Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/3130332e3232302e32322e302f32342d3234203d3e20313431363037.roa
File:                     3130332e3232302e32322e302f32342d3234203d3e20313431363037.roa (raw, json)
Hash identifier:          4o94mrc4fRlBDhHzDJcRb+ENMoJpRlPOPsOhrRbyRi4=
Subject key identifier:   E9:1F:5D:2E:70:19:83:F3:8F:C0:9A:44:8E:23:82:F1:EA:92:1B:6D
Certificate issuer:       /CN=771D0AB9C445B28C887FD7BA18DEC515D8BA3862
Certificate serial:       4B577C78FA40FC0B56802EE0C3C6F12DD34BAC3E
Authority key identifier: 77:1D:0A:B9:C4:45:B2:8C:88:7F:D7:BA:18:DE:C5:15:D8:BA:38:62
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/3130332e3232302e32322e302f32342d3234203d3e20313431363037.roa
Signing time:             Wed 07 May 2025 08:57:33 +0000
ROA not before:           Wed 07 May 2025 08:52:33 +0000
ROA not after:            Wed 06 May 2026 08:57:33 +0000
asID:                     141607
IP address blocks:        103.220.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.crl
                          rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 May 2025 20:46:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:57:7c:78:fa:40:fc:0b:56:80:2e:e0:c3:c6:f1:2d:d3:4b:ac:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=771D0AB9C445B28C887FD7BA18DEC515D8BA3862
        Validity
            Not Before: May  7 08:52:33 2025 GMT
            Not After : May  6 08:57:33 2026 GMT
        Subject: CN=E91F5D2E701983F38FC09A448E2382F1EA921B6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:5a:da:a9:65:51:e0:ef:91:df:00:41:b1:4b:
                    9f:63:e2:8d:7c:45:45:36:9a:9a:d0:ce:ea:a7:16:
                    dd:8e:01:97:30:d0:08:45:d1:67:a9:34:1d:89:77:
                    80:45:33:e2:92:d0:48:04:04:cc:33:4a:b5:91:42:
                    cc:72:11:92:b3:aa:19:4d:26:09:66:46:81:8f:5e:
                    a0:7b:7e:e8:e1:ba:5c:7d:fc:1d:d2:3f:ad:dd:2b:
                    98:ed:38:f6:a9:ea:5a:13:24:bc:c0:ff:7e:34:6e:
                    56:2a:fd:99:5e:f7:4a:ac:dd:30:95:d9:0d:c8:df:
                    f1:99:6e:8c:6a:86:31:51:91:5b:88:a9:9c:68:ef:
                    00:ab:6a:f8:e6:dd:1a:13:8f:a9:4c:b0:24:b3:8a:
                    d9:a9:b3:97:f7:6e:97:92:7d:65:74:d8:37:ff:e0:
                    e4:07:1d:71:64:23:9b:05:5e:41:17:f3:eb:ba:84:
                    41:ef:ed:dd:ce:42:13:42:39:c5:8e:88:eb:ed:8e:
                    2a:2f:bc:2b:61:6a:c8:70:f3:07:b0:08:3f:b6:ac:
                    c1:5e:dc:6d:47:ad:da:00:19:94:57:1d:75:b2:73:
                    fa:24:0b:d6:4d:89:3a:c2:9f:7e:2f:f3:3d:14:44:
                    d1:02:aa:bd:35:15:6c:6d:05:ae:36:ad:b6:aa:50:
                    00:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:1F:5D:2E:70:19:83:F3:8F:C0:9A:44:8E:23:82:F1:EA:92:1B:6D
            X509v3 Authority Key Identifier:
                keyid:77:1D:0A:B9:C4:45:B2:8C:88:7F:D7:BA:18:DE:C5:15:D8:BA:38:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/3130332e3232302e32322e302f32342d3234203d3e20313431363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.220.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:86:52:f0:76:68:25:2f:c1:6c:32:94:0f:17:fc:9b:3a:97:
         fb:1e:71:2e:ee:75:9f:35:0b:92:59:1e:cb:ab:c9:d5:b8:ac:
         32:5f:88:8f:f4:d5:31:f3:c3:b6:a8:8e:06:e4:71:fb:a3:03:
         32:f8:d7:46:6c:d7:01:74:58:40:90:d6:99:89:18:dd:6f:18:
         2c:74:9b:4c:af:b6:82:c2:91:3b:b8:83:04:de:0b:ca:ea:e9:
         a9:99:2d:c6:d7:3e:2f:a2:ac:8b:50:25:06:bc:76:a0:6e:2d:
         f8:01:ab:bd:a0:cb:4a:0a:16:cd:e5:83:f4:c1:8a:e7:31:44:
         64:88:96:65:3c:46:a3:3d:f9:5f:d5:fb:cf:f1:8e:b0:b9:db:
         ff:49:11:db:4a:10:c4:31:fe:3c:ec:6d:3f:b4:94:43:a9:3e:
         26:8d:63:f7:bd:30:31:2c:bc:76:de:10:66:4f:8a:73:9e:19:
         3d:80:7e:26:62:be:87:64:37:c2:53:2e:f9:aa:c5:67:f9:7e:
         0b:1d:3b:3e:4f:c5:d3:10:c2:ff:81:dc:1c:ae:0c:95:64:1e:
         d6:29:fc:86:25:ba:4c:d6:08:d5:d2:92:a1:2e:82:5a:3e:2f:
         f7:8e:2f:6d:67:07:ea:24:9c:b3:01:cc:1e:f1:b4:de:eb:4d:
         3a:a4:ac:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 12:15:16 2025 by rpki-client