Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/3130332e31342e32312e302f32342d3234203d3e20313331373137.roa
File:                     3130332e31342e32312e302f32342d3234203d3e20313331373137.roa (raw, json)
Hash identifier:          5In45d5yPgAgu4EKrWednA3s/tNDYrqkLBEAtmGlKjI=
Subject key identifier:   7F:DC:96:F4:15:4B:73:5B:74:0F:98:70:F1:B1:19:B2:8B:49:70:FD
Certificate issuer:       /CN=882209E37356E0512FBE4E81B00E4F2481865087
Certificate serial:       02C568E991D5EEF7EB0DA5D6D374720AC9B7E266
Authority key identifier: 88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/3130332e31342e32312e302f32342d3234203d3e20313331373137.roa
Signing time:             Mon 02 Jun 2025 01:02:50 +0000
ROA not before:           Mon 02 Jun 2025 00:57:50 +0000
ROA not after:            Mon 01 Jun 2026 01:02:50 +0000
asID:                     131717
IP address blocks:        103.14.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl
                          rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 18:29:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:c5:68:e9:91:d5:ee:f7:eb:0d:a5:d6:d3:74:72:0a:c9:b7:e2:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882209E37356E0512FBE4E81B00E4F2481865087
        Validity
            Not Before: Jun  2 00:57:50 2025 GMT
            Not After : Jun  1 01:02:50 2026 GMT
        Subject: CN=7FDC96F4154B735B740F9870F1B119B28B4970FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:01:e5:3e:38:7a:cc:07:64:b0:99:a7:35:f7:
                    08:31:a9:03:c7:63:c9:54:87:66:25:64:09:ac:70:
                    7d:e5:d1:11:d3:44:fe:f5:46:69:4d:4b:28:bc:aa:
                    00:e8:bc:09:3a:15:96:3b:ca:70:1f:e2:0b:42:f4:
                    c9:b7:d8:71:fc:6b:55:e0:3f:da:a1:25:43:89:60:
                    59:f4:ac:c4:6b:cb:11:54:47:35:c1:46:02:45:fc:
                    a7:82:8e:1f:ae:12:79:f9:91:c2:3b:8a:65:48:8d:
                    55:9e:33:0b:5f:c4:19:9c:80:4a:ea:26:92:5d:be:
                    e4:b5:c7:dc:32:1d:1f:fe:7b:0a:3a:34:73:dd:65:
                    37:a2:44:f1:f5:57:da:55:3a:19:28:c5:52:35:fd:
                    90:fd:e8:68:b2:0e:da:5c:18:c9:df:a2:32:c8:0d:
                    3f:c9:6d:e4:f7:71:36:6e:49:7a:62:ec:18:5e:66:
                    75:0e:fa:a1:0b:67:8e:eb:aa:c6:56:7e:d5:89:cb:
                    82:9d:8a:e3:b3:de:33:b3:4a:70:b4:5c:13:c0:c2:
                    91:b1:e3:63:a3:c2:b2:52:e8:bb:88:dc:cc:e9:6b:
                    a6:9d:c0:31:ff:be:a5:79:cc:c4:a7:ba:7d:e6:ac:
                    ec:cf:27:d3:36:65:a9:1c:16:a6:a5:93:1a:0a:36:
                    b8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:DC:96:F4:15:4B:73:5B:74:0F:98:70:F1:B1:19:B2:8B:49:70:FD
            X509v3 Authority Key Identifier:
                keyid:88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/3130332e31342e32312e302f32342d3234203d3e20313331373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.14.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:b5:01:4e:b0:3c:a8:f1:49:d9:3a:7f:c8:90:43:07:99:64:
         f9:4d:32:d4:ce:32:31:2f:5f:96:47:7a:fe:bd:7d:dc:9e:ba:
         e9:92:d6:6b:77:85:c9:9b:7a:6f:62:bc:f7:9e:d1:cf:cb:ab:
         52:b3:b1:0d:9f:1e:7f:f1:5b:b9:49:12:75:b2:95:ef:8c:0e:
         64:4b:5a:f1:c2:c1:9d:4a:4d:4d:d2:e4:92:4d:0d:d4:9f:9f:
         70:be:e2:3a:25:e5:ec:a4:67:2a:40:83:78:5e:cf:0b:a8:8f:
         78:de:f1:b9:26:3e:c7:a0:dd:36:8c:30:b2:18:75:b1:e4:68:
         6f:70:03:08:f7:99:2d:09:ee:23:10:10:b0:0b:fe:08:c8:ef:
         a5:11:a3:e6:19:4f:0f:f5:95:fd:e6:8b:30:ec:d3:2a:03:74:
         9d:cd:02:39:50:fa:cf:70:a9:ce:26:56:84:94:94:3d:5d:0a:
         81:c3:2a:26:a5:8d:49:ca:d0:d7:c5:70:4b:c9:34:57:56:d6:
         42:85:fe:2d:e6:e7:a9:ed:e8:af:55:41:c1:36:d2:e1:b3:0f:
         3c:b5:d1:ea:7c:4b:57:3e:dd:f3:a6:c0:72:5e:29:83:82:e9:
         91:42:4c:d8:58:ac:3e:2a:3a:e8:5b:fe:87:a0:67:24:bc:93:
         0b:66:dd:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:40:25 2025 by rpki-client