Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/3130332e3131362e3131322e302f32322d3234203d3e203234353332.roa
File:                     3130332e3131362e3131322e302f32322d3234203d3e203234353332.roa (raw, json)
Hash identifier:          RbGIdOLWBU5xVV9K0LoZOkwEhMFKzskG/yrpat5y7rY=
Subject key identifier:   FD:55:33:63:A6:00:FA:55:22:31:AD:04:D2:4D:B0:AF:14:8F:6A:DA
Certificate issuer:       /CN=81186C066342A0E66CD1921AEDB58A8CDDEE7E45
Certificate serial:       199C93E3B086F03026C3481F786BC7393B066E5A
Authority key identifier: 81:18:6C:06:63:42:A0:E6:6C:D1:92:1A:ED:B5:8A:8C:DD:EE:7E:45
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/3130332e3131362e3131322e302f32322d3234203d3e203234353332.roa
Signing time:             Mon 02 Jun 2025 02:03:19 +0000
ROA not before:           Mon 02 Jun 2025 01:58:19 +0000
ROA not after:            Mon 01 Jun 2026 02:03:19 +0000
asID:                     24532
IP address blocks:        103.116.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.crl
                          rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 08:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:9c:93:e3:b0:86:f0:30:26:c3:48:1f:78:6b:c7:39:3b:06:6e:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81186C066342A0E66CD1921AEDB58A8CDDEE7E45
        Validity
            Not Before: Jun  2 01:58:19 2025 GMT
            Not After : Jun  1 02:03:19 2026 GMT
        Subject: CN=FD553363A600FA552231AD04D24DB0AF148F6ADA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ba:6e:90:63:fd:82:bb:ee:7a:dc:34:a7:27:
                    c9:5e:02:e1:f2:9e:2c:f8:25:c3:54:6f:75:10:8e:
                    ba:c2:22:70:38:57:1f:2b:64:85:69:6e:b1:2a:5c:
                    54:20:e1:27:3a:7d:93:0c:5d:29:5b:63:d4:e6:bd:
                    cc:fe:57:15:a5:d9:b0:71:fc:38:53:83:80:a8:53:
                    b1:d6:a1:46:f6:20:ed:24:b1:69:4d:9b:0c:eb:c0:
                    1c:87:43:8f:e3:6b:89:ec:fe:1d:2d:48:31:84:35:
                    79:49:cf:59:ce:51:1d:85:b3:54:7f:7a:71:aa:54:
                    7c:a1:ba:65:06:0e:87:13:d5:60:dd:cf:ce:ca:fc:
                    a6:62:5f:f1:fd:7b:e3:0d:9a:0d:22:c5:8b:86:52:
                    6a:97:ec:8d:28:51:b7:59:dd:7a:5b:fa:a9:c3:75:
                    4a:2f:3f:b7:b8:f3:9d:c9:17:b6:ea:87:8c:96:50:
                    b0:98:d7:cb:ec:8f:db:41:b2:a1:15:7d:7b:65:cc:
                    c0:ab:79:31:47:e3:14:74:22:ac:6d:1f:f7:9b:ad:
                    67:1b:1a:33:3f:7c:10:3a:67:36:aa:11:97:d7:1e:
                    c6:a3:fd:25:a2:52:de:f2:3b:74:88:4b:2e:47:29:
                    1e:da:fb:3d:2a:b3:cc:11:17:29:73:3a:f5:56:71:
                    e8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:55:33:63:A6:00:FA:55:22:31:AD:04:D2:4D:B0:AF:14:8F:6A:DA
            X509v3 Authority Key Identifier:
                keyid:81:18:6C:06:63:42:A0:E6:6C:D1:92:1A:ED:B5:8A:8C:DD:EE:7E:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81186C066342A0E66CD1921AEDB58A8CDDEE7E45.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df9bf797-913d-48dd-832c-33b409b5f79b/0/3130332e3131362e3131322e302f32322d3234203d3e203234353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:67:c8:2b:1a:27:90:0b:cc:15:49:a2:19:ec:54:a3:6a:56:
         be:01:59:bd:f2:5a:ed:b2:3a:50:34:29:c5:49:fe:fa:53:59:
         3b:c0:71:87:4e:46:d2:85:d2:f1:4b:50:fe:9d:2e:1d:17:88:
         b4:15:ab:a3:ec:9e:58:23:90:56:7e:d9:68:bd:05:f6:0c:df:
         3f:45:ca:fb:45:b8:0e:4d:fc:d3:94:ad:b8:6e:64:35:0f:b9:
         9c:52:9f:39:41:12:c4:5e:89:43:46:4d:c1:43:f3:da:be:35:
         2f:51:bf:53:25:b4:7a:e2:fe:c8:e3:1a:4c:ce:b1:d6:cf:01:
         7a:9c:d9:70:ef:d5:f9:5b:e4:57:49:b0:2b:bd:3e:ac:37:aa:
         21:4a:a6:f8:42:72:76:49:96:de:c9:7f:e3:c1:72:31:c2:66:
         00:29:ee:9e:4f:a4:30:1c:9b:41:ac:21:4d:f9:21:6a:4f:84:
         93:b3:d8:e6:d0:2e:18:d1:8b:a7:a0:e1:49:ec:04:83:25:62:
         9c:76:dd:e1:98:eb:e9:48:59:c2:6d:c8:18:33:10:f1:03:fc:
         7d:28:99:37:24:63:17:d7:33:1d:6a:af:8d:90:e7:0c:7f:f9:
         f4:0d:0b:3f:36:53:96:17:01:ad:03:cc:00:fc:3e:5c:be:f2:
         21:50:8d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:14:54 2025 by rpki-client