Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/3130332e3135382e3130332e302f32342d3234203d3e203435333137.roa
File:                     3130332e3135382e3130332e302f32342d3234203d3e203435333137.roa (raw, json)
Hash identifier:          w2a2u6qdVWhlCkR970rhojHnih1HccbKX6TZhhdF+IA=
Subject key identifier:   AC:5A:91:12:36:CA:78:47:F6:0D:A0:DF:35:04:3A:5A:A1:83:A6:39
Certificate issuer:       /CN=2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9
Certificate serial:       2426626600D3B43B2982A39FC5BB2AA93416CAE4
Authority key identifier: 2E:EF:78:44:53:62:AF:4F:7C:AE:B2:41:FA:E6:B9:74:7E:C2:D2:F9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/3130332e3135382e3130332e302f32342d3234203d3e203435333137.roa
Signing time:             Thu 05 Jun 2025 05:02:53 +0000
ROA not before:           Thu 05 Jun 2025 04:57:53 +0000
ROA not after:            Thu 04 Jun 2026 05:02:53 +0000
asID:                     45317
IP address blocks:        103.158.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.crl
                          rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 10:41:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:26:62:66:00:d3:b4:3b:29:82:a3:9f:c5:bb:2a:a9:34:16:ca:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9
        Validity
            Not Before: Jun  5 04:57:53 2025 GMT
            Not After : Jun  4 05:02:53 2026 GMT
        Subject: CN=AC5A911236CA7847F60DA0DF35043A5AA183A639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:1e:60:76:3f:94:d6:68:79:90:70:1e:d3:68:
                    b8:87:04:c6:28:92:45:3c:58:99:ba:0a:dc:b8:91:
                    f7:5a:74:e5:26:95:b7:b6:fd:00:0b:15:71:86:c9:
                    c2:67:54:48:d1:c2:96:bb:8d:aa:d8:d0:14:0b:a3:
                    72:4e:c0:d5:f6:e0:e8:f4:31:d7:0c:8e:4c:cb:20:
                    8b:12:c0:d0:c0:5b:33:ba:63:c9:57:e5:3c:33:aa:
                    ca:de:3d:b4:b5:20:df:45:c8:95:fa:4e:d1:6f:20:
                    ac:7e:42:3e:69:dd:0c:b6:cb:a6:51:51:b1:74:8a:
                    57:d3:33:40:7c:c7:a0:44:5c:cd:be:2e:79:00:a8:
                    fc:e5:fc:68:a7:48:22:3c:82:e6:a0:e7:fa:bf:99:
                    41:6a:b7:90:25:16:e5:88:b5:2b:eb:93:28:c9:d5:
                    52:9c:f0:52:c7:80:71:49:b0:e7:12:f1:41:97:b9:
                    c3:32:b4:6d:33:cc:b7:7b:43:21:37:60:06:86:8a:
                    e5:ed:c1:01:06:dd:f1:98:d5:a4:d7:46:30:24:85:
                    82:ca:e6:a3:e6:f7:e1:42:71:b3:a0:9e:a8:3b:82:
                    ba:cd:fe:50:10:ad:79:ba:23:92:e3:ee:40:e1:4e:
                    c1:4c:7a:8b:0e:e4:71:34:a6:c2:f7:84:7c:1e:53:
                    72:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:5A:91:12:36:CA:78:47:F6:0D:A0:DF:35:04:3A:5A:A1:83:A6:39
            X509v3 Authority Key Identifier:
                keyid:2E:EF:78:44:53:62:AF:4F:7C:AE:B2:41:FA:E6:B9:74:7E:C2:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/3130332e3135382e3130332e302f32342d3234203d3e203435333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:64:d4:d6:fe:f4:33:1f:23:b8:cc:22:7a:04:fe:37:27:7e:
         04:55:63:80:db:99:57:0d:c6:bc:7d:f7:77:07:f3:8e:1b:8d:
         07:ee:48:07:f0:7f:be:79:96:62:92:78:a7:fe:be:67:5b:47:
         35:2d:ca:34:5a:e1:fd:e4:20:ed:2e:f0:37:b1:29:a9:50:4b:
         ea:82:7a:ee:8c:e0:7f:2f:fc:30:69:fe:e2:40:e3:bf:46:c0:
         f7:6f:38:c7:84:e6:1e:80:07:39:30:33:69:eb:e9:a6:4b:ff:
         18:d6:5b:42:d8:76:1c:e1:d5:09:dc:71:b2:a9:a8:4a:f0:c1:
         d3:f7:e4:24:01:fc:79:1a:98:30:39:b4:64:82:2e:22:1f:c7:
         9f:08:10:b9:04:64:c5:d2:10:53:b6:03:53:79:ac:7c:ad:ba:
         6a:d0:0c:8d:63:f3:1b:6a:c7:90:b8:a1:35:97:81:be:d7:cc:
         a2:c8:1e:a6:5b:d6:b5:59:bc:55:ba:dd:70:2d:3f:77:4e:eb:
         3a:2e:0c:6c:ef:01:66:20:d4:36:b1:78:a5:10:40:94:a7:30:
         d8:04:fa:f4:de:93:08:28:af:d9:be:d8:40:6b:53:45:88:a5:
         b9:ea:e6:e8:ae:ac:92:38:0b:f2:e8:f6:de:e1:a0:84:aa:46:
         65:83:98:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:55:52 2025 by rpki-client