Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/3130332e3136342e35392e302f32342d3234203d3e20313431393130.roa
File:                     3130332e3136342e35392e302f32342d3234203d3e20313431393130.roa (raw, json)
Hash identifier:          IoIh0X1wtCWoeOPeFilpjxljpSISulJCU4DOxkNVruE=
Subject key identifier:   C3:FB:95:66:B8:27:9F:E7:32:21:91:28:D8:AF:15:91:CB:2F:C2:3E
Certificate issuer:       /CN=F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F
Certificate serial:       5079D2AE75C29985E5CECEC0A0CF0AA9E26712B9
Authority key identifier: F1:BD:A5:72:CF:8D:79:20:C2:10:DB:CA:14:54:B1:90:4F:1C:1D:5F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/3130332e3136342e35392e302f32342d3234203d3e20313431393130.roa
Signing time:             Tue 08 Apr 2025 05:00:01 +0000
ROA not before:           Tue 08 Apr 2025 04:55:01 +0000
ROA not after:            Tue 07 Apr 2026 05:00:01 +0000
asID:                     141910
IP address blocks:        103.164.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl
                          rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 04:50:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:79:d2:ae:75:c2:99:85:e5:ce:ce:c0:a0:cf:0a:a9:e2:67:12:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F
        Validity
            Not Before: Apr  8 04:55:01 2025 GMT
            Not After : Apr  7 05:00:01 2026 GMT
        Subject: CN=C3FB9566B8279FE732219128D8AF1591CB2FC23E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:cb:d8:82:54:f0:eb:0b:9e:ab:d4:e8:d4:0f:
                    58:e5:31:03:d5:ed:be:03:a2:e3:66:38:2b:4d:65:
                    9e:54:db:28:af:3e:98:87:80:5c:0b:3a:5c:0f:84:
                    72:19:28:a4:c0:9e:15:b7:b4:65:f4:a4:35:7c:4b:
                    e0:3c:6f:40:e1:81:e2:b6:47:46:30:e8:35:bf:1c:
                    8a:1c:56:0f:80:57:27:a5:9e:28:15:b1:af:d8:a8:
                    fb:f1:90:35:d2:b5:ac:17:15:29:5e:17:3b:89:e6:
                    2b:79:e5:bf:82:3d:e3:0c:cb:15:4d:72:68:e1:d3:
                    49:e2:38:26:c5:d2:35:c9:c7:6a:1a:43:aa:2a:96:
                    ee:1b:c8:04:2c:a5:1b:50:e7:bf:39:c9:fd:f5:a3:
                    ec:f9:b1:3b:cc:94:0b:6f:bf:e1:dc:c6:4c:f3:a7:
                    98:e2:ce:38:5f:da:eb:1a:9f:d9:60:aa:b6:27:08:
                    b4:46:67:d8:02:8f:a5:56:a6:7d:df:2c:c6:96:6a:
                    66:00:e9:2d:63:a2:ea:75:4c:c1:98:ad:80:0c:d1:
                    62:90:69:88:a9:f1:b2:80:84:21:ab:76:84:c5:7b:
                    e7:e4:76:33:9f:02:f4:90:41:ff:9e:29:10:11:ca:
                    3f:66:dc:fa:6f:a0:0d:27:79:70:26:3c:b0:30:9b:
                    57:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FB:95:66:B8:27:9F:E7:32:21:91:28:D8:AF:15:91:CB:2F:C2:3E
            X509v3 Authority Key Identifier:
                keyid:F1:BD:A5:72:CF:8D:79:20:C2:10:DB:CA:14:54:B1:90:4F:1C:1D:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/3130332e3136342e35392e302f32342d3234203d3e20313431393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:ac:41:ea:c1:b6:61:7c:00:66:02:f0:4f:95:b5:8d:cb:b3:
         4a:b2:86:a7:bb:dd:0b:71:32:6d:88:e2:1d:7b:46:dc:30:a6:
         9d:01:ef:33:c9:c7:84:74:80:33:dd:e2:18:cc:97:ba:36:e6:
         a2:df:70:35:f3:ab:e3:bd:c2:e3:1a:b2:c8:84:11:09:11:33:
         97:3b:0d:2e:5c:ad:75:6f:73:b6:f4:8f:f7:f7:f0:f5:8f:1d:
         d9:57:7c:da:29:f8:3d:06:fc:93:78:50:0b:ad:e2:65:f5:48:
         1d:3d:99:37:dc:6e:50:bf:da:83:eb:e8:93:f9:c1:65:63:0c:
         43:af:03:d8:99:4f:68:d8:9e:3d:7b:a7:9b:e4:92:97:aa:c1:
         a3:f7:cc:55:bb:7b:8d:77:d7:bd:4d:15:e1:43:d9:31:07:1b:
         52:1f:8b:26:5a:c3:b1:aa:5d:e2:b5:17:55:a7:fd:bf:d5:72:
         c5:e8:17:84:c3:ac:24:85:31:e4:04:7b:ee:f4:b5:62:bf:c3:
         86:d7:0d:7e:bc:f9:3d:f2:f7:37:16:87:0f:eb:8b:82:71:15:
         5a:06:7f:c7:0f:d5:c0:79:51:ed:4a:3c:e6:d8:e7:ba:ae:be:
         35:e1:b2:94:64:33:cd:da:9e:94:de:49:ea:87:2a:bb:f6:88:
         6e:bb:e0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:12:10 2025 by rpki-client