Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/3130332e3231372e3230382e302f32322d3234203d3e203338373630.roa
File:                     3130332e3231372e3230382e302f32322d3234203d3e203338373630.roa (raw, json)
Hash identifier:          C1fWM39iM3F6U+59gsqeYJ83me8iwLln6AeCDUtsAG4=
Subject key identifier:   9E:7A:15:C8:0A:5C:B5:91:36:B5:9D:01:56:9D:7A:B1:55:3B:8C:EC
Certificate issuer:       /CN=B7260D30835B9D812F7044ECE96F4FB8F698379C
Certificate serial:       32699E7740FC141CC4E36FED8F242B0317FCED69
Authority key identifier: B7:26:0D:30:83:5B:9D:81:2F:70:44:EC:E9:6F:4F:B8:F6:98:37:9C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7260D30835B9D812F7044ECE96F4FB8F698379C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/3130332e3231372e3230382e302f32322d3234203d3e203338373630.roa
Signing time:             Wed 14 May 2025 08:00:00 +0000
ROA not before:           Wed 14 May 2025 07:55:00 +0000
ROA not after:            Wed 13 May 2026 08:00:00 +0000
asID:                     38760
IP address blocks:        103.217.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/B7260D30835B9D812F7044ECE96F4FB8F698379C.crl
                          rsync://repo-rpki.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/B7260D30835B9D812F7044ECE96F4FB8F698379C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7260D30835B9D812F7044ECE96F4FB8F698379C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Jun 2025 02:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:69:9e:77:40:fc:14:1c:c4:e3:6f:ed:8f:24:2b:03:17:fc:ed:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7260D30835B9D812F7044ECE96F4FB8F698379C
        Validity
            Not Before: May 14 07:55:00 2025 GMT
            Not After : May 13 08:00:00 2026 GMT
        Subject: CN=9E7A15C80A5CB59136B59D01569D7AB1553B8CEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:63:17:14:6b:6b:c3:51:ff:92:4f:99:9f:6d:
                    6c:c4:45:62:a3:e9:17:c9:f4:aa:2a:f4:20:8a:5f:
                    ac:ac:aa:d0:67:e9:ab:1b:44:b1:b2:3f:f3:51:e6:
                    f0:bd:a3:d4:f7:10:1a:66:5d:a8:ed:57:50:61:ce:
                    46:55:42:8b:33:da:a9:c6:a3:00:47:2f:c8:67:d7:
                    b8:fd:b0:67:df:f7:5b:10:11:4b:5e:8d:32:8b:62:
                    46:e2:38:cd:5d:50:bd:1e:42:16:07:53:f3:1b:52:
                    c1:e6:8a:c4:70:4b:37:ec:7b:bd:22:fd:37:f6:66:
                    e8:24:50:1a:78:c6:23:56:60:f0:98:c3:51:46:92:
                    ea:6e:56:58:a1:09:a0:2e:b2:fa:6e:0e:60:8f:d5:
                    26:38:f8:06:7c:f1:8c:62:c4:db:c4:0a:6a:2f:d4:
                    25:d1:d9:8e:a7:4a:49:da:72:8a:41:cb:09:c3:f4:
                    79:d0:e6:6e:c6:37:09:77:8e:d3:8a:98:aa:79:f0:
                    19:6e:0d:53:84:56:76:fb:90:de:75:9d:4d:1a:68:
                    7f:23:2d:0d:2b:3b:e4:51:0d:25:3d:c2:26:fb:f4:
                    78:80:2f:f9:9f:e3:8b:5a:5e:02:37:a6:f2:bc:85:
                    e8:12:aa:32:54:26:82:69:30:f8:e3:7d:09:09:b9:
                    b7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:7A:15:C8:0A:5C:B5:91:36:B5:9D:01:56:9D:7A:B1:55:3B:8C:EC
            X509v3 Authority Key Identifier:
                keyid:B7:26:0D:30:83:5B:9D:81:2F:70:44:EC:E9:6F:4F:B8:F6:98:37:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/B7260D30835B9D812F7044ECE96F4FB8F698379C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7260D30835B9D812F7044ECE96F4FB8F698379C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/3130332e3231372e3230382e302f32322d3234203d3e203338373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.217.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d9:fb:67:d9:ec:a3:af:a3:0f:03:73:55:c7:37:d3:8a:8d:06:
         61:67:99:fa:c9:16:7b:88:c5:d4:94:c9:c0:f9:dd:23:fd:1c:
         66:1c:33:96:19:ca:46:65:27:bb:98:81:3a:30:0e:11:2e:65:
         90:56:64:eb:c7:25:3d:65:b1:0d:a1:5e:00:4d:b4:d0:7c:03:
         1d:a1:b7:a7:96:5e:e3:6e:64:57:5c:ea:bf:c9:bc:bd:d6:96:
         f0:9c:a2:a2:36:11:67:1f:35:ee:6f:37:6c:93:97:19:df:06:
         9c:28:0e:10:c7:02:b9:95:62:5c:be:cb:bc:ad:0e:38:25:98:
         82:8e:5a:6e:2f:a5:e0:00:28:1b:b5:f3:5e:b9:d3:07:e4:f4:
         ad:e0:b0:1d:50:36:a9:77:6c:ec:99:06:c2:15:ea:56:8e:94:
         b1:f0:82:29:25:c0:0c:6c:03:2e:58:07:5c:7e:76:23:f2:80:
         58:76:58:3a:21:fe:1a:02:3d:c9:0c:8b:3a:96:ff:8b:87:de:
         06:20:70:e2:72:ae:c9:88:bc:d1:f8:11:59:25:6e:54:38:4e:
         34:01:67:50:2e:ce:dd:91:60:8d:20:5a:e0:76:ef:62:82:d7:
         49:4f:f2:c1:b7:39:80:e5:b9:48:cb:0c:f9:5d:b2:10:8e:a7:
         8d:c9:eb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:07:15 2025 by rpki-client