Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3130332e31372e3234342e302f32322d3234203d3e203535363636.roa
File:                     3130332e31372e3234342e302f32322d3234203d3e203535363636.roa (raw, json)
Hash identifier:          pKw5LGAwZ02j8bp/435WnbI3b3bMVBsuwWMCKuHmspo=
Subject key identifier:   9C:6C:22:2B:5B:E4:5C:A2:A7:8E:00:6C:97:07:21:29:87:E3:99:32
Certificate issuer:       /CN=C00163880F235714759920507217F2A7D557C953
Certificate serial:       41A17E5589615337850327EF7374BD4ECDD54519
Authority key identifier: C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3130332e31372e3234342e302f32322d3234203d3e203535363636.roa
Signing time:             Mon 02 Jun 2025 02:05:08 +0000
ROA not before:           Mon 02 Jun 2025 02:00:08 +0000
ROA not after:            Mon 01 Jun 2026 02:05:08 +0000
asID:                     55666
IP address blocks:        103.17.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl
                          rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 13:19:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:a1:7e:55:89:61:53:37:85:03:27:ef:73:74:bd:4e:cd:d5:45:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C00163880F235714759920507217F2A7D557C953
        Validity
            Not Before: Jun  2 02:00:08 2025 GMT
            Not After : Jun  1 02:05:08 2026 GMT
        Subject: CN=9C6C222B5BE45CA2A78E006C9707212987E39932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a6:7c:81:68:b1:f8:b0:32:48:25:3b:aa:d6:
                    b6:6b:07:7c:11:c4:43:f3:3b:96:fd:2b:d4:b8:63:
                    61:ef:b6:a9:19:15:60:93:3d:1f:5e:74:34:7e:83:
                    b1:95:f1:0c:b2:c4:54:a7:3d:39:76:e0:f1:b4:db:
                    ef:a9:de:1a:89:62:4a:6e:31:6b:c6:61:f9:63:de:
                    93:28:45:2a:b9:79:58:1f:05:3a:2c:36:01:93:3f:
                    b2:88:1d:40:e8:83:fa:b8:1d:4a:71:0e:1a:ca:7e:
                    14:26:7a:e8:dd:19:5f:c3:6b:f4:c5:1b:88:72:b9:
                    2a:66:09:8c:3b:c5:db:74:64:cb:97:67:d3:7f:a2:
                    c2:a8:33:23:76:80:c0:4d:51:2f:ac:67:d2:de:ab:
                    28:81:71:20:1c:28:30:f8:d0:ca:8f:25:39:5a:59:
                    f5:0e:1b:14:d8:d0:5a:60:a4:57:e1:85:0a:80:02:
                    32:4b:5b:c8:1d:e9:e9:b1:6c:1a:c4:2c:db:bd:17:
                    78:26:c1:e5:0e:cf:1d:b3:9f:ec:74:39:8d:f1:3b:
                    e7:f7:c9:93:1d:e7:92:3c:4e:83:4a:df:d4:d1:ea:
                    7c:ea:a6:eb:34:7b:ce:47:d7:54:00:26:48:db:11:
                    b3:03:8d:94:e1:40:01:8b:bd:16:37:f2:c2:3a:cf:
                    15:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:6C:22:2B:5B:E4:5C:A2:A7:8E:00:6C:97:07:21:29:87:E3:99:32
            X509v3 Authority Key Identifier:
                keyid:C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3130332e31372e3234342e302f32322d3234203d3e203535363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:54:8a:2c:99:42:a1:cf:8a:49:b5:03:16:0f:ae:ee:ef:f3:
         fe:22:08:69:d4:ae:36:d3:60:a6:80:36:d0:36:6b:de:a0:e3:
         2e:06:04:a6:2d:27:3b:34:d6:e8:68:aa:9a:54:84:9f:64:6a:
         48:e5:97:0e:42:ee:30:0e:d4:1a:a2:72:a2:f3:10:de:f9:e2:
         8b:5e:ea:a8:09:73:ee:5a:9e:81:b9:a5:00:93:72:fc:94:03:
         81:5b:d5:c3:bd:72:87:b9:ea:a6:7d:81:fa:a4:2f:41:8d:aa:
         36:fa:94:c4:bd:1e:95:d0:ac:72:24:59:83:41:90:33:09:ec:
         06:5a:65:1d:fc:d8:16:1a:f2:60:52:60:3d:5a:75:84:19:3a:
         67:a7:0b:a9:2b:b6:32:db:a1:24:a5:bf:a0:a4:dd:0c:6f:44:
         de:55:42:a7:b3:b8:b8:cd:e2:92:96:97:f0:20:24:96:74:eb:
         88:7b:3b:57:ab:13:41:0d:0f:8d:df:c2:5e:11:bc:ed:84:10:
         de:d9:2f:cc:27:8a:27:d1:31:6c:d1:1d:e8:36:b4:4b:74:81:
         6c:33:c6:01:7a:32:e3:55:40:d8:d7:47:e1:65:d1:5a:7b:8c:
         24:ae:06:15:32:00:2b:ae:41:12:34:d5:c1:2e:28:04:b1:85:
         57:9d:56:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:55:11 2025 by rpki-client