e:92:20:e0:7a:54:68:03:31:
         99:0d:ae:58:49:96:b5:1a:6e:a8:d5:fa:9a:e8:1c:9d:04:78:
         25:5d:8d:af:08:cc:b7:13:23:e2:15:e4:7b:75:36:3e:92:c0:
         00:4a:0a:68:28:d6:bf:d8:dc:25:95:c1:c7:84:56:67:32:18:
         03:56:6c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:03:36 2025 by rpki-client