Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/3130332e3136342e35382e302f32342d3234203d3e20313431393130.roa
File:                     3130332e3136342e35382e302f32342d3234203d3e20313431393130.roa (raw, json)
Hash identifier:          jruW/AUePdWFgbuv5StGivVVFVpHpBSL3kjIWCplc4g=
Subject key identifier:   BA:D4:0A:CB:AD:C4:B6:4D:48:07:A1:49:A7:29:73:07:5F:C4:78:B1
Certificate issuer:       /CN=F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F
Certificate serial:       1B1859C258A706F865C6BE4C5FBC6BF006AFF1B9
Authority key identifier: F1:BD:A5:72:CF:8D:79:20:C2:10:DB:CA:14:54:B1:90:4F:1C:1D:5F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/3130332e3136342e35382e302f32342d3234203d3e20313431393130.roa
Signing time:             Tue 08 Apr 2025 05:00:01 +0000
ROA not before:           Tue 08 Apr 2025 04:55:01 +0000
ROA not after:            Tue 07 Apr 2026 05:00:01 +0000
asID:                     141910
IP address blocks:        103.164.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl
                          rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Jul 2025 18:05:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:18:59:c2:58:a7:06:f8:65:c6:be:4c:5f:bc:6b:f0:06:af:f1:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F
        Validity
            Not Before: Apr  8 04:55:01 2025 GMT
            Not After : Apr  7 05:00:01 2026 GMT
        Subject: CN=BAD40ACBADC4B64D4807A149A72973075FC478B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d6:41:77:0e:b5:e8:c6:89:38:10:a8:1f:a0:
                    50:94:67:32:cf:f2:31:57:1f:f6:52:f6:bc:ba:e2:
                    f6:ef:22:75:fd:3c:01:5d:7a:34:3b:b7:6f:a0:9d:
                    94:c0:eb:a1:ad:54:b9:f4:58:a9:c8:90:2a:f5:cb:
                    dc:94:84:e6:ff:ae:27:a7:35:41:2c:6e:81:32:a6:
                    eb:a8:58:72:df:15:1d:26:6e:60:fa:cb:79:00:9c:
                    04:c6:f7:e4:a2:9e:3e:ed:97:07:50:d8:a2:fe:6e:
                    e2:91:5b:7e:ec:a9:08:ac:dc:fd:5e:60:c1:db:5e:
                    28:b5:dd:4b:45:a3:38:b7:05:fd:7e:2f:35:ee:06:
                    57:f6:d3:26:bf:83:1c:9f:f5:05:4e:64:dc:d8:c4:
                    46:cb:21:10:21:6f:07:60:4e:a5:d0:0e:3e:72:da:
                    d0:86:71:87:2e:68:de:f4:4b:2e:96:08:bc:f4:f3:
                    be:0b:f6:7a:4e:55:7c:4b:2a:86:ae:61:f9:bb:71:
                    a9:a7:21:2d:97:0c:da:6d:0d:50:a1:d7:a5:b4:3e:
                    b8:04:f5:d2:c0:28:fe:f4:bd:42:b9:5d:25:8b:69:
                    cd:d6:59:cd:ba:cf:f5:18:f6:3b:43:67:e5:80:5b:
                    8d:83:61:ee:51:f5:a9:ba:b8:ae:da:a5:4e:2f:bc:
                    bf:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D4:0A:CB:AD:C4:B6:4D:48:07:A1:49:A7:29:73:07:5F:C4:78:B1
            X509v3 Authority Key Identifier:
                keyid:F1:BD:A5:72:CF:8D:79:20:C2:10:DB:CA:14:54:B1:90:4F:1C:1D:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/3130332e3136342e35382e302f32342d3234203d3e20313431393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:bd:fa:b9:b2:52:9e:13:99:39:ca:cd:15:e1:6b:7e:7d:2a:
         27:b4:be:86:59:8f:46:a0:63:d3:97:f5:0d:7b:c6:0d:2b:a7:
         20:eb:8c:3e:b2:c0:fd:44:79:fa:c8:a1:c0:b8:f7:a2:94:78:
         e1:69:8d:1f:49:b2:fc:ec:8b:09:82:fa:18:06:ef:20:f5:dc:
         0e:e9:ac:37:28:25:2d:2e:ca:71:8d:d3:b2:8a:52:03:09:b1:
         0f:54:97:3e:61:85:0a:83:fd:4c:41:3f:7a:a9:c4:10:63:96:
         e3:67:68:bc:2a:70:0f:bb:0d:93:31:88:2e:10:23:00:07:89:
         94:1c:1a:33:57:35:4f:a4:ee:ef:32:d9:54:40:cc:e9:cf:92:
         d4:47:b4:fe:ea:5e:88:1c:ba:9f:2e:6f:5b:e2:1b:48:92:e7:
         04:59:c5:f9:52:bf:dc:9c:0d:cf:17:2b:78:3e:0c:c7:77:fb:
         62:18:62:20:fc:5d:d9:1c:12:12:fb:7e:a4:06:82:b7:c2:c6:
         16:b5:0d:c6:be:5a:19:6e:cc:5d:00:4f:08:3d:87:33:aa:fb:
         b2:3e:75:1e:8f:7d:e6:1f:e9:77:71:7e:f8:e5:9f:d3:3c:19:
         de:7d:f2:7b:8c:9a:19:79:4d:08:24:d0:47:22:e0:15:ff:5a:
         e6:fc:b6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 22:48:47 2025 by rpki-client