Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3130332e3234372e31362e302f32342d3234203d3e203338313635.roa
File:                     3130332e3234372e31362e302f32342d3234203d3e203338313635.roa (raw, json)
Hash identifier:          tAMCUl1Xc9fpy8SW0e1m9vGCwJz6CDD2bsghCU8kdUA=
Subject key identifier:   80:39:82:1D:44:DE:A1:0A:F2:CF:23:02:3B:50:37:44:D5:85:70:8E
Certificate issuer:       /CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
Certificate serial:       0E6B0A87D0DA2F0646CCCB4CA3F239A946D3D025
Authority key identifier: F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3130332e3234372e31362e302f32342d3234203d3e203338313635.roa
Signing time:             Mon 27 Jan 2025 03:00:01 +0000
ROA not before:           Mon 27 Jan 2025 02:55:01 +0000
ROA not after:            Mon 26 Jan 2026 03:00:01 +0000
asID:                     38165
IP address blocks:        103.247.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl
                          rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 18:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:6b:0a:87:d0:da:2f:06:46:cc:cb:4c:a3:f2:39:a9:46:d3:d0:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
        Validity
            Not Before: Jan 27 02:55:01 2025 GMT
            Not After : Jan 26 03:00:01 2026 GMT
        Subject: CN=8039821D44DEA10AF2CF23023B503744D585708E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:53:88:54:5b:78:46:8c:f4:7d:cf:44:38:0b:
                    6a:bb:86:ad:78:21:c4:5b:2a:34:1c:c1:32:0a:54:
                    54:23:89:21:01:47:9b:78:82:34:73:76:59:de:c3:
                    0b:5e:43:20:4c:dd:5c:9a:94:69:5d:ed:93:ae:a7:
                    d6:b1:d8:49:1e:95:f2:dd:6e:38:fe:56:0a:c5:2e:
                    03:25:3e:73:9a:4c:50:98:a7:07:84:20:91:b2:70:
                    73:f3:bf:cb:50:93:01:33:5b:3d:5a:c0:ce:4d:32:
                    3b:37:d0:52:f3:37:cc:ed:46:aa:99:59:d1:c2:0e:
                    27:11:9e:df:90:38:e4:6c:11:0f:77:63:85:89:a2:
                    75:b3:1f:4c:07:58:ba:2a:c0:1a:4f:17:87:3b:7f:
                    04:8f:92:b8:85:a6:d5:a5:e4:a5:80:8b:a6:99:27:
                    b3:88:4f:2a:0b:06:25:af:03:8d:57:a0:ae:de:0e:
                    8b:31:ce:a3:6f:0b:81:ac:b0:30:ff:11:43:2d:48:
                    26:64:c6:6b:e1:e1:f4:06:d4:2a:6a:38:61:ed:50:
                    20:3c:e4:29:34:ad:4b:b9:20:8b:cc:8f:ab:6c:7d:
                    81:2e:99:13:d8:f8:84:17:6d:ad:bc:ae:03:76:9d:
                    d0:5d:a3:55:d8:cd:0d:9b:af:c4:59:95:aa:af:d5:
                    03:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:39:82:1D:44:DE:A1:0A:F2:CF:23:02:3B:50:37:44:D5:85:70:8E
            X509v3 Authority Key Identifier:
                keyid:F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3130332e3234372e31362e302f32342d3234203d3e203338313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:2f:69:7a:c1:85:49:e4:3b:b0:27:d6:d9:7b:dd:5b:17:60:
         88:af:c7:3b:28:a4:6e:c5:e2:57:41:f9:c6:ad:79:82:18:7e:
         6b:eb:49:33:15:29:5d:ce:39:92:a3:bb:59:50:19:54:bf:d9:
         ce:1f:1b:8d:7c:6b:25:83:4d:ed:e2:6a:bc:e3:f7:be:3e:63:
         e8:79:5c:c3:b7:f3:fb:81:42:c6:c7:7a:11:36:9a:fe:d0:48:
         85:68:8e:c4:f5:26:d5:70:0f:e5:39:35:63:d0:4b:38:44:d8:
         2c:31:25:85:48:5e:d9:02:bb:2f:1c:9c:0f:ba:00:c2:f4:94:
         4f:22:27:ac:50:f8:0b:e6:20:ec:ba:50:bc:c4:94:ef:06:cb:
         c8:8d:2b:cb:2f:77:4a:36:e4:99:c2:ff:15:fe:55:1b:1f:74:
         3e:f9:18:3f:7d:8c:17:db:07:fc:9b:4f:72:d4:78:26:c4:81:
         2c:ac:2a:db:14:c2:b9:9d:51:ed:20:98:bb:e1:c2:80:27:77:
         1f:2d:22:3c:65:09:1a:a5:0e:e0:a2:24:08:75:fa:45:22:68:
         f5:79:fb:8d:51:02:75:ab:9c:fc:2b:f9:70:b2:53:21:4f:e1:
         0e:24:8b:6f:75:e3:62:b5:fb:9b:bd:9f:0b:ef:44:dc:3c:78:
         76:85:09:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:49:12 2025 by rpki-client