Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/3130332e3137372e31352e302f32342d3234203d3e20313437313338.roa
File:                     3130332e3137372e31352e302f32342d3234203d3e20313437313338.roa (raw, json)
Hash identifier:          eF9NB+BjEkYpNET986L8/mFTnt6eJT0/RWpF2VpYMW8=
Subject key identifier:   02:67:88:9C:7B:0F:61:35:49:66:EF:F5:F5:44:80:37:9C:8B:0D:26
Certificate issuer:       /CN=FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4
Certificate serial:       9A000BFCBCD054A931D282DAA507CDE7EDE060
Authority key identifier: FF:77:50:7E:6D:1F:0E:0B:6E:B0:11:2E:9C:FB:D1:AF:1C:1F:6D:D4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/3130332e3137372e31352e302f32342d3234203d3e20313437313338.roa
Signing time:             Sun 20 Apr 2025 18:00:01 +0000
ROA not before:           Sun 20 Apr 2025 17:55:01 +0000
ROA not after:            Sun 19 Apr 2026 18:00:01 +0000
asID:                     147138
IP address blocks:        103.177.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl
                          rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 May 2025 23:17:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            9a:00:0b:fc:bc:d0:54:a9:31:d2:82:da:a5:07:cd:e7:ed:e0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4
        Validity
            Not Before: Apr 20 17:55:01 2025 GMT
            Not After : Apr 19 18:00:01 2026 GMT
        Subject: CN=0267889C7B0F61354966EFF5F54480379C8B0D26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:58:72:e8:3b:0b:f8:ce:aa:0d:cb:96:12:5f:
                    f4:25:bc:dd:6a:f3:05:05:f9:7a:52:70:91:7f:69:
                    02:49:bf:d8:39:b6:8a:a2:0b:d7:8c:86:fd:9b:f3:
                    08:6e:ed:45:eb:ce:36:20:c4:54:2a:54:ac:a5:fb:
                    49:d9:61:ec:4f:e4:f1:7b:01:22:ab:b6:3e:fb:20:
                    80:2d:18:47:3c:ff:e8:67:ee:21:d6:a9:6f:92:5d:
                    e0:fa:69:03:c5:b0:d5:ce:6c:ce:de:f9:d4:de:85:
                    b3:87:1a:4c:aa:7b:ad:a6:50:bb:e1:35:da:f2:68:
                    1e:1e:ca:e8:9c:8c:04:a6:39:18:19:3f:a4:7a:35:
                    fa:30:fc:16:f5:e6:ac:c5:c3:8f:fd:b6:e1:04:ec:
                    c1:34:14:30:98:ca:02:9e:a7:5b:05:96:18:51:bc:
                    81:b6:4c:24:d2:ef:9e:b4:63:4b:7a:0c:bd:0c:5b:
                    74:35:62:d8:45:08:fe:e3:53:94:4c:98:05:f1:1c:
                    76:c6:5b:5f:81:f6:90:a0:a7:b6:99:cc:cd:20:e8:
                    f4:62:f6:33:92:08:44:7f:30:c6:32:f8:fa:b4:1f:
                    b7:82:e2:cc:ac:c7:af:1e:e7:b5:55:69:a1:da:84:
                    8f:5a:f0:36:ad:07:c4:4b:9e:27:4a:76:d6:d2:c4:
                    48:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:67:88:9C:7B:0F:61:35:49:66:EF:F5:F5:44:80:37:9C:8B:0D:26
            X509v3 Authority Key Identifier:
                keyid:FF:77:50:7E:6D:1F:0E:0B:6E:B0:11:2E:9C:FB:D1:AF:1C:1F:6D:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/3130332e3137372e31352e302f32342d3234203d3e20313437313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:f1:0c:b2:a6:ea:bb:b9:67:0d:0c:af:66:2d:6a:76:b0:c3:
         33:23:b8:ef:3c:5e:e4:ae:e7:ad:b3:1f:06:f4:37:4a:d2:dd:
         66:85:e5:fd:ac:68:f3:9e:4e:8c:cc:d8:12:a0:1e:c9:6a:e2:
         ad:15:43:c6:8b:0a:16:a4:6e:86:8a:22:61:c2:e1:02:92:37:
         5a:7f:3f:02:bd:50:af:fb:49:8f:6c:2e:52:9c:cd:e4:0d:3b:
         01:38:d5:5a:0e:5f:2a:cf:77:0a:89:5c:79:d8:cb:6a:99:c9:
         c1:c3:cf:2a:59:f3:96:ac:89:51:66:90:3a:d5:bf:c0:8f:4a:
         02:39:e5:ef:1b:4b:f4:5d:00:74:06:dd:ef:4f:42:32:f8:22:
         21:5a:c5:d8:76:37:1b:28:71:7d:d7:23:e5:e8:31:56:67:55:
         dd:10:7d:6e:00:4e:7d:39:98:cc:b5:98:21:18:35:f9:f9:54:
         b1:40:89:bf:6c:a2:90:d1:63:a5:07:99:8d:e6:77:75:21:ba:
         9a:d1:9d:d6:44:06:4c:f7:c4:46:7b:08:f7:a2:80:d3:a8:57:
         8c:1f:77:34:5d:18:55:99:10:80:e4:d6:33:81:33:f6:ac:d8:
         23:5e:df:5e:5d:57:c9:a8:a9:4b:0f:ce:9f:27:23:9c:08:b9:
         0e:a0:ea:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 04:21:26 2025 by rpki-client