Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/3130332e32322e3234382e302f32342d3234203d3e20313331313131.roa
File:                     3130332e32322e3234382e302f32342d3234203d3e20313331313131.roa (raw, json)
Hash identifier:          UtJjITDA9JHQ6VJXBVisu99jt556rMiuNEZSGObwvAc=
Subject key identifier:   CD:84:A8:59:83:F8:DC:4E:F2:61:C6:2E:83:09:19:FA:44:A8:1F:DB
Certificate issuer:       /CN=C1AF8C999E9D06DADEBC387D78B305AB8716DC2F
Certificate serial:       741399322826A81F32CBE7C9BAC96F0622FB2DEE
Authority key identifier: C1:AF:8C:99:9E:9D:06:DA:DE:BC:38:7D:78:B3:05:AB:87:16:DC:2F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/3130332e32322e3234382e302f32342d3234203d3e20313331313131.roa
Signing time:             Tue 10 Jun 2025 15:00:02 +0000
ROA not before:           Tue 10 Jun 2025 14:55:02 +0000
ROA not after:            Tue 09 Jun 2026 15:00:02 +0000
asID:                     131111
IP address blocks:        103.22.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl
                          rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Jun 2025 21:41:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:13:99:32:28:26:a8:1f:32:cb:e7:c9:ba:c9:6f:06:22:fb:2d:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1AF8C999E9D06DADEBC387D78B305AB8716DC2F
        Validity
            Not Before: Jun 10 14:55:02 2025 GMT
            Not After : Jun  9 15:00:02 2026 GMT
        Subject: CN=CD84A85983F8DC4EF261C62E830919FA44A81FDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6d:00:a2:b9:f1:4f:5a:66:47:af:33:01:39:
                    a1:c7:0e:1d:d0:05:e9:d5:ea:34:fc:d5:87:5c:fb:
                    13:67:b1:26:19:8c:3c:55:9e:5a:eb:be:26:4f:ec:
                    09:16:79:ca:56:5f:e7:15:3a:7e:87:a5:d7:aa:85:
                    e6:ae:eb:2e:09:bd:90:33:c3:6f:4a:f7:c7:9a:77:
                    e7:f6:f4:b6:b5:8b:ee:e8:39:c6:28:38:b5:82:d1:
                    cc:4b:5d:e2:b2:b9:74:cd:6b:00:c0:8a:ec:22:53:
                    19:12:cf:c4:fa:bc:f2:7c:b0:5f:66:a4:45:63:21:
                    66:2f:77:c3:19:00:ac:68:1f:de:77:eb:2e:17:dc:
                    a4:6c:3a:57:0e:2e:c9:9f:71:a3:75:94:84:66:39:
                    12:94:9c:ca:4d:5a:d8:b6:60:36:7d:42:d4:5f:06:
                    2c:37:96:f6:4c:90:69:64:87:c4:7d:ce:d7:e6:fc:
                    1a:bc:94:76:93:39:5d:8c:87:5a:d5:20:1d:b9:7a:
                    f6:73:4d:8f:ab:79:7d:84:09:05:09:ec:0f:b7:0d:
                    07:9c:e8:89:f3:ca:92:20:32:c0:2f:2e:0e:81:47:
                    3c:e2:05:2c:e8:4c:5f:67:a1:78:0d:e6:47:a2:0b:
                    74:82:73:4e:e0:c9:08:42:a3:18:33:ea:20:a6:66:
                    d5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:84:A8:59:83:F8:DC:4E:F2:61:C6:2E:83:09:19:FA:44:A8:1F:DB
            X509v3 Authority Key Identifier:
                keyid:C1:AF:8C:99:9E:9D:06:DA:DE:BC:38:7D:78:B3:05:AB:87:16:DC:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/3130332e32322e3234382e302f32342d3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.22.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:9e:0c:83:e5:34:49:40:3d:0c:ae:8e:22:6c:42:de:84:91:
         bf:06:e8:f9:ff:35:a0:c6:4a:57:59:41:ee:2b:b9:70:9e:0e:
         c4:af:06:43:fb:19:f6:0a:a9:ea:25:b9:6b:36:1a:2b:e2:e8:
         74:ba:c1:2e:98:68:24:02:45:47:d0:13:44:e9:fa:3c:6e:1e:
         56:9e:37:5b:77:f3:e4:c2:97:41:da:61:c5:b3:c6:22:d2:6e:
         50:32:53:88:95:15:b5:06:f7:59:63:0d:4e:f5:d6:71:5f:81:
         fd:4c:23:46:c9:a1:b3:6c:c1:f7:fd:7e:4d:7b:3c:83:d4:19:
         63:be:1a:f4:a8:1d:15:b8:b5:ca:ce:36:1e:d2:95:9e:65:08:
         f0:b4:e8:0c:eb:40:ba:f7:ee:35:47:10:75:13:d2:c8:48:87:
         19:de:91:2c:94:bd:7e:19:ce:06:6a:bf:8e:ac:2d:2b:f0:9c:
         d3:f4:38:c0:fe:d7:a4:04:21:18:85:21:d9:3c:36:c1:56:af:
         ba:e7:60:1b:d7:a6:dc:6f:06:bb:de:c7:e8:a6:91:ad:ed:ba:
         59:38:1c:1b:f2:dc:0a:9e:8d:87:fe:50:e5:94:12:07:eb:f0:
         61:19:e1:0c:b4:ae:7a:bd:3a:4d:05:af:f1:28:71:16:a6:2a:
         40:f2:6f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:22:13 2025 by rpki-client