Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/3130332e3235312e3138302e302f32322d3234203d3e203538383138.roa
File:                     3130332e3235312e3138302e302f32322d3234203d3e203538383138.roa (raw, json)
Hash identifier:          bRNZ8nUlgm5rj4Lv4Xn5qKIuBE6nw8cnVSc6VxHCPew=
Subject key identifier:   C6:24:0B:94:60:6A:96:48:A4:95:73:96:5E:C9:BC:E3:1A:25:FD:5E
Certificate issuer:       /CN=6C11FF5474BE690E545132237E53030296585D32
Certificate serial:       79FADE678E6A32B5C7B52A0508FEB4F39FE876A0
Authority key identifier: 6C:11:FF:54:74:BE:69:0E:54:51:32:23:7E:53:03:02:96:58:5D:32
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C11FF5474BE690E545132237E53030296585D32.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/3130332e3235312e3138302e302f32322d3234203d3e203538383138.roa
Signing time:             Thu 01 May 2025 03:01:20 +0000
ROA not before:           Thu 01 May 2025 02:56:20 +0000
ROA not after:            Thu 30 Apr 2026 03:01:20 +0000
asID:                     58818
IP address blocks:        103.251.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.crl
                          rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C11FF5474BE690E545132237E53030296585D32.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 May 2025 11:52:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:fa:de:67:8e:6a:32:b5:c7:b5:2a:05:08:fe:b4:f3:9f:e8:76:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C11FF5474BE690E545132237E53030296585D32
        Validity
            Not Before: May  1 02:56:20 2025 GMT
            Not After : Apr 30 03:01:20 2026 GMT
        Subject: CN=C6240B94606A9648A49573965EC9BCE31A25FD5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c0:61:d5:9e:23:f5:09:92:f4:61:f5:70:c3:
                    47:3b:28:af:87:c5:10:e3:54:5f:21:c2:a2:f1:d3:
                    8f:5b:24:69:c0:a2:c8:f2:39:44:65:6b:2c:6a:43:
                    ac:e0:63:e9:16:1b:67:c1:94:ed:16:b5:2a:d6:57:
                    c8:2a:a1:1e:0a:d9:d1:37:7e:c0:da:db:1a:d3:54:
                    36:31:17:35:da:12:f3:3d:2b:d1:ba:18:85:6f:bd:
                    23:26:e5:84:a9:fd:6f:ae:fa:a9:e5:66:b9:1b:3c:
                    13:7e:57:14:50:47:31:d9:6b:91:e5:f3:cb:d4:ef:
                    5c:40:d5:c9:ce:2f:76:c7:d4:76:b6:5a:a7:77:00:
                    36:c7:18:47:05:f7:a7:55:7c:e9:38:5b:37:71:aa:
                    99:13:2b:64:e6:69:af:ec:01:38:d2:04:db:66:63:
                    3b:68:a3:06:68:5c:f0:67:7a:51:7e:77:c9:25:8d:
                    9a:95:49:ed:41:60:ab:90:a4:9a:07:df:dd:27:85:
                    f2:8f:0f:75:36:28:e6:8e:7a:ae:5c:b3:ff:0a:5c:
                    61:94:34:f4:6a:5b:ad:17:2a:a7:db:35:87:d8:6b:
                    b0:d7:31:84:64:00:72:3d:1a:f5:ab:4b:33:af:66:
                    be:74:3d:b1:18:80:0e:ea:ee:b5:34:98:89:81:65:
                    bd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:24:0B:94:60:6A:96:48:A4:95:73:96:5E:C9:BC:E3:1A:25:FD:5E
            X509v3 Authority Key Identifier:
                keyid:6C:11:FF:54:74:BE:69:0E:54:51:32:23:7E:53:03:02:96:58:5D:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C11FF5474BE690E545132237E53030296585D32.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/3130332e3235312e3138302e302f32322d3234203d3e203538383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.251.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:a2:0f:a1:1a:9d:ac:df:40:a4:9f:43:ae:be:f8:e8:4f:cb:
         79:47:78:99:18:f3:60:07:cb:ca:c2:72:b5:e4:b1:6f:fc:f0:
         0a:99:36:a6:80:20:cd:91:8a:9e:22:9c:bd:f5:3b:76:d1:29:
         21:d6:f2:49:83:e8:4f:d1:bd:32:c8:64:e6:62:64:59:fd:dc:
         5e:ee:9c:52:93:4e:62:61:24:76:77:d9:ae:25:58:2f:13:db:
         27:7c:17:ca:45:3c:14:8b:46:6e:37:43:ed:0f:04:cf:fa:6a:
         4a:93:d9:e6:a0:13:e6:1c:24:b1:d7:a7:af:eb:bd:a7:89:58:
         3e:06:dd:7d:d9:92:1d:43:c2:27:4d:8b:11:3e:39:38:7a:a7:
         1e:b8:84:e6:1e:55:77:bf:7a:3d:79:25:b3:38:44:1a:4e:c7:
         d9:1b:ad:d5:44:98:03:b8:10:ef:25:f1:f7:36:1e:12:34:0c:
         21:b9:19:4a:11:bb:b1:cd:e9:11:64:4b:56:40:8c:c9:d8:a2:
         d1:a6:d3:83:d9:7f:b9:38:76:e9:56:c1:6d:f1:db:c3:b3:05:
         b6:96:d5:49:2b:e2:d3:cb:b8:25:7b:65:6a:50:36:32:18:28:
         13:b4:d2:7b:48:7d:37:97:60:61:0e:c7:ce:dc:42:99:ea:82:
         87:4e:42:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:57:44 2025 by rpki-client