Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/3130332e37332e3139332e302f32342d3234203d3e20313439393434.roa
File:                     3130332e37332e3139332e302f32342d3234203d3e20313439393434.roa (raw, json)
Hash identifier:          0uJHSCFsdwdZP1NKhkt1f+yFu68JksGMAuDEtBg71VE=
Subject key identifier:   BB:FB:E7:96:FF:4B:FF:4E:4A:51:F9:7D:DF:1E:49:2A:FC:FF:FF:35
Certificate issuer:       /CN=BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8
Certificate serial:       33BC64695E16E13CB3F664D0A7E5D8B8CB784A36
Authority key identifier: BC:8B:D5:48:5C:9B:01:D1:76:F3:FA:A8:F3:81:E5:EC:ED:8C:D3:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/3130332e37332e3139332e302f32342d3234203d3e20313439393434.roa
Signing time:             Mon 12 May 2025 14:00:02 +0000
ROA not before:           Mon 12 May 2025 13:55:02 +0000
ROA not after:            Mon 11 May 2026 14:00:02 +0000
asID:                     149944
IP address blocks:        103.73.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl
                          rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 22:32:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:bc:64:69:5e:16:e1:3c:b3:f6:64:d0:a7:e5:d8:b8:cb:78:4a:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8
        Validity
            Not Before: May 12 13:55:02 2025 GMT
            Not After : May 11 14:00:02 2026 GMT
        Subject: CN=BBFBE796FF4BFF4E4A51F97DDF1E492AFCFFFF35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:40:6a:9a:7c:e3:91:b9:9a:c1:5f:58:3b:c5:
                    5d:eb:11:c0:25:13:14:29:a3:94:f5:50:50:b5:a3:
                    50:ba:a4:c8:b7:96:dc:8d:8c:a3:7f:af:92:17:79:
                    a1:80:c6:8f:e5:05:f2:c2:19:30:01:fe:4b:9f:2a:
                    09:7d:7c:fd:80:4d:81:f5:5b:78:93:8b:0a:78:1e:
                    10:3f:d6:b1:19:dd:01:55:99:21:6c:04:1d:6a:e1:
                    bd:59:e1:41:57:04:4c:df:aa:a3:92:2d:a9:67:f4:
                    db:ff:41:9e:a6:7f:57:fc:26:d5:90:0d:d0:3f:11:
                    5f:60:84:40:c7:ce:e2:7b:e5:d4:f9:eb:ef:02:5a:
                    1c:25:3b:b4:74:63:e1:7f:61:fe:1d:a6:bc:11:2e:
                    fe:f1:f5:04:10:72:ea:22:36:18:f1:ad:25:97:18:
                    3a:5c:93:77:79:21:48:a8:fe:86:aa:ff:25:c3:15:
                    a0:45:53:7d:ec:ce:6c:09:41:a5:cd:ad:5e:07:ce:
                    66:de:af:30:77:96:e0:d9:59:34:6f:d1:ef:28:da:
                    7a:91:67:99:e3:a7:7b:28:ce:9f:33:c0:8b:42:9e:
                    ce:0a:ff:41:19:8f:67:7d:b1:7e:f5:60:83:fd:48:
                    aa:b3:57:15:0c:46:2f:41:da:62:c6:cb:2d:7b:51:
                    6c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:FB:E7:96:FF:4B:FF:4E:4A:51:F9:7D:DF:1E:49:2A:FC:FF:FF:35
            X509v3 Authority Key Identifier:
                keyid:BC:8B:D5:48:5C:9B:01:D1:76:F3:FA:A8:F3:81:E5:EC:ED:8C:D3:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/3130332e37332e3139332e302f32342d3234203d3e20313439393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:af:5b:33:43:6d:4a:e4:85:e9:3f:c2:b3:45:19:58:90:8d:
         18:ce:27:ed:bb:91:47:23:0b:5d:a8:14:60:5b:a3:4a:60:74:
         68:94:0b:93:d5:ae:25:29:83:17:ef:06:5c:47:79:93:f6:c7:
         40:0a:33:6c:ad:ff:22:10:e6:ae:c5:dd:e1:6e:de:ed:b1:49:
         6c:b7:1e:b5:39:c0:dc:79:bf:d7:96:8b:62:73:59:ec:71:c2:
         a1:db:53:d9:26:55:b1:df:99:f1:6e:fb:c3:43:1e:54:5b:6b:
         7d:ac:52:84:82:51:65:c0:99:b5:0d:3d:38:0b:36:eb:95:e8:
         89:cc:54:21:ef:61:22:b5:a3:9d:2c:c5:2c:36:de:4f:75:f5:
         f7:a4:bb:c6:bc:af:29:4c:4f:d6:69:ac:99:81:b2:10:de:d9:
         65:ec:d0:25:dc:ec:38:09:77:64:9d:2e:81:33:e7:00:75:4f:
         c8:d7:8d:11:af:e4:07:51:b4:ac:53:8a:8e:9a:3e:04:9a:12:
         a3:f8:2a:d2:ff:d6:f1:67:8f:64:a1:7a:dc:c5:19:bb:22:e6:
         6f:45:f6:e0:45:8c:75:ec:ae:d6:f9:db:3c:15:1f:27:4c:33:
         16:00:54:0e:57:84:dc:ec:74:0d:37:33:a0:7c:21:8d:15:2f:
         56:ae:49:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:37:18 2025 by rpki-client