Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3130332e3139352e31382e302f32342d3234203d3e203535363833.roa
File:                     3130332e3139352e31382e302f32342d3234203d3e203535363833.roa (raw, json)
Hash identifier:          GyTvAyiqDcz4HqvEtyjLwFP+vqa6W3Rz6dNaGJkDvBQ=
Subject key identifier:   D8:63:C0:85:2D:C9:2C:9D:B9:84:A7:06:EF:A1:CA:80:36:E2:90:88
Certificate issuer:       /CN=3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28
Certificate serial:       74A0F96FA78D91BCAFDFB82DB5F4AF5387B0F1EA
Authority key identifier: 35:66:B6:CF:00:D7:B0:B6:73:F8:B5:26:C5:6A:EB:DC:B5:AD:BD:28
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3130332e3139352e31382e302f32342d3234203d3e203535363833.roa
Signing time:             Mon 02 Jun 2025 02:03:15 +0000
ROA not before:           Mon 02 Jun 2025 01:58:15 +0000
ROA not after:            Mon 01 Jun 2026 02:03:15 +0000
asID:                     55683
IP address blocks:        103.195.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.crl
                          rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 15:53:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:a0:f9:6f:a7:8d:91:bc:af:df:b8:2d:b5:f4:af:53:87:b0:f1:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28
        Validity
            Not Before: Jun  2 01:58:15 2025 GMT
            Not After : Jun  1 02:03:15 2026 GMT
        Subject: CN=D863C0852DC92C9DB984A706EFA1CA8036E29088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:55:df:55:a3:c5:9c:e4:20:cb:78:86:05:7d:
                    f3:7f:60:1d:06:40:f0:ec:e9:08:61:0a:b7:a8:67:
                    f4:64:10:44:11:a6:17:eb:45:fb:38:58:30:ff:cd:
                    16:07:53:d4:c0:cd:26:0b:62:62:d9:47:04:bc:f9:
                    65:a7:19:a0:12:5a:0c:c8:2b:b0:9d:78:ca:7a:e2:
                    2e:97:8b:8c:e8:2d:a4:2d:e2:09:57:6b:87:cf:ba:
                    1e:c9:71:a8:65:d9:9d:de:3f:e7:3a:52:83:52:7b:
                    7e:93:56:ee:b3:18:a9:d7:ba:bc:0d:59:f3:9b:6c:
                    4f:24:98:af:1f:e8:9e:d6:ce:98:21:a2:5e:52:57:
                    cc:7a:1c:b6:2a:f1:dc:94:21:27:ea:e4:84:1e:e9:
                    aa:be:3a:e3:29:d9:0a:d8:3b:fd:96:6a:67:ad:d6:
                    3a:66:b6:38:8d:b2:97:3e:5f:1e:0c:41:91:87:23:
                    19:db:7a:4c:65:04:79:63:34:0c:8a:07:0d:5b:af:
                    18:9e:0a:df:3c:73:c0:7e:14:1d:49:ba:a5:20:74:
                    5b:4a:85:ef:17:3e:4b:4b:34:43:ba:e7:c4:85:5c:
                    f9:22:47:b5:9b:c5:25:59:69:64:ee:94:77:7c:50:
                    ac:9c:40:f0:a1:a3:bb:1f:b9:09:83:91:5b:cc:05:
                    91:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:63:C0:85:2D:C9:2C:9D:B9:84:A7:06:EF:A1:CA:80:36:E2:90:88
            X509v3 Authority Key Identifier:
                keyid:35:66:B6:CF:00:D7:B0:B6:73:F8:B5:26:C5:6A:EB:DC:B5:AD:BD:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3130332e3139352e31382e302f32342d3234203d3e203535363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.195.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:9d:d1:40:da:fe:a3:2e:7a:e2:e4:2e:0d:9b:ea:80:0c:a7:
         bf:7c:ff:34:ef:a2:40:0b:37:66:20:e0:d9:15:12:91:95:40:
         a6:c7:02:c4:6d:ed:b4:d1:7e:88:d6:d7:4f:a4:d1:e7:cf:1c:
         bf:22:d0:33:bf:87:7b:52:e3:b8:31:44:48:02:26:2a:e6:14:
         b5:7c:f3:a0:f5:6e:f2:9a:08:10:6f:a0:e5:00:5b:87:5e:dd:
         a7:1a:34:5b:5d:67:1d:17:68:e3:5f:c2:6a:f9:88:fa:0d:ea:
         3e:0a:26:56:1e:e9:1f:fd:ec:68:c3:5b:10:52:17:39:8e:1c:
         28:aa:85:0e:19:6b:53:34:0d:98:3e:e5:76:24:5b:42:98:9f:
         b4:b5:17:ce:dd:08:c2:a0:07:49:90:8b:9b:7e:63:f7:d6:19:
         c8:f7:b5:9f:52:8b:2e:06:53:1b:3e:85:19:04:cd:f5:1d:4c:
         7b:4d:8c:85:36:07:b9:29:4f:04:54:81:16:47:f3:2f:c2:11:
         17:e2:7a:60:d0:5f:98:b5:08:2c:31:a5:e1:18:1d:4a:6e:52:
         33:07:1c:0e:84:8e:1a:38:48:0f:d0:e6:09:c1:9e:79:1b:15:
         e9:90:21:a2:1e:82:ba:b2:82:44:fc:eb:fd:60:8f:a0:63:13:
         01:62:cf:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:52:39 2025 by rpki-client