Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/3130332e3138362e3230302e302f32332d3234203d3e203333363137.roa
File:                     3130332e3138362e3230302e302f32332d3234203d3e203333363137.roa (raw, json)
Hash identifier:          bFy9ipmHq994gZqzOrC2MrxUHNGx4j8GQXF6t3SnIIQ=
Subject key identifier:   60:2C:41:5E:4D:D3:C6:2D:EC:80:8B:FB:A1:CA:E2:93:C8:50:B5:69
Certificate issuer:       /CN=B21EB18A21CA5136A04F43EC18E1AA867B348052
Certificate serial:       11EDB52C8FD5ECC62BEF01D5F78FE995B94C9941
Authority key identifier: B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/3130332e3138362e3230302e302f32332d3234203d3e203333363137.roa
Signing time:             Thu 05 Jun 2025 22:08:09 +0000
ROA not before:           Thu 05 Jun 2025 22:03:09 +0000
ROA not after:            Thu 04 Jun 2026 22:08:09 +0000
asID:                     33617
IP address blocks:        103.186.200.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl
                          rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 05:03:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ed:b5:2c:8f:d5:ec:c6:2b:ef:01:d5:f7:8f:e9:95:b9:4c:99:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B21EB18A21CA5136A04F43EC18E1AA867B348052
        Validity
            Not Before: Jun  5 22:03:09 2025 GMT
            Not After : Jun  4 22:08:09 2026 GMT
        Subject: CN=602C415E4DD3C62DEC808BFBA1CAE293C850B569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9e:89:2b:42:19:e4:f1:af:c4:01:fd:77:cf:
                    bc:8d:19:ac:6f:b7:51:5d:cd:21:23:21:4b:28:03:
                    ab:c0:d6:15:44:e1:ff:f4:13:f2:be:0b:b3:7e:af:
                    9d:48:3b:5f:ed:1c:6a:55:75:00:ee:1d:32:0f:2a:
                    37:a3:30:0a:af:6f:6a:3b:83:60:0b:71:54:1b:6e:
                    e1:24:1d:89:7c:97:ce:40:86:fb:c3:c7:18:13:6e:
                    5a:39:d9:eb:bd:0e:5c:cc:c7:c1:6f:1f:90:c3:b8:
                    b2:fe:45:d8:da:6f:b0:26:8a:94:13:4e:63:93:41:
                    66:1c:d2:32:d5:eb:98:62:cc:f4:f9:a0:28:de:7f:
                    26:f5:0a:17:3b:cc:c3:0c:6c:dc:f7:17:3a:bc:a5:
                    50:81:eb:cb:4e:86:ce:2e:16:e6:cc:69:f4:2f:99:
                    d5:b6:27:26:75:5a:6d:7f:7e:31:94:12:e4:f7:4a:
                    fb:bb:fa:bd:e6:73:db:73:b1:b5:5d:ba:9c:9b:7c:
                    bc:d0:d8:e5:75:de:59:67:39:d4:99:96:52:f7:30:
                    8e:68:53:a4:ec:53:49:4e:2d:fe:36:b5:94:66:4d:
                    b8:17:a0:a2:86:bd:20:d6:4b:47:fc:4f:4a:2b:dd:
                    0c:10:03:e2:c4:7f:7c:ae:f8:39:07:44:e4:8c:da:
                    74:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:2C:41:5E:4D:D3:C6:2D:EC:80:8B:FB:A1:CA:E2:93:C8:50:B5:69
            X509v3 Authority Key Identifier:
                keyid:B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/3130332e3138362e3230302e302f32332d3234203d3e203333363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:4d:0b:22:b9:03:a8:35:d9:c0:b1:cf:a4:a3:bc:7d:85:51:
         40:99:03:bc:fa:80:3c:77:c6:de:65:5f:fe:b4:67:4f:1d:bd:
         33:9a:92:cf:c0:cf:12:79:6f:d2:ad:48:2f:fe:6b:86:4b:64:
         84:d9:e1:9b:28:c3:00:10:3b:ba:c9:ef:a8:ea:7d:f0:57:c6:
         f3:73:e9:5f:d7:27:c3:f9:58:c5:d6:76:9a:4d:71:96:ef:e9:
         44:5d:71:5f:08:11:56:91:bb:1b:e9:22:66:a3:f3:6f:6c:64:
         93:f5:a7:48:3e:31:8d:0e:b5:c1:f2:9a:d8:ba:93:c7:fb:77:
         76:f2:72:d4:f6:76:bd:aa:dd:45:4d:d0:30:80:9b:0e:b5:a4:
         9b:6f:36:42:8b:8a:63:2e:5f:6c:da:fc:f6:d1:90:bb:fa:c6:
         f1:74:87:6b:e4:ba:28:f6:0d:c4:3e:cb:6f:fa:f0:32:83:e1:
         5a:bc:08:5a:bb:ec:48:3a:95:de:1f:e0:82:63:58:8b:ee:d3:
         ad:ee:08:05:01:34:00:29:89:2d:dc:ad:34:19:fc:73:89:a9:
         b2:d4:28:02:ed:5b:19:5e:97:0a:b4:74:fe:da:db:c5:c8:c8:
         26:de:66:25:3c:5a:27:66:dd:5d:0d:46:1f:c2:8e:dd:fd:22:
         11:aa:9f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:52:56 2025 by rpki-client