Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/3130332e3139302e3131342e302f32332d3233203d3e203435333035.roa
File:                     3130332e3139302e3131342e302f32332d3233203d3e203435333035.roa (raw, json)
Hash identifier:          ULVDgV6Ym293ne4NjwFyx9fV7GwDIsvmtft/evHC1jQ=
Subject key identifier:   1B:3F:8C:A0:18:C3:A7:61:06:13:4F:04:CA:B6:7A:D7:10:E5:F7:41
Certificate issuer:       /CN=8B237B2BC0581B556DD5B4B0847F9C83408BA93D
Certificate serial:       6B84A2962941BE96E61D4C5E02727F00E73A3323
Authority key identifier: 8B:23:7B:2B:C0:58:1B:55:6D:D5:B4:B0:84:7F:9C:83:40:8B:A9:3D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/3130332e3139302e3131342e302f32332d3233203d3e203435333035.roa
Signing time:             Fri 02 May 2025 01:00:02 +0000
ROA not before:           Fri 02 May 2025 00:55:02 +0000
ROA not after:            Fri 01 May 2026 01:00:02 +0000
asID:                     45305
IP address blocks:        103.190.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.crl
                          rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 May 2025 21:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:84:a2:96:29:41:be:96:e6:1d:4c:5e:02:72:7f:00:e7:3a:33:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B237B2BC0581B556DD5B4B0847F9C83408BA93D
        Validity
            Not Before: May  2 00:55:02 2025 GMT
            Not After : May  1 01:00:02 2026 GMT
        Subject: CN=1B3F8CA018C3A76106134F04CAB67AD710E5F741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:57:71:4d:9b:2e:e7:89:76:81:39:5b:1f:83:
                    47:76:5a:79:7f:a7:a1:cf:de:1f:07:4e:65:ea:11:
                    d8:d8:0a:e0:76:4e:ec:b9:3a:b9:d7:e9:c7:1d:84:
                    13:07:88:16:a8:9d:ed:0f:b3:a0:e8:c7:85:94:7b:
                    5e:29:63:72:8e:98:57:ab:43:1a:36:01:d0:88:ca:
                    ee:1e:fb:96:4f:8d:b2:7e:fc:ae:6e:8c:bf:f7:42:
                    13:74:da:f2:fa:70:53:c2:23:4f:3b:ad:95:de:a2:
                    d2:37:1a:b2:49:dc:fd:12:26:d2:a7:01:15:49:24:
                    49:6e:58:b7:24:79:b1:c5:98:73:44:df:0b:2e:fc:
                    a7:9e:aa:d0:a0:55:ff:25:63:db:19:07:7a:a3:5c:
                    93:6b:0c:ed:9a:ef:59:87:e6:4e:fa:6f:8e:27:79:
                    f0:a2:03:a6:b7:c6:6a:cf:aa:8e:9c:c8:6b:92:7f:
                    48:2f:7f:e6:d1:5a:9d:19:c7:97:3f:50:a1:34:21:
                    42:33:cd:88:a1:8f:06:0c:ed:07:36:6e:0d:dd:eb:
                    2b:c1:dd:a2:4f:cb:a5:a0:17:9f:1d:21:94:9b:2f:
                    34:93:e2:6c:6a:a5:38:d0:3c:a9:33:5a:43:b5:7a:
                    23:0a:da:ed:02:ff:b4:be:3d:ad:d8:f3:88:39:aa:
                    51:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:3F:8C:A0:18:C3:A7:61:06:13:4F:04:CA:B6:7A:D7:10:E5:F7:41
            X509v3 Authority Key Identifier:
                keyid:8B:23:7B:2B:C0:58:1B:55:6D:D5:B4:B0:84:7F:9C:83:40:8B:A9:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/3130332e3139302e3131342e302f32332d3233203d3e203435333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:92:21:8a:52:92:26:ca:79:64:a3:41:2f:0b:40:48:32:43:
         ca:27:18:91:77:fd:09:d5:56:ac:f7:84:c9:cf:ba:71:65:4d:
         10:93:7c:12:3b:40:19:c0:9d:c6:1b:f0:92:16:85:c7:43:b2:
         15:0d:c9:0d:7f:da:84:f8:a6:58:7f:f5:64:75:27:f6:5b:62:
         bd:87:4a:8a:3c:79:ed:80:e7:97:ed:3e:66:d9:bb:db:57:cb:
         a4:4d:c4:8f:12:f4:ea:65:dc:f6:b2:93:0f:ac:e6:ce:bd:7c:
         bd:bb:0b:01:ff:d6:4b:8c:6d:47:8b:ab:e3:94:84:43:03:39:
         37:b4:e4:64:dd:3d:b8:7e:17:8d:f6:f0:de:f6:23:f3:d1:6a:
         ee:05:cf:0b:03:e5:71:bc:8c:04:56:38:aa:e4:c0:64:00:a9:
         cd:a9:22:cc:6a:0e:7f:4b:27:9e:dc:c9:1a:e5:cd:d4:50:bb:
         45:b2:a4:85:15:55:54:3b:22:e0:03:5f:26:a2:c5:d9:5d:34:
         52:68:13:74:5e:f1:7a:42:28:57:88:74:8e:55:a0:3f:89:cf:
         f7:f5:85:fe:f3:cc:19:91:4d:d7:8f:2c:05:a9:71:95:fc:ad:
         e8:b8:1e:4c:6b:01:0c:9c:5b:be:4e:7e:66:bd:f4:76:7e:af:
         d2:f2:55:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 16:00:30 2025 by rpki-client