Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/3130332e3137382e38352e302f32342d3234203d3e20313439333138.roa
File:                     3130332e3137382e38352e302f32342d3234203d3e20313439333138.roa (raw, json)
Hash identifier:          q8DwNNKz74IoWEZzT+iAC/h08ft27LvacBdr8MXv1MI=
Subject key identifier:   D8:30:65:8C:70:63:3C:62:0C:B9:7D:4E:A6:8D:D5:DE:83:5D:40:BC
Certificate issuer:       /CN=1DD4F8984667E142BB9C6F1133AA56899352286C
Certificate serial:       7C5984C09D5D438BAEAEB294B52DA7D511DE4151
Authority key identifier: 1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/3130332e3137382e38352e302f32342d3234203d3e20313439333138.roa
Signing time:             Fri 09 May 2025 10:02:55 +0000
ROA not before:           Fri 09 May 2025 09:57:55 +0000
ROA not after:            Fri 08 May 2026 10:02:55 +0000
asID:                     149318
IP address blocks:        103.178.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl
                          rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 May 2025 21:58:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:59:84:c0:9d:5d:43:8b:ae:ae:b2:94:b5:2d:a7:d5:11:de:41:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DD4F8984667E142BB9C6F1133AA56899352286C
        Validity
            Not Before: May  9 09:57:55 2025 GMT
            Not After : May  8 10:02:55 2026 GMT
        Subject: CN=D830658C70633C620CB97D4EA68DD5DE835D40BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4f:b7:7b:a9:cf:3c:16:22:3e:cf:26:bc:57:
                    a2:0d:86:f9:49:63:98:28:ec:c6:73:52:16:ac:f0:
                    c2:31:af:b5:71:f3:21:70:bc:41:3a:bc:7d:ce:5e:
                    32:22:3a:b1:35:bb:05:15:a8:9b:5d:57:35:ab:26:
                    ea:69:6c:30:e0:2d:50:f8:59:89:1e:44:03:0d:3a:
                    59:37:f0:88:a4:f6:e1:17:33:ca:cc:c8:3b:dc:ac:
                    f3:4e:db:2a:6a:e4:7f:fc:c1:0c:20:c2:3d:a8:4a:
                    c1:4f:49:28:f9:47:a2:cd:85:24:eb:ab:9e:30:cf:
                    e0:87:5e:84:1b:2c:90:48:50:ec:28:a2:bd:b9:f2:
                    fa:bc:96:3c:e5:10:8e:01:bf:ee:bf:74:30:75:8e:
                    f1:84:ef:5d:87:5e:2c:03:9b:91:09:9d:a1:48:5d:
                    ae:95:fb:f4:1f:9e:ef:6a:fa:f1:e5:00:42:19:c6:
                    4f:f4:0b:d5:3b:a6:ef:0e:d5:90:59:02:1b:1a:fd:
                    1c:3e:ad:5b:10:c4:e2:33:3e:d6:a7:ca:bb:21:e3:
                    cd:dc:97:bb:2f:d0:c9:50:b9:63:a2:b3:2d:2e:92:
                    8c:04:97:c6:5e:99:d8:fd:5b:9d:61:03:98:ac:38:
                    ce:a3:9e:80:11:ae:25:d2:71:7e:88:6d:d2:a2:31:
                    15:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:30:65:8C:70:63:3C:62:0C:B9:7D:4E:A6:8D:D5:DE:83:5D:40:BC
            X509v3 Authority Key Identifier:
                keyid:1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/3130332e3137382e38352e302f32342d3234203d3e20313439333138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:09:ce:8a:c3:ba:0a:4c:35:82:26:d9:bf:14:e1:8e:26:ac:
         78:0e:11:76:10:b5:5a:9e:f5:bb:32:c3:f5:04:cc:89:02:e9:
         01:ac:ec:f3:1c:c4:77:7c:5b:ec:dc:50:92:83:43:7a:79:d1:
         9d:82:78:08:af:e4:db:25:0c:87:5f:cd:9e:ed:0c:97:44:0a:
         1a:c1:ba:64:32:fc:a7:a1:0d:e2:f4:07:32:58:ca:15:13:e7:
         1c:13:1d:cc:2c:f3:23:fe:3b:e4:92:cf:6f:c0:4e:a4:84:6e:
         36:b5:69:50:06:a5:02:63:5e:0d:dc:da:75:c1:d6:27:95:b3:
         67:69:a5:30:d0:8b:7f:9d:0c:25:1a:9a:d6:16:e8:5b:df:7d:
         1c:67:22:c8:6b:a1:15:50:db:8a:07:cb:a9:b9:5f:54:e2:6b:
         9d:99:a6:eb:5d:cd:ba:99:06:85:a0:02:01:16:97:f4:e6:3e:
         11:d1:d4:ac:25:25:37:08:c9:76:b5:32:a3:47:22:4a:13:6f:
         f5:49:b5:5c:eb:aa:fc:b8:cf:6b:a1:72:64:c7:c0:5f:8a:d2:
         b2:37:ca:3d:95:24:80:9b:bf:2a:15:78:04:e1:0c:91:f5:3b:
         a0:55:68:2c:1c:e6:b9:52:ed:8f:ad:12:2e:3e:62:1e:5b:f5:
         7a:e9:a0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:36:19 2025 by rpki-client