Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/3130332e3136322e3232322e302f32342d3234203d3e20313431363635.roa
File:                     3130332e3136322e3232322e302f32342d3234203d3e20313431363635.roa (raw, json)
Hash identifier:          otSYaOpWUX7/R5silYI2qFwHrea2Nhn73//fdSkzDls=
Subject key identifier:   AC:EA:B2:C3:EE:40:E0:CB:E9:4F:9A:BA:B1:A4:F2:CE:BC:A9:59:D0
Certificate issuer:       /CN=E44D4DE701D932713536A084F76894A6B0473F5E
Certificate serial:       44A6BB2197C75A8257827C7A222828CFC64C7747
Authority key identifier: E4:4D:4D:E7:01:D9:32:71:35:36:A0:84:F7:68:94:A6:B0:47:3F:5E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E44D4DE701D932713536A084F76894A6B0473F5E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/3130332e3136322e3232322e302f32342d3234203d3e20313431363635.roa
Signing time:             Sat 24 May 2025 16:00:01 +0000
ROA not before:           Sat 24 May 2025 15:55:01 +0000
ROA not after:            Sat 23 May 2026 16:00:01 +0000
asID:                     141665
IP address blocks:        103.162.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.crl
                          rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E44D4DE701D932713536A084F76894A6B0473F5E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 03:18:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:a6:bb:21:97:c7:5a:82:57:82:7c:7a:22:28:28:cf:c6:4c:77:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E44D4DE701D932713536A084F76894A6B0473F5E
        Validity
            Not Before: May 24 15:55:01 2025 GMT
            Not After : May 23 16:00:01 2026 GMT
        Subject: CN=ACEAB2C3EE40E0CBE94F9ABAB1A4F2CEBCA959D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b1:69:4d:e1:fc:2c:4b:ec:d6:21:bb:52:ae:
                    87:6d:ca:69:c2:7c:02:09:e7:b1:3e:fe:36:ac:e6:
                    86:39:1f:e1:50:0a:1d:86:ba:96:4a:2e:41:c1:e9:
                    54:24:65:c0:dd:01:d3:5c:92:b5:01:c8:df:cd:e5:
                    d2:86:5d:27:42:46:9d:aa:f8:3d:fb:65:24:b6:0f:
                    ff:1d:ba:de:d8:a3:5b:c7:1f:f8:88:19:e0:7c:b6:
                    34:ec:b9:1a:01:b7:ad:94:2f:33:bc:43:54:04:60:
                    64:6d:ed:06:35:54:96:a0:9b:32:bf:db:45:af:f2:
                    18:68:a4:53:f6:b8:38:b7:0d:6a:b2:e0:7e:9d:66:
                    ff:5a:05:2e:b6:e2:7f:11:8b:f4:5f:fb:8e:d6:c0:
                    51:3c:5f:1a:ae:3b:ca:41:b0:9a:aa:1c:51:ab:82:
                    87:3f:1b:fe:e2:3e:2e:6d:87:db:d9:17:f0:ce:da:
                    21:c7:d3:98:bf:fd:be:25:f9:27:e9:f9:a3:95:4f:
                    15:db:f2:4c:fd:2c:8e:be:13:f8:37:76:0e:d0:39:
                    bc:e8:2d:f5:f1:95:6e:f8:e4:21:dd:ef:af:3a:38:
                    8b:fc:98:90:5a:46:9d:03:c0:95:0c:1b:41:51:c3:
                    53:41:80:6a:97:7d:1b:13:78:21:b9:f5:ac:b1:fd:
                    c7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:EA:B2:C3:EE:40:E0:CB:E9:4F:9A:BA:B1:A4:F2:CE:BC:A9:59:D0
            X509v3 Authority Key Identifier:
                keyid:E4:4D:4D:E7:01:D9:32:71:35:36:A0:84:F7:68:94:A6:B0:47:3F:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E44D4DE701D932713536A084F76894A6B0473F5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/3130332e3136322e3232322e302f32342d3234203d3e20313431363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:d6:22:85:d9:76:76:36:e2:ac:87:1b:5f:48:45:b1:80:f0:
         f3:09:ca:06:10:2f:3d:e6:83:77:32:99:ce:ad:41:89:8a:6f:
         bb:7b:e4:5a:db:b3:aa:96:87:5b:dd:fb:59:2f:04:29:e6:8c:
         97:47:0e:68:dd:23:e1:b3:92:c6:03:c7:ac:6b:88:b3:2c:49:
         e6:95:b3:83:15:4c:65:71:c4:03:b6:c7:da:7d:32:4c:d0:dd:
         2f:08:c7:e3:77:9d:2f:00:9a:90:3d:03:8b:d9:91:90:5d:1d:
         a9:e0:47:2b:2a:6c:d0:a2:1a:2e:6d:e7:c1:33:ad:20:f8:c4:
         85:3f:50:47:79:4a:55:13:b3:0e:f6:fc:1e:03:8c:60:af:ef:
         c1:40:78:76:37:f7:f4:85:33:2e:6c:dc:c2:2c:19:af:30:32:
         9b:14:0a:fa:eb:f5:eb:a6:87:0c:37:92:3f:75:b6:40:ee:ed:
         35:c2:bc:c5:18:9e:08:48:eb:d2:cd:46:cb:de:82:67:36:c5:
         b3:79:8b:17:88:db:f7:d0:c7:62:02:3b:d4:9c:8f:16:54:a4:
         11:ec:53:f8:45:d6:b2:4b:c9:44:82:5e:9e:0d:01:f3:38:86:
         fb:6a:d9:cf:1c:14:c9:8e:a9:cc:27:f8:b2:e2:eb:3d:e6:3c:
         b9:3f:60:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:07:10 2025 by rpki-client