Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34372e302f32342d3234203d3e203233363934.roa
File:                     3130332e36362e34372e302f32342d3234203d3e203233363934.roa (raw, json)
Hash identifier:          jx7v0Idpebq1Ou6PCUn6oQ0kEGw/RyRx4sL+jxJLcZU=
Subject key identifier:   B4:AA:C5:EA:97:17:04:46:93:0A:D5:C7:75:0C:F6:8E:B4:69:4E:10
Certificate issuer:       /CN=3E0D060F214DF8E6493243033EBD30ABD627ED36
Certificate serial:       77B7CB60F2EC5A0B412738D76802C0002F8443FD
Authority key identifier: 3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34372e302f32342d3234203d3e203233363934.roa
Signing time:             Thu 08 May 2025 13:00:01 +0000
ROA not before:           Thu 08 May 2025 12:55:01 +0000
ROA not after:            Thu 07 May 2026 13:00:01 +0000
asID:                     23694
IP address blocks:        103.66.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl
                          rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 May 2025 15:40:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:b7:cb:60:f2:ec:5a:0b:41:27:38:d7:68:02:c0:00:2f:84:43:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E0D060F214DF8E6493243033EBD30ABD627ED36
        Validity
            Not Before: May  8 12:55:01 2025 GMT
            Not After : May  7 13:00:01 2026 GMT
        Subject: CN=B4AAC5EA97170446930AD5C7750CF68EB4694E10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:18:6c:61:d3:d8:88:0c:53:70:d6:7d:e0:49:
                    a6:1d:64:3a:cb:86:eb:10:78:de:5e:23:09:43:26:
                    0a:b5:cf:0f:41:7b:90:d1:09:7f:9a:51:b7:74:de:
                    da:b7:34:06:42:69:8e:ca:52:56:01:bc:9c:0b:d8:
                    56:98:14:24:12:d6:cd:35:5a:d1:81:3c:4a:8d:e1:
                    6c:70:46:f8:d6:81:d8:9c:f8:ab:e6:36:99:f2:c8:
                    b6:6e:54:e8:c1:02:2b:31:ee:24:a2:9f:0f:a0:c6:
                    e7:2f:49:aa:c8:e6:a4:4d:91:cd:10:c5:9a:fa:0c:
                    a6:88:1b:4b:3c:28:6a:78:5a:76:19:79:61:98:6d:
                    6d:c6:30:71:3a:a4:a6:36:07:1c:dc:0a:43:07:6f:
                    74:9e:27:68:89:44:82:3d:40:ab:82:a7:40:e0:8a:
                    51:a1:7f:8e:ed:c0:1c:8c:c8:ad:28:08:61:cb:07:
                    35:d0:46:ff:8e:02:ec:30:2e:3e:ee:b3:b7:bf:4f:
                    d9:57:97:61:91:21:62:f2:80:be:91:86:95:25:97:
                    f9:c2:5a:24:ee:c9:38:e2:5c:54:db:a3:d3:d9:56:
                    f8:db:76:e2:46:54:f0:80:8d:dd:24:33:a3:b5:32:
                    b1:ed:51:ef:69:44:bd:d7:40:23:2d:38:44:82:6f:
                    74:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:AA:C5:EA:97:17:04:46:93:0A:D5:C7:75:0C:F6:8E:B4:69:4E:10
            X509v3 Authority Key Identifier:
                keyid:3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34372e302f32342d3234203d3e203233363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.66.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:2f:4a:2c:21:c6:31:80:1d:7f:2b:89:26:9b:11:cc:f8:d8:
         f7:e5:05:dc:c9:eb:cd:41:80:2d:22:32:c7:39:5d:81:ee:5d:
         c8:85:35:45:49:c8:99:98:bc:c6:0c:3c:a7:58:dd:31:81:76:
         50:55:9f:cb:2f:14:04:c3:d4:64:ec:0d:d5:47:c2:e5:b7:24:
         aa:e0:a7:f0:2e:54:d7:69:f6:68:44:87:ad:b6:47:e8:31:bb:
         e1:2a:77:6b:3e:75:2a:11:a7:fb:b2:6b:97:dc:99:4b:31:87:
         29:76:65:f7:02:8d:1c:9a:de:b9:3b:ba:fd:2f:8b:47:07:5e:
         5f:26:eb:55:41:75:09:fc:36:7b:32:76:03:25:63:08:d5:e9:
         dd:f8:de:b9:30:3f:ce:4a:b7:d2:49:57:3d:a2:3c:b0:bc:ca:
         dc:92:3f:4c:cf:52:5a:b5:94:ae:83:5d:78:c8:f4:dc:c5:cf:
         61:f9:cf:07:57:90:71:a3:6f:14:ab:09:3c:d0:5e:63:49:25:
         0c:44:c4:3f:b4:57:9b:11:ac:95:3b:ff:af:d8:bd:4d:11:84:
         ff:62:31:55:3f:4f:93:7e:f3:12:bf:05:b3:10:e6:8c:c4:2a:
         1a:35:07:4f:29:8c:07:53:7a:a3:07:a5:29:6f:6a:c3:0b:58:
         ac:dd:09:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 18:21:45 2025 by rpki-client