Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/3130332e32322e3235302e302f32342d3234203d3e20313331313131.roa
File:                     3130332e32322e3235302e302f32342d3234203d3e20313331313131.roa (raw, json)
Hash identifier:          516xDtvKLseki+IBX6h+mKjxbuiKgwqfJB4LmOXicXw=
Subject key identifier:   35:29:6A:78:C5:ED:37:00:DD:0E:77:1D:8E:6A:9B:D3:74:BB:1D:00
Certificate issuer:       /CN=C1AF8C999E9D06DADEBC387D78B305AB8716DC2F
Certificate serial:       7888B5A143AB157080140AB2C4C4F16986A22C6C
Authority key identifier: C1:AF:8C:99:9E:9D:06:DA:DE:BC:38:7D:78:B3:05:AB:87:16:DC:2F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/3130332e32322e3235302e302f32342d3234203d3e20313331313131.roa
Signing time:             Tue 10 Jun 2025 16:00:02 +0000
ROA not before:           Tue 10 Jun 2025 15:55:02 +0000
ROA not after:            Tue 09 Jun 2026 16:00:02 +0000
asID:                     131111
IP address blocks:        103.22.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl
                          rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Jun 2025 21:41:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:88:b5:a1:43:ab:15:70:80:14:0a:b2:c4:c4:f1:69:86:a2:2c:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1AF8C999E9D06DADEBC387D78B305AB8716DC2F
        Validity
            Not Before: Jun 10 15:55:02 2025 GMT
            Not After : Jun  9 16:00:02 2026 GMT
        Subject: CN=35296A78C5ED3700DD0E771D8E6A9BD374BB1D00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d2:db:da:e7:df:d3:c9:b4:6f:8b:8f:b5:c7:
                    5f:17:8a:3b:68:f9:d3:67:38:c4:9b:05:9c:c5:a4:
                    24:4d:aa:ba:43:3d:68:33:51:b6:ff:db:42:9d:96:
                    2a:6c:d6:46:46:8a:e1:54:27:10:87:f7:27:1f:65:
                    c2:60:60:0c:02:9b:8f:7c:a0:06:91:55:df:3e:f3:
                    57:e7:22:c3:fc:bb:72:78:be:53:48:a4:c3:4c:29:
                    63:8c:8b:0d:5b:90:3f:94:64:6e:9f:1d:ed:04:94:
                    ae:60:9a:b1:14:27:68:34:9e:02:1f:4f:24:47:46:
                    3d:d5:1c:21:0e:9c:7e:fb:82:8d:b1:2f:53:56:d5:
                    81:51:2f:9d:a1:62:24:0e:62:a3:a7:a1:15:62:27:
                    34:af:b0:b3:28:0d:f7:ee:64:ae:30:c6:c7:cc:85:
                    6d:cb:73:8a:2d:8c:bf:d0:c3:35:46:37:ce:97:5d:
                    37:76:c7:14:a6:9e:bb:13:4d:84:34:31:89:39:7e:
                    cd:ab:60:37:e1:f6:7d:63:71:04:a3:3f:27:3e:e8:
                    9c:dd:2e:58:37:76:b6:e0:5e:3c:8b:b6:2b:26:d7:
                    41:ad:57:c8:29:53:64:55:40:35:fa:c7:12:41:c7:
                    94:ca:04:5e:ff:6b:a5:59:ea:4f:0b:4d:57:ae:f9:
                    49:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:29:6A:78:C5:ED:37:00:DD:0E:77:1D:8E:6A:9B:D3:74:BB:1D:00
            X509v3 Authority Key Identifier:
                keyid:C1:AF:8C:99:9E:9D:06:DA:DE:BC:38:7D:78:B3:05:AB:87:16:DC:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/3130332e32322e3235302e302f32342d3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.22.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:d8:e4:2e:4b:16:69:61:19:4d:3d:dc:1f:08:30:bf:e1:3d:
         9e:0d:3c:b4:d2:dd:d4:a4:c4:1c:15:45:70:b0:db:27:3f:c3:
         9e:7b:eb:d8:87:a4:96:cd:63:9e:b1:0c:ac:26:78:e3:f4:39:
         69:8a:d8:57:08:c1:2b:f5:89:70:94:a0:88:88:dd:ef:57:53:
         94:71:6d:84:4e:fc:b3:49:5e:0e:c6:a5:a3:9b:be:16:9c:1f:
         75:06:bc:63:1f:49:bb:8d:ad:4f:62:7f:b3:9b:bf:31:eb:56:
         4d:bb:e8:a8:1b:5f:74:2c:3a:28:ea:e8:56:f2:c9:af:d1:8b:
         97:0e:12:2b:cf:ef:21:a6:91:ec:45:57:fc:c1:6a:50:49:3f:
         ad:0f:65:2b:eb:ad:18:c4:90:95:e5:37:53:04:41:ab:fc:6d:
         20:47:88:29:a2:c4:9c:61:4f:a0:6a:dc:51:75:c5:84:85:c7:
         73:6f:5d:75:40:05:78:e2:e8:a9:2b:11:98:df:06:a4:1e:22:
         85:cd:93:a6:f2:ef:4a:c0:57:e4:0d:36:f9:4d:c6:0f:b9:29:
         97:e9:b0:5c:4b:c7:b9:08:68:17:d1:5b:d5:aa:ac:67:bd:b7:
         51:8a:92:5a:c0:21:79:5d:92:11:2d:ed:9f:3d:a1:82:a0:76:
         f3:7b:0c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:17:48 2025 by rpki-client