Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/3130332e3139342e34362e302f32342d3234203d3e20313439393731.roa
File:                     3130332e3139342e34362e302f32342d3234203d3e20313439393731.roa (raw, json)
Hash identifier:          dc/JbMbDw67KzLs6jS8AcuMUyvOVm39Xbb1sGTpGz/c=
Subject key identifier:   A6:6E:F6:1B:85:81:28:A1:8E:1A:B6:65:60:28:77:72:08:DA:3C:97
Certificate issuer:       /CN=4F679A207D2588B709C82CDAB000736182F881E1
Certificate serial:       03AEA4E68D25971B543D0B4146A2EE06A8A3EE6D
Authority key identifier: 4F:67:9A:20:7D:25:88:B7:09:C8:2C:DA:B0:00:73:61:82:F8:81:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/3130332e3139342e34362e302f32342d3234203d3e20313439393731.roa
Signing time:             Thu 08 May 2025 05:38:01 +0000
ROA not before:           Thu 08 May 2025 05:33:01 +0000
ROA not after:            Thu 07 May 2026 05:38:01 +0000
asID:                     149971
IP address blocks:        103.194.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.crl
                          rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 May 2025 20:09:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ae:a4:e6:8d:25:97:1b:54:3d:0b:41:46:a2:ee:06:a8:a3:ee:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F679A207D2588B709C82CDAB000736182F881E1
        Validity
            Not Before: May  8 05:33:01 2025 GMT
            Not After : May  7 05:38:01 2026 GMT
        Subject: CN=A66EF61B858128A18E1AB6656028777208DA3C97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:79:88:15:0a:01:50:72:b1:12:35:cc:63:06:
                    47:21:08:42:a6:93:11:63:32:6a:f2:1f:3d:fa:d0:
                    64:a8:7b:5d:57:e9:29:af:59:b6:15:f0:6e:24:da:
                    aa:e2:29:2f:7f:49:47:38:3f:7a:e8:ea:44:04:10:
                    76:61:d4:03:5e:ec:6e:98:64:71:d9:bd:eb:31:1e:
                    71:84:56:aa:45:d9:a0:d0:c2:18:ff:27:c7:d1:43:
                    92:75:d8:3b:af:84:c6:84:d1:6b:e1:76:d8:67:41:
                    ad:9f:4c:f8:4c:39:d7:ed:b1:fc:be:38:4b:36:50:
                    53:ed:e6:c9:6c:5f:26:a3:f4:a3:35:e8:bf:09:d1:
                    06:62:96:23:23:5f:72:73:1d:a1:47:dc:d6:90:6d:
                    62:7e:c0:da:73:e3:ef:b7:d7:8c:23:fc:ed:d7:31:
                    bb:b6:95:e4:bd:4f:16:e6:c4:55:2e:64:ba:88:16:
                    c1:80:f4:eb:eb:77:99:29:6d:ab:9c:d0:c5:93:a6:
                    76:f9:34:3b:ce:26:79:9f:2f:3a:2d:41:e4:3c:b2:
                    f2:40:52:65:85:90:47:75:9e:7b:04:11:8d:8b:bc:
                    0c:0f:7f:04:ee:da:b9:97:35:c3:1e:ab:89:d5:f0:
                    10:8f:64:eb:3a:9d:56:78:04:5a:5e:9a:a4:3a:8c:
                    bd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:6E:F6:1B:85:81:28:A1:8E:1A:B6:65:60:28:77:72:08:DA:3C:97
            X509v3 Authority Key Identifier:
                keyid:4F:67:9A:20:7D:25:88:B7:09:C8:2C:DA:B0:00:73:61:82:F8:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/3130332e3139342e34362e302f32342d3234203d3e20313439393731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.194.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:a6:83:4a:7f:a6:6c:62:c2:13:a7:49:76:ea:c6:86:d5:76:
         eb:a0:80:50:3c:b9:af:de:ad:68:59:67:eb:f2:65:a0:57:50:
         17:35:d6:a4:b9:ef:6f:1b:f7:a7:29:fc:be:c0:5c:3f:a4:d7:
         3b:72:23:c4:9b:a3:ff:bf:b5:d5:23:b8:41:e7:b5:d3:34:25:
         1e:e7:01:9a:5c:2e:19:9f:b5:33:ef:01:f8:b3:c9:a6:16:c5:
         bb:4b:dc:f3:72:40:a1:ea:3b:cc:e9:7c:c3:f7:0d:41:05:6f:
         29:38:ac:54:36:a8:c3:97:06:88:2a:29:ab:6d:55:b8:90:37:
         3d:38:5a:9c:62:f2:53:91:da:63:6c:b0:2a:76:29:5c:19:58:
         58:52:28:04:b5:9a:3b:88:6e:93:16:3d:83:3f:72:36:69:38:
         ff:9a:db:c9:ba:e2:3a:3a:26:ed:e4:47:07:f7:32:3a:9b:e1:
         8d:b3:89:a9:83:c0:41:19:9b:81:7c:13:f9:93:e1:08:94:08:
         4c:ce:4e:34:2c:ad:01:91:92:9e:38:ff:85:80:f0:53:6a:6a:
         d7:20:c3:1b:3d:5e:f3:4d:4c:ea:0a:8d:68:3d:2a:e1:5e:d1:
         16:1d:8e:b7:46:bd:88:be:ee:55:13:79:e5:6c:c9:9c:dd:96:
         14:5f:95:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 04:42:11 2025 by rpki-client