Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3130332e38342e342e302f32322d3234203d3e20313332363431.roa
File:                     3130332e38342e342e302f32322d3234203d3e20313332363431.roa (raw, json)
Hash identifier:          ei+mi6lm3a64UFetrkni2cRNDguaELmNUyIIIt/btoQ=
Subject key identifier:   E1:E8:FE:5B:A2:F1:80:A9:37:3B:54:50:FC:DD:AB:15:47:6E:2B:EA
Certificate issuer:       /CN=3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836
Certificate serial:       57F59CFBD86CB8FB7602616398C10A3A9ED788BA
Authority key identifier: 3C:03:CF:95:17:81:97:0C:6D:0A:DB:E8:FA:CF:EC:6A:4C:DD:78:36
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3130332e38342e342e302f32322d3234203d3e20313332363431.roa
Signing time:             Wed 19 Feb 2025 10:00:01 +0000
ROA not before:           Wed 19 Feb 2025 09:55:01 +0000
ROA not after:            Wed 18 Feb 2026 10:00:01 +0000
asID:                     132641
IP address blocks:        103.84.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl
                          rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Apr 2025 13:20:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:f5:9c:fb:d8:6c:b8:fb:76:02:61:63:98:c1:0a:3a:9e:d7:88:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836
        Validity
            Not Before: Feb 19 09:55:01 2025 GMT
            Not After : Feb 18 10:00:01 2026 GMT
        Subject: CN=E1E8FE5BA2F180A9373B5450FCDDAB15476E2BEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:83:46:89:f1:1c:d0:e1:a0:79:45:e1:38:84:
                    0d:51:53:57:d8:1b:c1:a7:d2:c4:95:fc:aa:8e:12:
                    d1:30:7c:f1:f9:80:be:ae:af:92:e8:63:63:da:9f:
                    7f:54:f1:ff:c8:4f:63:50:9e:56:b6:e2:59:30:3d:
                    c7:e6:76:89:07:d1:e5:e4:11:3b:db:3a:98:27:71:
                    67:f2:f4:13:c1:3e:ba:b6:b5:ab:0e:82:83:d4:71:
                    f3:e1:43:8a:db:f2:08:90:3b:01:9d:c2:02:1d:7b:
                    c5:67:7b:6d:40:09:71:94:55:69:04:d0:f1:1c:5b:
                    e1:88:28:9f:75:b2:72:5c:7b:4f:f2:82:90:ae:b9:
                    47:e1:53:60:61:94:87:8f:d3:53:90:59:08:a4:0c:
                    df:a6:f7:c0:b1:58:dc:1b:dd:c7:02:7d:66:c7:7e:
                    9f:8e:bf:33:66:8a:0f:c7:dd:90:f4:a8:94:b6:e7:
                    91:7a:a2:89:f0:e9:e9:66:9e:e6:d7:a2:c9:32:79:
                    1f:72:9b:0d:06:bb:65:6d:76:2d:b9:a7:ee:76:66:
                    41:0f:f1:67:44:c9:1f:96:b3:f1:29:74:fb:d2:19:
                    1f:67:c0:35:e8:be:2d:c8:fa:f1:54:5a:b8:e5:40:
                    8c:5f:97:5b:0f:97:3a:25:3e:76:af:25:9d:9b:78:
                    6f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E8:FE:5B:A2:F1:80:A9:37:3B:54:50:FC:DD:AB:15:47:6E:2B:EA
            X509v3 Authority Key Identifier:
                keyid:3C:03:CF:95:17:81:97:0C:6D:0A:DB:E8:FA:CF:EC:6A:4C:DD:78:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3130332e38342e342e302f32322d3234203d3e20313332363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:76:ac:fe:b4:f9:4a:61:6f:6e:5c:53:1c:f8:dc:a8:60:04:
         f6:61:41:5e:a5:ed:3c:65:1e:a8:bf:69:53:bb:6a:da:b7:f1:
         40:59:8a:c6:cf:07:ab:03:95:56:10:6f:e0:f3:10:c8:9d:af:
         a5:2a:87:2c:64:46:17:85:14:81:db:0b:14:16:47:20:8e:47:
         e0:8e:cd:81:43:b0:67:9a:8d:0c:02:50:d5:77:ed:56:86:48:
         b8:65:e4:e0:b1:49:0f:13:d2:99:5f:bc:f2:93:44:c0:b1:06:
         49:d8:53:1e:36:0c:5f:bf:c7:49:c7:82:ad:96:99:f8:79:83:
         f3:44:f7:5e:de:04:ac:c0:5e:e8:be:d7:98:ac:be:68:21:a4:
         0d:d8:48:33:b5:38:14:3e:f4:a6:92:2f:0d:3c:06:b5:13:f0:
         04:76:6e:f0:90:43:34:90:7c:51:9b:9b:76:5c:d9:a9:0a:41:
         dc:98:15:ee:29:af:b1:49:7a:7f:c2:e2:7c:09:24:14:06:33:
         24:cf:1a:a3:04:fd:82:5f:5a:d9:82:81:55:09:2f:e4:03:43:
         65:74:b0:1d:54:bc:73:87:7a:19:c1:dd:7b:98:b8:6f:92:af:
         74:65:f2:80:79:7b:27:73:b3:46:64:aa:99:8d:22:ef:ed:20:
         9b:77:c1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:49:17 2025 by rpki-client