Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/3130332e3137302e3130312e302f32342d3234203d3e20313432333634.roa
File:                     3130332e3137302e3130312e302f32342d3234203d3e20313432333634.roa (raw, json)
Hash identifier:          uw3OwZCfNkGjofTnKoIMFhYrbhS71mbPAq8+a50Z3zk=
Subject key identifier:   5E:6D:F1:56:A8:08:B1:EE:24:1A:A5:66:03:48:5B:61:F8:EC:D4:82
Certificate issuer:       /CN=CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F
Certificate serial:       42050F26F8E091C74BAA8451DEB6DC8CF807C757
Authority key identifier: CE:C5:FE:18:3A:39:10:5C:9E:27:02:CC:2B:F0:89:1F:C3:5E:1E:4F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/3130332e3137302e3130312e302f32342d3234203d3e20313432333634.roa
Signing time:             Thu 08 May 2025 15:00:02 +0000
ROA not before:           Thu 08 May 2025 14:55:02 +0000
ROA not after:            Thu 07 May 2026 15:00:02 +0000
asID:                     142364
IP address blocks:        103.170.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl
                          rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 May 2025 23:54:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:05:0f:26:f8:e0:91:c7:4b:aa:84:51:de:b6:dc:8c:f8:07:c7:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F
        Validity
            Not Before: May  8 14:55:02 2025 GMT
            Not After : May  7 15:00:02 2026 GMT
        Subject: CN=5E6DF156A808B1EE241AA56603485B61F8ECD482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:46:9c:56:d9:48:c5:2d:55:97:85:30:34:6e:
                    98:ba:33:91:65:aa:07:37:60:88:53:76:18:96:5e:
                    9d:b6:41:7a:6a:de:3f:fe:ac:b3:f5:56:4a:4e:a9:
                    e4:b4:37:98:34:43:b7:db:79:f1:97:4d:1a:48:be:
                    88:d4:05:5e:6a:17:de:45:53:a0:ac:cb:11:68:15:
                    0d:dc:09:4e:1d:94:5b:c6:4f:ef:0e:15:07:3b:4b:
                    f3:b3:92:b1:71:d7:bb:e5:10:13:7e:d4:c2:ee:7c:
                    b7:e9:56:c8:ba:57:97:89:62:f2:14:6f:f2:b0:2f:
                    42:d1:fe:c8:cc:5a:f5:9a:30:3e:52:59:89:c0:55:
                    41:93:1b:b7:c9:3b:b8:b5:67:f1:58:d4:3e:01:ed:
                    c1:d4:eb:aa:f9:34:99:99:f5:95:22:72:e9:ea:7b:
                    44:ae:66:c5:47:40:35:9a:91:6a:0f:99:af:6c:6e:
                    dd:e3:d3:a3:07:de:f8:47:3e:ed:4a:ab:7c:6d:2e:
                    a4:42:a5:67:f0:3c:46:9f:af:0d:7e:9f:52:cd:3f:
                    d8:78:b7:d7:cb:03:ac:86:a0:8c:28:26:df:f5:f2:
                    bc:37:36:5d:62:cb:c7:8f:1b:5c:06:7f:d1:7f:74:
                    0a:2d:b9:7d:19:d6:5b:1a:2b:3c:17:2f:34:96:f9:
                    5c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:6D:F1:56:A8:08:B1:EE:24:1A:A5:66:03:48:5B:61:F8:EC:D4:82
            X509v3 Authority Key Identifier:
                keyid:CE:C5:FE:18:3A:39:10:5C:9E:27:02:CC:2B:F0:89:1F:C3:5E:1E:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/3130332e3137302e3130312e302f32342d3234203d3e20313432333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:dd:cf:9c:c9:ae:d4:88:63:34:be:23:bc:04:63:cb:de:08:
         5a:9d:71:98:d6:e9:75:d3:99:20:84:6a:40:b1:7e:04:20:3a:
         f9:27:60:81:f4:71:67:d6:e1:e6:92:28:44:c1:82:d2:fb:dd:
         9e:55:63:c4:2c:e9:93:02:0f:8e:23:76:d3:af:80:6e:a1:e5:
         75:d2:d9:45:c0:f7:0d:2f:b8:2c:5b:0f:e1:c1:bd:4f:d9:23:
         dd:14:b3:28:27:bf:5c:e4:f0:1e:59:98:49:9e:39:7d:1f:27:
         0b:6c:86:9a:4e:f0:db:14:75:8c:26:80:39:70:1e:30:84:0f:
         b3:ff:aa:f9:97:1e:25:46:f4:ae:2d:e3:4d:39:4a:32:d3:83:
         df:9f:57:ea:79:39:39:be:d5:9c:a5:a5:0c:71:c2:1d:13:6f:
         02:4f:93:09:05:2b:5d:df:c4:97:a2:22:47:04:3a:49:86:6b:
         61:f2:d2:48:09:68:de:59:47:e3:98:85:4f:80:4a:23:1f:b1:
         f3:d7:54:43:a5:0f:28:f6:23:c6:bd:5d:37:b8:74:82:3d:9d:
         61:9a:21:2c:3f:2c:6f:3e:36:7b:ea:85:4e:ea:ad:c8:dc:76:
         00:da:d3:25:9a:d8:06:b0:fa:92:d4:0a:d0:13:49:b3:ea:e0:
         79:e5:3a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:38:00 2025 by rpki-client