Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/3130332e3136372e3135362e302f32342d3234203d3e20313530353534.roa
File:                     3130332e3136372e3135362e302f32342d3234203d3e20313530353534.roa (raw, json)
Hash identifier:          80t5eYSm2/YNhAieXcls0z7n1huVJvGeox5Fv2BAMW4=
Subject key identifier:   AE:90:98:B9:85:FB:EF:C2:0E:FD:11:71:58:32:D3:AC:31:17:39:0E
Certificate issuer:       /CN=6D958AAEBD8946E47C968284B2652E02A2017E9E
Certificate serial:       6D010B40F2F38E03B2F31A0507FA9A4BEA33A7FC
Authority key identifier: 6D:95:8A:AE:BD:89:46:E4:7C:96:82:84:B2:65:2E:02:A2:01:7E:9E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D958AAEBD8946E47C968284B2652E02A2017E9E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/3130332e3136372e3135362e302f32342d3234203d3e20313530353534.roa
Signing time:             Wed 04 Jun 2025 14:00:00 +0000
ROA not before:           Wed 04 Jun 2025 13:55:00 +0000
ROA not after:            Wed 03 Jun 2026 14:00:00 +0000
asID:                     150554
IP address blocks:        103.167.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.crl
                          rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D958AAEBD8946E47C968284B2652E02A2017E9E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 16:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:01:0b:40:f2:f3:8e:03:b2:f3:1a:05:07:fa:9a:4b:ea:33:a7:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D958AAEBD8946E47C968284B2652E02A2017E9E
        Validity
            Not Before: Jun  4 13:55:00 2025 GMT
            Not After : Jun  3 14:00:00 2026 GMT
        Subject: CN=AE9098B985FBEFC20EFD11715832D3AC3117390E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f3:62:f1:b1:09:ff:84:de:f1:5a:38:27:cd:
                    9c:30:29:ba:db:7f:1f:5a:1e:b3:9d:61:48:a6:41:
                    18:55:07:a8:d5:87:7a:1b:2e:0c:2c:ad:c3:19:96:
                    4d:06:7c:c6:1d:94:8c:95:d8:a4:6e:67:19:dd:ed:
                    31:53:af:07:c5:6a:94:1e:b2:3d:71:58:85:45:a2:
                    3a:a4:e6:e7:bf:ce:5e:01:e4:1c:49:fc:9e:c0:cc:
                    2f:e9:ce:70:db:11:a0:bb:81:b4:1b:5d:9f:73:2d:
                    9e:0e:ce:f7:0b:e8:44:d5:e3:bd:19:5c:b7:5a:f1:
                    14:9f:ff:41:4f:84:d2:72:fa:f7:5a:f9:42:b1:46:
                    55:aa:c4:72:17:c3:3b:81:72:97:0d:78:c6:45:74:
                    e8:b5:06:4d:e5:f6:ee:54:93:0f:0b:f1:e5:a7:a6:
                    f7:e1:67:51:08:46:f4:7b:14:0d:22:89:24:a8:e0:
                    60:87:fd:79:11:b3:3b:8c:36:58:ea:39:63:3b:a9:
                    b5:6b:84:c7:c8:f9:ff:80:8f:c3:50:8a:86:77:10:
                    27:08:88:99:5a:74:e2:3c:d4:b2:4c:30:2d:b8:4e:
                    8a:ac:5e:fb:f2:0c:9f:28:a1:ff:8c:eb:09:39:a8:
                    27:80:a0:97:c3:c8:cf:d5:c8:41:59:89:2c:89:61:
                    af:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:90:98:B9:85:FB:EF:C2:0E:FD:11:71:58:32:D3:AC:31:17:39:0E
            X509v3 Authority Key Identifier:
                keyid:6D:95:8A:AE:BD:89:46:E4:7C:96:82:84:B2:65:2E:02:A2:01:7E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D958AAEBD8946E47C968284B2652E02A2017E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/3130332e3136372e3135362e302f32342d3234203d3e20313530353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:f1:d4:f3:41:4b:1b:fa:94:84:15:c9:8f:e5:14:ea:35:db:
         b7:12:67:a4:09:2d:e8:26:64:98:10:ab:5c:4a:f8:bf:0c:5f:
         15:b3:2d:65:ab:96:25:90:aa:b5:ab:d3:8a:97:da:ba:ad:2d:
         0c:87:28:cf:48:d0:e7:c6:ec:43:11:be:25:58:96:2b:9e:94:
         83:45:c9:96:ed:ee:b9:41:fa:f6:3b:7f:3a:94:ea:05:a3:b1:
         52:ea:22:a7:dc:74:64:60:c6:c3:1c:fd:e2:62:3c:85:ca:58:
         48:2f:06:f4:1f:e5:ed:ef:ae:d7:9a:52:0d:e8:c5:fb:eb:e3:
         61:0f:90:22:5f:59:dd:e2:a3:2b:bb:c4:14:ee:1b:05:ee:2f:
         fd:be:ce:48:ff:bb:68:dc:5b:ab:16:57:9f:0f:16:75:a5:54:
         93:a0:24:10:cf:0d:59:16:87:ad:73:ff:d1:79:73:c3:a5:cd:
         56:3f:5c:21:e9:a7:85:40:eb:71:fb:11:56:87:49:22:4b:98:
         95:7b:56:9b:37:d8:25:7f:07:c8:91:3d:5d:64:56:24:c1:c0:
         48:01:49:8e:94:b6:35:66:a2:a5:b9:23:2c:dd:f0:a2:b3:b7:
         2c:dd:e3:01:a9:f0:5c:95:f9:46:86:8a:8c:38:16:c4:d0:9c:
         b0:43:52:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:55:51 2025 by rpki-client