Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/3130332e3134312e36312e302f32342d3234203d3e20313333383032.roa
File:                     3130332e3134312e36312e302f32342d3234203d3e20313333383032.roa (raw, json)
Hash identifier:          sgxUrcQvRnNHbIUuVwSUcdBBcs11g4RjDxY5LVoPdt0=
Subject key identifier:   16:74:0B:B8:5A:0A:FB:47:5A:AA:35:FF:8A:17:DF:18:6F:A2:0C:27
Certificate issuer:       /CN=BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D
Certificate serial:       24C3575581C0C3EB9C19394D986DEE6147A05335
Authority key identifier: BD:8C:DE:6F:E3:DF:9F:A1:ED:A6:CE:A4:62:F7:7E:F6:04:78:99:0D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/3130332e3134312e36312e302f32342d3234203d3e20313333383032.roa
Signing time:             Mon 02 Jun 2025 02:04:02 +0000
ROA not before:           Mon 02 Jun 2025 01:59:02 +0000
ROA not after:            Mon 01 Jun 2026 02:04:02 +0000
asID:                     133802
IP address blocks:        103.141.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl
                          rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 17:26:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:c3:57:55:81:c0:c3:eb:9c:19:39:4d:98:6d:ee:61:47:a0:53:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D
        Validity
            Not Before: Jun  2 01:59:02 2025 GMT
            Not After : Jun  1 02:04:02 2026 GMT
        Subject: CN=16740BB85A0AFB475AAA35FF8A17DF186FA20C27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c1:1c:72:a9:3b:dd:54:8f:df:0e:e0:59:b8:
                    9c:cd:59:12:7b:d6:7c:ca:78:5a:3a:fe:6c:04:5d:
                    e5:87:8f:21:67:59:12:4f:f6:70:ff:6f:08:cd:ee:
                    17:fa:fb:3e:a0:a0:89:7a:6f:1f:b0:65:3f:63:4d:
                    52:a0:93:52:5f:0a:7c:ab:8c:b8:04:93:e2:eb:7c:
                    45:ee:0b:52:96:22:be:97:0b:1e:ac:5f:d7:a2:eb:
                    12:de:b4:8d:eb:1c:10:9d:86:2b:ac:88:d9:68:af:
                    84:ac:9c:ed:e3:ef:4a:a5:8d:43:3c:2b:47:93:92:
                    6d:3b:ed:2b:8b:7e:fd:5c:a3:1c:37:ae:51:fe:70:
                    5e:08:27:3d:18:5b:a2:4a:7a:75:57:f2:74:64:1c:
                    02:81:a3:5b:ba:7f:c1:ee:ab:74:11:52:78:d8:ae:
                    3f:8e:9f:fa:f0:ef:4e:5c:d3:31:9a:03:09:71:49:
                    e2:ef:35:f2:a5:e1:0f:5f:3a:de:83:3a:9f:7b:a9:
                    f0:97:e5:34:71:c6:07:f2:be:ea:b9:f0:ff:24:14:
                    24:b7:61:40:d2:22:00:4f:ae:d6:53:b1:62:55:5f:
                    a6:6e:04:42:c1:41:4c:b2:62:56:f5:4d:a7:ca:54:
                    00:db:20:09:91:e1:29:27:30:87:89:22:fd:00:c4:
                    5f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:74:0B:B8:5A:0A:FB:47:5A:AA:35:FF:8A:17:DF:18:6F:A2:0C:27
            X509v3 Authority Key Identifier:
                keyid:BD:8C:DE:6F:E3:DF:9F:A1:ED:A6:CE:A4:62:F7:7E:F6:04:78:99:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/3130332e3134312e36312e302f32342d3234203d3e20313333383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:c1:aa:f3:9e:51:75:89:78:b3:7e:25:92:c2:1d:2e:c0:6a:
         e9:3b:ab:f9:72:ca:ad:57:05:c0:89:8f:86:db:45:0f:ad:89:
         65:8a:60:13:30:7f:7b:e4:5b:25:b9:f6:56:e9:ca:2f:c7:c1:
         53:77:5f:f3:b0:32:4d:bd:8c:19:8c:db:1f:e3:91:4b:27:11:
         3e:9f:93:ba:17:e2:14:ef:83:5d:bf:e1:aa:51:1d:30:92:09:
         a4:12:7e:d5:1f:3c:43:02:db:d1:b6:de:c1:be:fe:fe:1e:02:
         da:c1:92:01:35:f3:4a:94:e3:86:33:05:78:0c:89:f9:f0:08:
         9b:42:56:d1:5a:7c:94:6a:23:2d:c2:2e:92:47:19:86:61:9e:
         c6:ec:1f:06:9f:43:95:f2:9e:16:8d:4c:21:27:53:01:4f:98:
         ab:ce:d4:97:bf:cb:f1:08:83:7f:7c:a4:21:68:02:c2:56:03:
         74:1e:77:9a:cc:bf:ef:26:12:88:b9:04:57:82:02:08:1b:80:
         d5:72:57:ff:2a:aa:ab:aa:92:cb:5c:a8:3a:3f:7a:80:df:14:
         e9:0e:a9:50:59:cb:9a:63:df:67:57:d5:b4:c6:72:fc:c6:18:
         2f:d8:14:00:9c:19:d8:b6:da:fc:81:fe:e7:1e:c3:b8:d0:4e:
         dd:c6:68:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:51:13 2025 by rpki-client