Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/3130332e3232372e3138342e302f32342d3234203d3e20313531303132.roa
File:                     3130332e3232372e3138342e302f32342d3234203d3e20313531303132.roa (raw, json)
Hash identifier:          HxY+qbSnnto1Z4HzXSATggf6s2/jsThuJ9IKEWbevzQ=
Subject key identifier:   F2:D5:DF:B4:1B:A6:1B:F2:33:54:53:6D:FA:80:D1:3E:6F:6C:36:12
Certificate issuer:       /CN=B30FDBDE70FBE70CC44F3C710B467069B1194DD8
Certificate serial:       7A52FF97ACEAFFA168B5A47FE044A9801076B74D
Authority key identifier: B3:0F:DB:DE:70:FB:E7:0C:C4:4F:3C:71:0B:46:70:69:B1:19:4D:D8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/3130332e3232372e3138342e302f32342d3234203d3e20313531303132.roa
Signing time:             Tue 24 Jun 2025 09:00:01 +0000
ROA not before:           Tue 24 Jun 2025 08:55:01 +0000
ROA not after:            Tue 23 Jun 2026 09:00:01 +0000
asID:                     151012
IP address blocks:        103.227.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl
                          rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Jul 2025 12:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:52:ff:97:ac:ea:ff:a1:68:b5:a4:7f:e0:44:a9:80:10:76:b7:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B30FDBDE70FBE70CC44F3C710B467069B1194DD8
        Validity
            Not Before: Jun 24 08:55:01 2025 GMT
            Not After : Jun 23 09:00:01 2026 GMT
        Subject: CN=F2D5DFB41BA61BF23354536DFA80D13E6F6C3612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:41:dc:ac:22:15:64:3a:2f:b3:c2:4a:bb:73:
                    75:80:45:0d:61:5d:01:c1:ee:5c:d8:83:8c:ea:f4:
                    46:30:54:54:be:d3:19:ef:67:41:b7:6e:e7:74:c7:
                    79:fc:be:a1:7d:fa:69:c7:20:74:11:2d:50:46:9a:
                    22:03:31:07:8a:0b:40:aa:0d:5c:33:8d:e9:64:29:
                    4c:ba:ff:f2:fc:01:e9:2e:55:37:d8:99:d7:88:d2:
                    10:a6:ab:53:74:2f:25:50:da:2c:9d:96:a3:20:d6:
                    ab:e4:93:74:f0:a8:92:c8:04:62:a4:48:47:9d:a6:
                    29:b1:4e:a1:d4:73:bd:53:23:a4:33:ff:05:88:55:
                    19:87:0c:58:d9:e4:3f:c8:65:f3:5f:6f:be:73:82:
                    52:e3:96:d3:8a:6b:8b:c5:6f:33:20:c5:69:e3:2a:
                    f2:43:66:d9:f2:94:fe:4e:fa:f6:42:e4:45:87:76:
                    1b:76:76:94:54:a0:0d:82:95:7c:c4:43:df:83:0b:
                    e6:50:6d:65:65:34:e8:2e:9d:ed:33:34:71:5e:9e:
                    7d:a0:02:e9:75:27:2d:a0:b1:7d:b9:14:b8:ac:eb:
                    c3:21:ef:63:9e:fe:aa:66:59:54:dc:b5:84:a4:91:
                    bb:49:f6:d9:bb:a9:41:67:6a:49:ea:62:86:61:15:
                    df:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D5:DF:B4:1B:A6:1B:F2:33:54:53:6D:FA:80:D1:3E:6F:6C:36:12
            X509v3 Authority Key Identifier:
                keyid:B3:0F:DB:DE:70:FB:E7:0C:C4:4F:3C:71:0B:46:70:69:B1:19:4D:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/3130332e3232372e3138342e302f32342d3234203d3e20313531303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:6b:48:39:28:a1:ef:56:cc:4e:56:d7:8a:22:ae:17:df:f2:
         3e:92:8c:5b:3d:7c:2c:f6:94:61:68:7d:d1:81:d5:84:5b:7a:
         8d:ec:30:1b:19:ba:5e:81:f0:87:fa:cf:74:20:84:6f:35:a4:
         56:ea:d3:23:fb:bc:8a:a5:81:a8:94:a2:00:b6:13:ea:3d:7d:
         57:8b:82:8f:93:8b:17:e8:88:3e:67:21:de:7d:80:80:ac:f4:
         54:6c:be:e0:fb:38:85:b0:70:78:c0:fb:5e:6b:fc:d4:f0:de:
         61:96:d3:c5:fc:04:2e:22:d1:92:1c:ea:88:c7:45:11:11:27:
         ce:e5:89:12:17:84:e9:9d:73:8d:1b:c0:e7:76:0e:03:fe:ab:
         83:eb:37:c4:7c:5a:62:34:e1:78:08:26:54:21:39:7c:fa:cf:
         83:f0:63:ef:33:18:0d:30:5e:0a:0c:5e:86:40:a1:38:b9:fb:
         0b:24:d3:c5:80:c3:d9:56:4e:5d:a2:3d:5e:cb:ce:2f:bb:1c:
         7e:69:cd:e8:9e:be:ce:c1:03:f5:42:aa:d1:79:35:12:94:df:
         cc:1b:b9:29:53:e7:b8:f6:fa:7d:ab:6d:60:f8:79:68:82:5c:
         b8:83:ce:14:e1:07:5d:b2:4f:5b:d3:17:55:8d:83:a1:31:12:
         02:56:a2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:48:32 2025 by rpki-client