Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/3130332e35322e31372e302f32342d3234203d3e20313333383131.roa
File:                     3130332e35322e31372e302f32342d3234203d3e20313333383131.roa (raw, json)
Hash identifier:          hHPw+Xqwsov7fA4EH++xE5Fe/5zBy6SOylLmX+aVZlE=
Subject key identifier:   99:F7:22:17:7E:C6:19:6D:26:21:D8:14:CD:86:EB:C2:F4:1A:15:2D
Certificate issuer:       /CN=821F16581F931A19A14B40DBF1E2B053A9C0B6A0
Certificate serial:       5E6C3AEB98233934D217F3DBF2F69CDAB538CE8D
Authority key identifier: 82:1F:16:58:1F:93:1A:19:A1:4B:40:DB:F1:E2:B0:53:A9:C0:B6:A0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/3130332e35322e31372e302f32342d3234203d3e20313333383131.roa
Signing time:             Mon 02 Jun 2025 01:02:38 +0000
ROA not before:           Mon 02 Jun 2025 00:57:38 +0000
ROA not after:            Mon 01 Jun 2026 01:02:38 +0000
asID:                     133811
IP address blocks:        103.52.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl
                          rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 10:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:6c:3a:eb:98:23:39:34:d2:17:f3:db:f2:f6:9c:da:b5:38:ce:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821F16581F931A19A14B40DBF1E2B053A9C0B6A0
        Validity
            Not Before: Jun  2 00:57:38 2025 GMT
            Not After : Jun  1 01:02:38 2026 GMT
        Subject: CN=99F722177EC6196D2621D814CD86EBC2F41A152D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bf:42:b7:43:41:4c:81:ed:65:ca:5f:9a:45:
                    8c:ca:1e:6f:78:61:8e:6e:ac:5e:16:d7:96:f0:80:
                    ca:a4:cc:24:dc:42:5e:2b:ea:9b:66:a2:91:9c:34:
                    c2:0a:98:32:8d:64:0a:5f:92:19:84:7c:de:a2:cb:
                    9f:59:09:b9:67:ec:ce:ea:ec:c4:96:aa:5a:fb:1a:
                    d9:c8:8f:f8:b7:45:11:d8:8e:c2:ac:db:54:b9:61:
                    f0:45:d2:7c:78:ae:f4:d2:8a:76:14:c3:f1:c7:9a:
                    14:23:f3:10:93:fe:1d:7c:60:04:d6:c6:c7:96:cd:
                    cc:34:69:4f:e2:06:a7:cd:90:5e:ca:9d:26:1e:e8:
                    a3:59:7d:d9:5f:e4:69:d2:88:e4:7f:44:d9:f4:9d:
                    ac:77:cf:e7:61:1b:de:31:43:64:c6:5b:dd:31:c9:
                    a8:78:a2:40:1f:e0:81:1b:db:d2:7f:a1:2b:e9:32:
                    86:b3:1c:35:41:a4:9f:7f:db:65:c6:07:8d:5e:57:
                    41:53:14:73:87:30:c2:10:2f:5a:ab:43:91:ea:15:
                    3d:31:95:6b:ad:5d:cd:b4:03:72:14:a9:48:df:20:
                    ce:5e:9a:e3:bb:26:6f:b6:57:89:e2:ef:e5:69:44:
                    b2:65:3c:86:27:3b:ee:f8:52:a5:d5:12:ba:c4:9c:
                    30:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F7:22:17:7E:C6:19:6D:26:21:D8:14:CD:86:EB:C2:F4:1A:15:2D
            X509v3 Authority Key Identifier:
                keyid:82:1F:16:58:1F:93:1A:19:A1:4B:40:DB:F1:E2:B0:53:A9:C0:B6:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/3130332e35322e31372e302f32342d3234203d3e20313333383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.52.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:2e:ea:ff:b1:33:0f:e8:2c:cd:a9:5b:18:2a:ea:41:70:eb:
         c8:50:88:65:20:2d:a1:6d:73:72:49:72:49:52:a2:98:1b:ed:
         5b:ea:fb:b9:cc:70:af:06:5b:79:57:95:d5:6a:71:d2:be:1a:
         b8:2f:cd:d7:33:21:67:2f:e0:b1:83:39:54:dd:ac:1a:14:ac:
         56:cc:bc:c7:90:9e:89:bb:b4:58:9f:67:74:c8:d1:08:67:95:
         a4:a9:82:f9:7e:ba:37:30:37:7f:66:05:c8:9e:34:6f:53:e8:
         00:68:78:ec:42:b6:a1:0a:e2:38:6d:df:80:38:48:e2:da:b2:
         ab:4b:13:42:08:27:77:ae:a6:bd:d6:72:ce:77:ca:73:9f:c7:
         92:3a:0d:99:68:59:cc:be:5e:98:5f:8f:ef:b1:bd:48:6e:be:
         2a:e7:32:7f:d1:4c:07:b6:59:1c:2f:33:f3:f2:d1:0c:e0:bd:
         4e:59:7c:2e:90:07:81:28:c0:ba:3c:5b:60:4f:75:ed:98:48:
         f9:14:c4:0c:62:3b:5a:0f:2f:c8:f7:f9:5d:a8:15:18:7c:80:
         64:d7:0a:72:5d:11:cf:6a:dc:43:e6:a7:99:cc:b9:18:78:20:
         f1:91:fe:d3:69:a0:26:a7:9a:71:68:da:55:fa:1a:31:c5:71:
         5c:64:dc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:36:29 2025 by rpki-client