Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/3130332e3137372e3138382e302f32342d3234203d3e20313439333533.roa
File:                     3130332e3137372e3138382e302f32342d3234203d3e20313439333533.roa (raw, json)
Hash identifier:          tnbiCaMjB/wcfly5HgYg5Hs8RqnmeGK4G33+Ng72LlI=
Subject key identifier:   33:E7:79:FA:97:E6:AF:0C:0E:8C:89:D7:45:27:14:43:50:57:75:67
Certificate issuer:       /CN=1C49A098778B751B36DDC816E9E5106C08F3E99E
Certificate serial:       3C5E365B99035D968710FD75566DDD235126C010
Authority key identifier: 1C:49:A0:98:77:8B:75:1B:36:DD:C8:16:E9:E5:10:6C:08:F3:E9:9E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/3130332e3137372e3138382e302f32342d3234203d3e20313439333533.roa
Signing time:             Tue 29 Apr 2025 14:00:01 +0000
ROA not before:           Tue 29 Apr 2025 13:55:01 +0000
ROA not after:            Tue 28 Apr 2026 14:00:01 +0000
asID:                     149353
IP address blocks:        103.177.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.crl
                          rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 May 2025 17:40:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:5e:36:5b:99:03:5d:96:87:10:fd:75:56:6d:dd:23:51:26:c0:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C49A098778B751B36DDC816E9E5106C08F3E99E
        Validity
            Not Before: Apr 29 13:55:01 2025 GMT
            Not After : Apr 28 14:00:01 2026 GMT
        Subject: CN=33E779FA97E6AF0C0E8C89D74527144350577567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a4:f6:f8:f3:eb:55:13:a5:d0:a4:60:2b:b9:
                    92:0d:7f:46:a6:84:53:23:4c:e2:a1:f2:fd:52:d7:
                    91:c9:59:93:f5:78:40:b3:6f:cf:c4:d6:22:76:d8:
                    f7:c8:a8:96:88:00:1b:bf:82:9a:f4:f1:0f:ce:e1:
                    66:e7:9c:60:53:06:7f:19:de:c7:0a:49:80:5b:61:
                    02:0a:5a:46:10:e0:9d:00:bf:b5:3c:50:45:a7:96:
                    67:0c:28:c4:69:4b:fa:c6:e2:1e:47:d7:66:c1:3e:
                    ac:cf:f9:c5:3f:ec:03:81:de:0f:fd:6e:f1:9e:60:
                    6a:b9:91:67:48:99:3f:35:fa:01:8c:20:94:bc:78:
                    48:78:ef:fb:4a:f6:0e:b1:21:15:c7:a3:51:e0:4e:
                    90:67:fe:c7:94:4b:39:fa:4f:3d:be:1b:d5:31:1b:
                    37:0b:3b:00:d0:65:80:f7:72:fa:3b:89:22:60:c9:
                    9a:35:fa:73:ad:8e:15:9a:7b:0d:60:c6:00:62:61:
                    21:29:7d:85:2c:37:17:06:77:05:2b:67:8d:2f:87:
                    13:53:05:56:0b:14:53:e9:d5:c6:41:5b:1f:85:96:
                    a8:3a:2f:ea:d4:15:30:78:44:94:61:00:95:c7:53:
                    02:fd:e3:6e:46:35:c1:e2:c8:17:42:e6:39:a3:65:
                    18:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E7:79:FA:97:E6:AF:0C:0E:8C:89:D7:45:27:14:43:50:57:75:67
            X509v3 Authority Key Identifier:
                keyid:1C:49:A0:98:77:8B:75:1B:36:DD:C8:16:E9:E5:10:6C:08:F3:E9:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/3130332e3137372e3138382e302f32342d3234203d3e20313439333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:fa:9d:44:7b:2f:4d:cb:d7:44:5d:07:cb:8c:30:03:87:0f:
         23:77:f6:e8:b5:2a:dd:8c:e6:b8:46:0c:45:55:4d:78:3d:62:
         9d:8b:28:41:fe:45:e5:e5:80:51:11:13:a3:d4:04:9b:1f:3f:
         3e:22:34:8b:4d:da:40:90:d9:e1:d3:87:62:67:c5:d3:fd:72:
         5d:24:99:d7:c2:f4:8f:0a:13:00:30:de:a9:93:e4:55:25:68:
         3e:43:1f:e6:a1:dd:43:11:fa:5c:20:32:79:68:96:4a:2d:3a:
         64:99:62:77:de:40:03:57:f1:de:7e:01:b8:d5:4b:a0:d6:cd:
         a3:88:ab:5c:b5:db:fa:7f:af:5e:49:36:f4:19:f1:38:25:5f:
         1b:7d:05:86:3c:c9:cb:e5:cf:41:90:e8:7f:e0:3d:ec:ff:89:
         46:77:6f:bf:ef:72:0c:77:b3:9e:19:ee:1e:af:eb:7e:37:de:
         2e:db:f8:0c:f7:ee:6f:9e:84:55:47:58:d7:89:c2:13:78:75:
         5c:ab:9c:88:83:0e:f9:36:23:8c:3e:a0:ac:e8:91:4e:6c:4b:
         77:c0:b2:a5:91:db:95:c0:a8:02:12:b1:f0:63:a4:8c:7b:9c:
         2a:d0:08:a9:0b:2d:c6:be:e0:c5:66:d9:2e:b4:35:ea:66:e7:
         ad:ae:bc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 09:49:54 2025 by rpki-client