Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/3130332e3136302e3131392e302f32342d3234203d3e20313431353839.roa
File:                     3130332e3136302e3131392e302f32342d3234203d3e20313431353839.roa (raw, json)
Hash identifier:          9dEps8rTL9BK+ay3BeWlPldLGwUU4MuBEz8LBiFA+Dw=
Subject key identifier:   32:5E:F5:25:3D:5E:7E:97:C8:F4:BA:26:38:BB:A8:DE:E9:AA:36:9A
Certificate issuer:       /CN=462310BC71429E762524CFB126D88F0808C17EA6
Certificate serial:       58E911E18DABA2829AFA89B63DDC82D4C7636832
Authority key identifier: 46:23:10:BC:71:42:9E:76:25:24:CF:B1:26:D8:8F:08:08:C1:7E:A6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/462310BC71429E762524CFB126D88F0808C17EA6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/3130332e3136302e3131392e302f32342d3234203d3e20313431353839.roa
Signing time:             Thu 08 May 2025 12:00:01 +0000
ROA not before:           Thu 08 May 2025 11:55:01 +0000
ROA not after:            Thu 07 May 2026 12:00:01 +0000
asID:                     141589
IP address blocks:        103.160.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/462310BC71429E762524CFB126D88F0808C17EA6.crl
                          rsync://repo-rpki.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/462310BC71429E762524CFB126D88F0808C17EA6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/462310BC71429E762524CFB126D88F0808C17EA6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 May 2025 01:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:e9:11:e1:8d:ab:a2:82:9a:fa:89:b6:3d:dc:82:d4:c7:63:68:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=462310BC71429E762524CFB126D88F0808C17EA6
        Validity
            Not Before: May  8 11:55:01 2025 GMT
            Not After : May  7 12:00:01 2026 GMT
        Subject: CN=325EF5253D5E7E97C8F4BA2638BBA8DEE9AA369A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6b:90:80:2f:3c:44:20:ce:5f:8f:02:0e:fc:
                    cf:22:3d:f0:22:fb:7b:e5:71:73:3e:53:8a:23:cc:
                    fc:28:0a:b7:f1:ba:26:4e:04:9b:f5:05:53:30:69:
                    fa:c7:96:11:d3:a8:b5:4e:20:79:5e:55:f2:9c:17:
                    db:f4:b6:59:96:5c:a6:e4:cc:d4:6d:9d:df:97:a1:
                    12:e1:3d:d7:30:54:9c:e9:6e:24:0c:ae:c5:6f:db:
                    55:0a:e1:ad:b3:a4:84:f2:f7:e3:5c:e2:41:6d:8e:
                    4a:e4:d5:a1:21:67:fe:35:1f:f3:8a:ff:91:65:f1:
                    1a:a7:50:6a:b5:00:7e:0d:77:e3:31:76:2f:64:28:
                    69:c8:c5:2b:ed:e0:f9:68:44:8e:46:ab:40:6b:a6:
                    62:3a:74:c5:75:b4:47:25:9d:2d:d5:91:d9:56:0a:
                    35:10:bf:d2:21:dc:98:a1:35:6d:4b:d7:5d:70:d9:
                    fd:ea:4d:6c:9a:65:02:10:5a:66:76:fc:a5:0d:9b:
                    0a:fc:d5:41:84:e7:7a:0d:e4:84:57:cc:45:10:30:
                    2c:3f:e4:1b:ba:07:28:e1:ad:07:52:ef:b5:82:a6:
                    34:a0:d3:81:60:45:60:85:bd:cc:3e:c9:fe:bf:70:
                    d1:65:72:34:99:4c:28:0f:d8:96:2e:ca:8f:96:11:
                    59:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:5E:F5:25:3D:5E:7E:97:C8:F4:BA:26:38:BB:A8:DE:E9:AA:36:9A
            X509v3 Authority Key Identifier:
                keyid:46:23:10:BC:71:42:9E:76:25:24:CF:B1:26:D8:8F:08:08:C1:7E:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/462310BC71429E762524CFB126D88F0808C17EA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/462310BC71429E762524CFB126D88F0808C17EA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/3130332e3136302e3131392e302f32342d3234203d3e20313431353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:d2:b5:6c:9b:0d:f9:cc:78:c0:62:2d:d9:ab:0d:30:8f:0a:
         41:51:62:78:49:76:31:1d:7a:36:0e:28:90:13:a1:08:24:b3:
         0f:b8:c8:67:f3:11:76:6c:f1:88:c8:2f:7e:28:f0:5a:92:ed:
         ac:39:b1:b7:77:4f:c4:98:c3:b0:40:18:51:4d:5c:f0:81:99:
         4f:b7:bc:22:99:4a:0b:dc:53:7d:e5:15:8c:0c:13:9b:15:41:
         62:89:ee:3c:2f:08:72:8b:ee:31:22:30:2b:ce:34:26:76:99:
         55:41:01:fa:e6:bc:9e:36:c9:90:97:eb:b2:e4:8a:95:8a:da:
         1a:92:02:8d:07:df:19:00:5a:f2:cd:96:1e:cd:07:65:3e:ac:
         e6:a1:65:fd:81:ac:98:e3:0c:c2:41:84:50:3e:e0:6a:08:4b:
         4e:d7:5a:a8:b0:fc:d7:37:72:d9:b1:9c:cf:d7:cf:25:35:62:
         e9:4d:b9:a0:2e:dd:f6:01:0b:86:13:fd:81:8c:0f:c4:45:dc:
         da:d8:5b:29:dc:ea:3f:41:b7:42:d3:f9:9f:41:cc:e9:e6:b6:
         a9:9a:a6:28:ea:e4:d5:e0:04:99:18:58:a1:a9:09:3b:bf:67:
         65:9f:3c:34:f4:8b:0d:30:b0:2f:ae:3d:53:3c:3f:c1:cf:97:
         31:4c:78:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:45:28 2025 by rpki-client