Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3130332e3139352e31392e302f32342d3234203d3e203535363833.roa
File:                     3130332e3139352e31392e302f32342d3234203d3e203535363833.roa (raw, json)
Hash identifier:          NswJoPlTbkW1QbykJdu3UOhV7IqDYlomNhuRwW/poHY=
Subject key identifier:   45:17:6B:77:4E:D7:FE:96:A9:32:D7:F0:62:8E:5E:34:30:DF:E1:FC
Certificate issuer:       /CN=3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28
Certificate serial:       628050458B41C254F57F7390DD6ED0E797C33539
Authority key identifier: 35:66:B6:CF:00:D7:B0:B6:73:F8:B5:26:C5:6A:EB:DC:B5:AD:BD:28
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3130332e3139352e31392e302f32342d3234203d3e203535363833.roa
Signing time:             Mon 02 Jun 2025 02:03:16 +0000
ROA not before:           Mon 02 Jun 2025 01:58:16 +0000
ROA not after:            Mon 01 Jun 2026 02:03:16 +0000
asID:                     55683
IP address blocks:        103.195.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.crl
                          rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 14:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:80:50:45:8b:41:c2:54:f5:7f:73:90:dd:6e:d0:e7:97:c3:35:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28
        Validity
            Not Before: Jun  2 01:58:16 2025 GMT
            Not After : Jun  1 02:03:16 2026 GMT
        Subject: CN=45176B774ED7FE96A932D7F0628E5E3430DFE1FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7b:12:c8:b6:7f:90:e1:bc:ee:df:23:05:b8:
                    33:cb:f7:37:a2:32:da:d3:fb:a2:ab:27:89:61:c8:
                    ee:4d:45:a0:a9:b6:17:4a:91:4a:a8:ed:a5:fd:96:
                    19:b9:e8:a6:9f:91:29:26:84:af:27:7c:79:73:be:
                    a6:51:54:a0:74:0a:50:2e:0b:a6:8a:73:87:73:04:
                    a8:00:58:38:97:f8:02:2a:af:d0:12:38:e6:22:32:
                    9f:fa:3c:bb:33:6c:4f:1d:55:5e:3e:7c:ed:51:a2:
                    c7:52:f0:ef:a2:2d:3e:31:f8:7d:19:6b:3f:77:a4:
                    4a:aa:53:30:20:28:4f:8d:89:81:b3:2e:98:fe:bb:
                    35:6a:74:bb:e7:f6:5d:c3:69:81:7e:54:ad:eb:97:
                    b7:d4:12:a3:e1:38:f7:ca:9a:96:ce:e0:7d:98:68:
                    d5:f8:0f:4f:2f:d2:df:ea:70:ae:51:79:fe:6e:14:
                    cb:7b:04:f9:63:95:23:19:05:78:c9:b7:bf:f4:96:
                    ff:f8:a2:e2:49:ca:c1:08:cf:39:80:be:97:25:9a:
                    c7:2b:2b:b9:e0:29:c7:7c:7a:20:cc:da:8b:9d:a1:
                    90:3f:a9:3c:22:b5:ec:c6:c9:94:c7:f0:d6:e7:91:
                    9f:46:8b:fe:61:5d:80:67:c6:ac:db:52:25:a3:48:
                    8f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:17:6B:77:4E:D7:FE:96:A9:32:D7:F0:62:8E:5E:34:30:DF:E1:FC
            X509v3 Authority Key Identifier:
                keyid:35:66:B6:CF:00:D7:B0:B6:73:F8:B5:26:C5:6A:EB:DC:B5:AD:BD:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3566B6CF00D7B0B673F8B526C56AEBDCB5ADBD28.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3b8ae97-6818-48a9-abe4-edb96049f3c8/0/3130332e3139352e31392e302f32342d3234203d3e203535363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.195.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:ed:48:58:4b:88:57:d8:22:13:a4:fa:54:92:a2:c4:f1:91:
         73:0e:2a:62:cb:02:73:cd:5b:fb:18:df:c9:a4:43:07:02:f5:
         b1:ac:90:0f:47:f0:cb:d4:0d:84:26:25:e0:11:1f:41:1b:41:
         38:88:19:4c:49:8b:54:32:09:7d:ff:cc:81:51:e2:79:fd:20:
         fb:28:29:5d:e8:69:69:3d:13:87:2a:0b:08:e5:63:f4:02:dc:
         ed:60:e9:e6:80:b3:d4:6b:3f:31:9f:3d:b9:7b:f1:40:70:e2:
         5d:ef:59:10:fb:55:15:ed:d6:10:ae:ce:e5:16:15:0d:3f:0a:
         e2:0d:1b:28:79:6a:ff:9f:54:23:24:8e:62:ee:5f:32:e8:46:
         f7:37:49:1a:26:91:ee:82:f0:db:7f:17:7e:f9:50:97:9e:7b:
         2d:00:86:a0:86:03:e6:ae:41:ac:ee:c3:9f:a1:18:92:e5:9a:
         5e:99:45:79:87:9f:b4:1a:36:06:0a:af:ed:a1:5f:30:1f:77:
         74:29:66:f9:81:94:8a:96:c0:8d:25:76:9f:49:b3:3c:b3:0a:
         34:2b:90:f6:4b:b8:ef:d9:d2:14:06:b6:5a:b3:38:7f:7a:4a:
         d6:05:e2:02:93:27:40:19:f7:ef:40:42:74:dc:67:04:5c:1c:
         71:41:54:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:53:21 2025 by rpki-client