Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e31382e33342e302f32332d3234203d3e2039333431.roa
File:                     3130332e31382e33342e302f32332d3234203d3e2039333431.roa (raw, json)
Hash identifier:          adzjrINaF+3GDPpepzIxlGed1Ligt8B0PKgcjtAARiU=
Subject key identifier:   8B:5A:3B:9B:B5:86:92:CC:C2:A3:73:7D:FA:18:D8:68:80:15:CF:18
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       2B1F71F5481D78CFC8538843E2F0482FF7F24424
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e31382e33342e302f32332d3234203d3e2039333431.roa
Signing time:             Tue 10 Jun 2025 06:02:50 +0000
ROA not before:           Tue 10 Jun 2025 05:57:50 +0000
ROA not after:            Tue 09 Jun 2026 06:02:50 +0000
asID:                     9341
IP address blocks:        103.18.34.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Jul 2025 07:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:1f:71:f5:48:1d:78:cf:c8:53:88:43:e2:f0:48:2f:f7:f2:44:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Jun 10 05:57:50 2025 GMT
            Not After : Jun  9 06:02:50 2026 GMT
        Subject: CN=8B5A3B9BB58692CCC2A3737DFA18D8688015CF18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:03:50:dd:b3:00:4d:0d:8d:12:64:50:9d:4a:
                    19:65:3d:24:50:ec:5a:e9:2a:31:7e:86:33:1b:3e:
                    d5:b6:fb:8a:23:9b:d7:0f:60:05:90:52:3b:46:d5:
                    40:8f:18:67:e0:2a:f9:16:55:91:8d:09:f6:fa:b8:
                    7f:30:01:b8:47:f7:ca:d1:5f:db:08:4c:15:fe:01:
                    84:ac:3b:57:be:15:3b:10:b7:7c:2f:48:6d:a3:82:
                    93:cc:4c:c9:79:1b:f3:36:1a:f6:80:fc:69:ce:9c:
                    58:e0:a8:49:ed:79:da:d0:15:14:46:9b:3b:d1:ed:
                    ba:64:3f:1b:a8:5c:c3:60:6c:32:89:db:b8:32:c0:
                    bd:0c:cc:ec:cc:6a:89:78:1c:22:37:d4:a1:7a:5a:
                    32:0c:12:2d:d8:e5:6b:ea:2a:a2:8d:b7:ce:a6:de:
                    90:8a:78:ec:75:14:3c:20:cd:2b:1a:e5:57:8c:f2:
                    18:63:f2:24:aa:c2:8f:de:7d:9f:b2:66:a0:d0:3a:
                    bd:bc:81:b2:a3:27:af:d2:03:af:d9:5d:e2:a3:76:
                    af:35:0f:32:a8:8c:88:4a:ce:a1:78:62:3d:f4:53:
                    b0:bd:0b:4c:87:64:6e:47:df:9c:ee:9e:b5:a0:d7:
                    1f:92:fb:d5:4b:ff:b9:f1:3d:95:68:38:62:c1:6c:
                    7a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:5A:3B:9B:B5:86:92:CC:C2:A3:73:7D:FA:18:D8:68:80:15:CF:18
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e31382e33342e302f32332d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.18.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:7e:71:a8:e0:3d:3d:eb:cd:fd:93:11:f5:be:34:83:09:f1:
         2f:d7:19:5d:79:e1:2b:0f:76:ca:77:13:ce:95:32:39:76:2b:
         f3:0f:ef:dc:b4:34:3a:27:62:05:b2:17:08:df:56:ec:86:98:
         66:6c:9e:e9:d8:6b:f6:b1:88:ac:04:56:da:d4:e3:e5:29:81:
         39:2d:5b:a6:31:aa:af:2f:8d:86:7c:c9:b9:72:08:28:1d:32:
         70:e8:b8:fd:8e:fa:0c:f3:e0:af:5b:09:b7:84:41:05:3d:af:
         d1:b7:c2:03:ae:7d:68:b0:36:97:1a:4e:8e:b5:a9:63:65:58:
         72:50:ae:79:34:61:ac:11:2b:29:a7:13:a7:f5:db:1f:20:fc:
         73:2b:fb:7a:da:e8:b2:ec:d2:50:a9:c4:15:fd:aa:8c:a0:27:
         d5:00:2d:80:96:75:75:a4:8a:ef:b6:ea:60:e2:47:ec:c8:3b:
         02:a3:23:fd:ce:53:7c:ae:71:c4:ea:7d:64:93:ee:88:fe:0b:
         fd:26:f6:98:40:f3:5f:67:12:29:7d:02:b1:0f:47:a0:7f:e1:
         34:23:13:29:da:20:2a:fa:4e:d9:35:1b:18:21:94:1a:68:e5:
         9c:a5:48:61:ca:33:aa:9c:1a:79:0f:b2:06:27:42:78:5a:89:
         e5:50:67:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 02:29:21 2025 by rpki-client