Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3130332e3138342e36342e302f32332d3234203d3e203539323738.roa
File:                     3130332e3138342e36342e302f32332d3234203d3e203539323738.roa (raw, json)
Hash identifier:          DkL978cCjpD0PQ0XgknN+Mz9vJLe59QDx419VcnHPIA=
Subject key identifier:   D6:99:53:63:5E:65:43:67:B8:8D:0E:39:4A:43:BC:E6:E3:EE:E3:C1
Certificate issuer:       /CN=3D93688202931D72322A7EE0053964A2DD8EB457
Certificate serial:       46E1D5007AAEDDDA4AB4C81116C0A85DD6D3A93B
Authority key identifier: 3D:93:68:82:02:93:1D:72:32:2A:7E:E0:05:39:64:A2:DD:8E:B4:57
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D93688202931D72322A7EE0053964A2DD8EB457.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3130332e3138342e36342e302f32332d3234203d3e203539323738.roa
Signing time:             Tue 11 Feb 2025 09:00:58 +0000
ROA not before:           Tue 11 Feb 2025 08:55:58 +0000
ROA not after:            Tue 10 Feb 2026 09:00:58 +0000
asID:                     59278
IP address blocks:        103.184.64.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.crl
                          rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D93688202931D72322A7EE0053964A2DD8EB457.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Apr 2025 22:07:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:e1:d5:00:7a:ae:dd:da:4a:b4:c8:11:16:c0:a8:5d:d6:d3:a9:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D93688202931D72322A7EE0053964A2DD8EB457
        Validity
            Not Before: Feb 11 08:55:58 2025 GMT
            Not After : Feb 10 09:00:58 2026 GMT
        Subject: CN=D69953635E654367B88D0E394A43BCE6E3EEE3C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c5:20:97:a2:81:d9:66:db:97:22:fe:06:5b:
                    51:68:b1:8a:d3:3e:f5:09:c8:4d:20:ed:dd:da:d4:
                    65:bd:50:8a:79:d9:ec:1e:ab:14:92:4b:dc:9f:74:
                    8c:7a:d9:5f:df:1f:17:ba:c0:83:01:5e:df:40:f3:
                    88:b8:10:dd:3c:c2:17:74:6d:1f:c4:94:ab:5b:db:
                    0b:57:ab:1f:b4:85:ea:34:61:1b:25:04:45:d2:83:
                    33:2d:f4:32:9f:e3:ac:97:68:73:b5:8d:06:35:51:
                    95:fa:b5:32:c4:8b:99:db:ec:16:e4:c2:5a:e5:1c:
                    ee:09:6a:63:eb:36:de:7a:92:d1:1d:3d:59:a3:4b:
                    14:9a:94:7e:95:25:13:5b:12:19:af:88:e0:91:f9:
                    04:01:89:b8:28:db:6f:c6:7d:70:d1:db:65:3e:35:
                    3e:c4:3a:4d:43:af:7f:2a:a9:ca:ac:08:b7:d4:52:
                    d1:35:42:57:f4:07:c0:77:1e:16:54:6f:8a:33:ac:
                    d3:85:e8:2a:35:43:b2:51:68:6a:1b:98:9a:bc:9b:
                    a2:c7:3c:53:29:59:37:15:d7:40:c1:9f:da:fc:6a:
                    14:39:79:07:e2:b8:28:55:9e:34:e9:a5:17:ba:cd:
                    5a:5d:c0:6e:14:be:42:b4:69:bc:e4:2b:07:3d:95:
                    cb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:99:53:63:5E:65:43:67:B8:8D:0E:39:4A:43:BC:E6:E3:EE:E3:C1
            X509v3 Authority Key Identifier:
                keyid:3D:93:68:82:02:93:1D:72:32:2A:7E:E0:05:39:64:A2:DD:8E:B4:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D93688202931D72322A7EE0053964A2DD8EB457.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3130332e3138342e36342e302f32332d3234203d3e203539323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:bb:2e:04:21:6b:75:a6:c3:9c:e9:c5:38:37:4a:00:a8:64:
         bd:26:e5:24:90:d6:fe:82:48:43:30:ad:11:a1:4d:53:d1:28:
         da:c2:4d:2a:eb:20:b3:d3:fb:82:f9:5b:70:f9:16:d2:96:3c:
         4b:2d:af:8f:79:67:eb:22:ee:c1:c9:41:1c:44:5d:f2:92:76:
         26:ca:06:92:b3:26:62:8e:2e:ab:2f:b9:fd:06:30:5a:24:54:
         0e:ed:65:b3:2d:16:5e:ac:68:25:d8:6d:82:3e:c2:f3:14:15:
         44:a5:90:31:bb:89:35:93:d4:7d:ed:32:4f:6f:7c:04:3b:ae:
         b7:88:b8:7c:6f:c6:db:57:66:81:7c:76:1f:1d:32:99:57:74:
         6a:79:39:af:cd:c6:f0:7c:5a:a4:69:1b:7f:75:e4:30:56:54:
         2d:bb:e1:30:30:1c:52:57:45:6f:03:7c:30:9b:a5:8a:d5:9a:
         cb:5b:cb:09:22:6e:3a:86:f1:21:58:28:5d:bf:9c:24:64:a3:
         e7:26:24:15:32:22:6d:65:1f:d5:d1:2e:06:11:2d:8b:b1:42:
         3e:1d:5e:0e:49:8c:fa:1e:47:13:90:63:92:6e:68:ef:a0:2a:
         7c:49:da:c6:be:4b:1b:df:60:a3:a7:c6:35:75:c4:43:85:0f:
         b1:30:b6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:36:36 2025 by rpki-client