Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/3130332e3136372e3130372e302f32342d3234203d3e203538333639.roa
File:                     3130332e3136372e3130372e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          5KjLY0cT2Rgqo94D9xVgjaPbsdC93ycJskyyRFx1mYE=
Subject key identifier:   1E:1E:42:87:33:54:D7:4A:97:8B:1F:62:95:25:25:E1:8E:0A:65:1A
Certificate issuer:       /CN=C8AC2212A272ECEAE88D5232072578922C0E2E05
Certificate serial:       361FAAB7605B61FE595A22DF0F7FC35DCCC39636
Authority key identifier: C8:AC:22:12:A2:72:EC:EA:E8:8D:52:32:07:25:78:92:2C:0E:2E:05
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8AC2212A272ECEAE88D5232072578922C0E2E05.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/3130332e3136372e3130372e302f32342d3234203d3e203538333639.roa
Signing time:             Sat 15 Feb 2025 09:00:02 +0000
ROA not before:           Sat 15 Feb 2025 08:55:02 +0000
ROA not after:            Sat 14 Feb 2026 09:00:02 +0000
asID:                     58369
IP address blocks:        103.167.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.crl
                          rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8AC2212A272ECEAE88D5232072578922C0E2E05.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Apr 2025 19:30:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:1f:aa:b7:60:5b:61:fe:59:5a:22:df:0f:7f:c3:5d:cc:c3:96:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8AC2212A272ECEAE88D5232072578922C0E2E05
        Validity
            Not Before: Feb 15 08:55:02 2025 GMT
            Not After : Feb 14 09:00:02 2026 GMT
        Subject: CN=1E1E42873354D74A978B1F62952525E18E0A651A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:da:4b:f4:17:fd:4f:e7:90:9d:51:7e:87:39:
                    29:98:76:12:03:68:36:e3:7a:8c:e9:d9:c0:ef:ac:
                    15:2f:ad:1b:fb:43:61:1a:ad:57:49:d0:f0:d3:a7:
                    c7:d2:d2:d0:4d:90:30:f6:b4:51:0a:f0:d8:e4:fd:
                    60:3f:2f:f6:b8:95:a1:e1:ce:9e:34:54:d9:0c:97:
                    b2:35:ba:dd:b5:82:9c:a8:cf:8b:70:11:97:7d:67:
                    22:d7:f5:d9:99:51:23:2c:d3:88:6b:99:ee:f2:6f:
                    9a:1b:c2:97:92:43:e0:19:05:b1:5e:5b:a0:bf:66:
                    e4:dd:e7:aa:c4:6c:54:73:22:7f:3e:25:7d:90:b0:
                    df:13:84:3d:c2:66:cf:dc:97:ea:e2:ba:bc:12:99:
                    8c:45:e3:74:a6:c0:04:d0:70:b2:fd:cd:c6:48:56:
                    d1:1a:2a:77:42:a7:04:75:19:f3:94:2f:e1:5b:9d:
                    5b:79:fa:b7:71:28:23:11:d6:82:2e:95:17:19:c2:
                    cc:f4:d7:18:97:5d:7a:d4:e4:fd:32:7c:9d:47:2b:
                    ff:91:c5:ed:8a:97:72:ef:6c:a9:80:8d:51:a8:e7:
                    68:f5:80:4f:7e:ba:4b:c2:8f:bb:0d:09:91:bd:6f:
                    69:47:67:7a:33:b3:9d:97:ea:7e:e2:e0:37:60:18:
                    3a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:1E:42:87:33:54:D7:4A:97:8B:1F:62:95:25:25:E1:8E:0A:65:1A
            X509v3 Authority Key Identifier:
                keyid:C8:AC:22:12:A2:72:EC:EA:E8:8D:52:32:07:25:78:92:2C:0E:2E:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/C8AC2212A272ECEAE88D5232072578922C0E2E05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8AC2212A272ECEAE88D5232072578922C0E2E05.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c81e9238-4267-48ef-b02e-1d7d04400941/0/3130332e3136372e3130372e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:e0:ec:a9:f0:d1:ba:5e:0a:20:f4:06:69:37:19:de:0d:43:
         bc:54:ec:fd:44:bb:b5:eb:38:bd:fd:e2:1a:91:77:03:db:05:
         1e:5b:53:d1:71:ab:81:90:ea:bd:3e:a1:2d:36:dc:7c:da:bc:
         34:bf:c1:ad:5a:2a:54:ec:bf:45:9f:8c:f0:82:c6:51:48:3f:
         b5:8c:b3:ee:e8:14:36:b9:0d:62:f4:b8:31:cb:e7:5d:3a:fc:
         e1:11:5d:db:78:db:08:34:d2:99:af:54:2e:98:4b:6b:b6:af:
         a8:a8:98:7d:ec:77:d5:c5:8a:16:42:65:a8:b7:96:36:a5:5b:
         9c:be:f7:cf:f7:ff:c9:24:57:72:21:e9:36:d6:09:4a:1a:5e:
         b5:75:ff:c4:f0:f6:00:71:64:c5:fc:bd:31:c6:06:ac:49:50:
         d1:4e:d7:1f:5f:98:b8:0d:fd:1f:a0:93:b5:cc:5c:0b:48:46:
         8b:6d:fe:b4:9f:c0:ef:61:b1:e9:2a:56:d2:bb:05:d0:67:8e:
         33:f6:91:e9:09:69:6d:3d:98:a6:d2:1d:de:e4:99:f4:bb:8d:
         34:8e:55:d4:3a:b1:28:08:76:13:a6:f0:19:3a:93:fc:38:00:
         89:8a:00:66:1c:32:5a:4c:20:56:91:56:19:55:a0:a1:57:f6:
         c8:46:5e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:40:43 2025 by rpki-client