Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/3130332e3136312e3136352e302f32342d3234203d3e20313431363231.roa
File:                     3130332e3136312e3136352e302f32342d3234203d3e20313431363231.roa (raw, json)
Hash identifier:          ZRKz+g747J/H6fTKJrZlO1r26a5SNUHOfQ0zmY6WrCQ=
Subject key identifier:   18:13:C0:55:41:DC:88:53:A8:5F:A5:12:73:F5:C0:12:D6:50:4A:75
Certificate issuer:       /CN=77776250E47CDCAE9263AB4AF8FA40A1391792EA
Certificate serial:       8BBC86DED7A82D1A944FCCA76C0E0CD2AB06B5
Authority key identifier: 77:77:62:50:E4:7C:DC:AE:92:63:AB:4A:F8:FA:40:A1:39:17:92:EA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/3130332e3136312e3136352e302f32342d3234203d3e20313431363231.roa
Signing time:             Tue 09 Jul 2024 11:00:00 +0000
ROA not before:           Tue 09 Jul 2024 10:55:00 +0000
ROA not after:            Tue 08 Jul 2025 11:00:00 +0000
asID:                     141621
IP address blocks:        103.161.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl
                          rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Mar 2025 10:12:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            8b:bc:86:de:d7:a8:2d:1a:94:4f:cc:a7:6c:0e:0c:d2:ab:06:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77776250E47CDCAE9263AB4AF8FA40A1391792EA
        Validity
            Not Before: Jul  9 10:55:00 2024 GMT
            Not After : Jul  8 11:00:00 2025 GMT
        Subject: CN=1813C05541DC8853A85FA51273F5C012D6504A75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:64:5a:7f:60:95:db:45:c9:4e:2e:9e:5a:ec:
                    16:ea:64:20:90:a2:14:14:32:0e:3e:bc:5f:15:c4:
                    33:9b:f1:d2:d0:e2:35:40:74:97:c6:0e:52:d6:0f:
                    0c:32:d3:6b:49:1a:24:a2:99:2d:04:59:c1:69:27:
                    11:6e:de:08:c4:dd:ee:38:98:d4:13:d7:50:c4:21:
                    8f:df:66:c9:ff:3c:c5:e7:ca:9c:0b:cb:c2:d1:96:
                    5a:d3:5e:81:e4:0e:82:ed:f2:a9:88:df:bf:d8:5f:
                    e2:37:fd:e8:77:b1:51:ff:67:c5:a0:94:49:d9:37:
                    ab:63:22:e9:3f:0a:89:75:4d:61:b7:47:6b:b4:32:
                    2e:61:a7:04:ef:6c:c4:68:42:a7:1b:bd:4e:d4:fd:
                    f6:6c:79:b1:b0:3a:6a:df:ec:ca:6e:0f:af:f5:ed:
                    ab:18:a4:5e:cd:62:56:35:1a:85:e7:d9:a3:e1:4f:
                    d7:5e:27:6f:a5:f8:2c:57:3e:3f:45:70:78:ff:49:
                    90:82:f0:d1:c6:33:22:e4:83:69:ed:2b:12:2b:88:
                    8d:1c:a2:8b:46:10:52:c5:6a:44:f7:48:73:c8:3c:
                    64:9c:2f:f2:a9:3e:df:2f:f5:fc:00:f9:74:9c:6f:
                    9d:88:ec:17:80:7d:48:49:bd:18:fc:bd:d3:53:ef:
                    ce:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:13:C0:55:41:DC:88:53:A8:5F:A5:12:73:F5:C0:12:D6:50:4A:75
            X509v3 Authority Key Identifier:
                keyid:77:77:62:50:E4:7C:DC:AE:92:63:AB:4A:F8:FA:40:A1:39:17:92:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/3130332e3136312e3136352e302f32342d3234203d3e20313431363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:1e:0a:cc:1c:26:10:41:bf:9a:e2:1c:f5:73:bc:30:4f:4c:
         3d:e8:e3:37:e8:6b:09:17:f4:94:b1:9f:75:18:e2:09:f9:6c:
         6c:3b:38:b1:ec:8d:36:ff:5f:b9:dd:52:d6:94:0b:d8:f8:7a:
         ef:cb:c0:dd:75:54:51:a6:63:57:eb:8e:80:dc:ca:ef:90:f3:
         65:1c:08:3b:3f:6d:75:11:47:f2:09:21:f7:b8:dc:03:2b:f5:
         1d:33:2d:8d:bb:6d:c1:1c:bf:bc:13:6c:71:e3:7a:1a:c8:e7:
         17:02:00:2d:a7:09:25:8f:16:7d:a8:58:bd:d6:eb:22:5c:40:
         ee:f6:7b:40:a2:9f:6b:f4:77:bd:b4:17:4c:cb:0f:13:c2:98:
         80:a9:b7:8c:43:89:d7:a3:e4:07:8f:1a:bc:fa:e0:4a:06:20:
         da:92:2b:4e:4a:d4:1a:ec:ea:81:69:9b:29:15:8e:8b:2d:36:
         86:fb:11:81:fb:d1:ba:61:46:d7:88:71:bc:c9:78:d9:bc:bd:
         43:ed:6f:7a:ee:2c:b4:6c:c3:9b:7c:40:e3:67:d0:fa:df:8f:
         f1:e9:af:6f:c9:08:d1:4f:d4:6e:bb:a8:0d:f4:95:b5:0e:50:
         90:e0:11:a9:f2:b5:84:a3:37:7c:c2:22:bc:34:ba:30:5a:29:
         45:45:65:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:04:56 2025 by rpki-client