Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/3130332e38352e35332e302f32342d3234203d3e20313530353535.roa
File:                     3130332e38352e35332e302f32342d3234203d3e20313530353535.roa (raw, json)
Hash identifier:          mZAxTr3skSw5Z8e7tPmU/OrFl4lSut1UK4pgkxrw8Us=
Subject key identifier:   87:85:15:05:A4:94:2C:CB:D7:59:5B:58:90:E0:90:98:19:F3:FB:BC
Certificate issuer:       /CN=EE12F179A5D1F52EC033677282AE7E2E72E0F2C3
Certificate serial:       679D2DCB9628736EA3F0EA182AE28E5CFB2F6930
Authority key identifier: EE:12:F1:79:A5:D1:F5:2E:C0:33:67:72:82:AE:7E:2E:72:E0:F2:C3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/3130332e38352e35332e302f32342d3234203d3e20313530353535.roa
Signing time:             Thu 12 Jun 2025 04:00:00 +0000
ROA not before:           Thu 12 Jun 2025 03:55:00 +0000
ROA not after:            Thu 11 Jun 2026 04:00:00 +0000
asID:                     150555
IP address blocks:        103.85.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.crl
                          rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 22:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:9d:2d:cb:96:28:73:6e:a3:f0:ea:18:2a:e2:8e:5c:fb:2f:69:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE12F179A5D1F52EC033677282AE7E2E72E0F2C3
        Validity
            Not Before: Jun 12 03:55:00 2025 GMT
            Not After : Jun 11 04:00:00 2026 GMT
        Subject: CN=87851505A4942CCBD7595B5890E0909819F3FBBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:36:80:98:35:fc:89:29:36:67:3d:77:2f:27:
                    0f:ed:fe:aa:63:69:91:ac:15:f4:c2:42:dc:9d:99:
                    87:e1:0f:00:39:b3:6c:f3:dd:d5:74:1b:c5:ce:79:
                    a5:3e:93:68:95:1a:a8:d9:bc:27:33:aa:7e:6f:f9:
                    4c:d6:c8:b0:32:02:7a:20:0e:68:90:97:d7:5d:12:
                    cc:a6:e1:1e:cf:ba:f4:b9:92:3e:cb:a7:5c:a7:74:
                    a7:89:6a:24:10:2d:d8:a0:a2:c1:7a:c0:59:ca:11:
                    09:55:2e:f8:e1:25:35:e2:7d:45:ee:f4:1d:51:1d:
                    98:2c:d2:46:26:ac:c7:7d:0b:18:3c:3f:2e:4d:72:
                    32:55:77:9b:2f:17:8d:09:64:e4:32:38:86:e7:d2:
                    a3:49:a2:d3:ab:16:d6:85:ac:8f:2c:f1:81:39:67:
                    16:39:83:a5:70:48:4f:85:21:e6:0d:e7:c7:33:cd:
                    ab:15:3f:8c:ac:68:0a:a6:74:02:7c:67:bf:1f:1b:
                    ef:47:b9:51:9e:d3:c5:7b:34:5e:7b:a1:26:00:dc:
                    60:59:a9:80:1b:e4:dc:65:b1:aa:54:1a:43:55:86:
                    69:17:3d:63:f5:08:2d:63:9b:2b:77:21:d1:c0:c2:
                    d2:08:8d:fd:52:31:77:6f:fb:06:c5:a7:36:f9:8e:
                    a2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:85:15:05:A4:94:2C:CB:D7:59:5B:58:90:E0:90:98:19:F3:FB:BC
            X509v3 Authority Key Identifier:
                keyid:EE:12:F1:79:A5:D1:F5:2E:C0:33:67:72:82:AE:7E:2E:72:E0:F2:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/3130332e38352e35332e302f32342d3234203d3e20313530353535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:29:76:da:49:24:fd:ab:ed:03:e1:ce:9e:37:24:33:5e:0b:
         52:1a:6a:9b:bc:05:3d:ca:5b:27:2c:0f:ce:01:a8:a1:61:25:
         41:93:4b:17:34:83:53:a4:dd:14:6c:f7:a3:2d:c5:ee:c6:39:
         2a:d0:54:f3:67:31:76:50:a6:9b:35:53:d8:b7:7e:5e:be:24:
         bc:95:b8:52:1f:fe:48:00:cb:a7:be:f4:bd:62:ae:51:1a:81:
         e9:1a:a3:29:dd:61:86:6b:96:1f:64:c2:d0:40:04:36:c5:02:
         88:58:49:f7:25:a9:0b:12:fe:b4:2e:31:6d:cf:29:c3:cc:4b:
         50:10:1a:e1:b6:13:2d:ed:da:67:d4:88:48:fe:3d:47:01:fa:
         76:3b:e9:da:1c:03:cb:6f:74:86:61:df:f3:6e:0e:d6:1c:c5:
         42:5d:f9:69:f0:07:81:d8:04:02:d9:fb:33:21:cc:68:b3:e7:
         10:86:28:c1:d0:15:fb:00:f3:61:80:eb:8d:f7:53:db:22:39:
         0a:22:50:19:f0:4b:9a:64:1e:20:17:43:99:3f:b0:e6:29:d5:
         f0:e4:cc:9e:d0:d4:49:e2:d0:ed:52:bb:fc:21:29:d3:5c:14:
         38:dd:1a:9b:2a:44:fa:0f:01:fc:0c:a1:5a:92:fb:18:79:3a:
         e9:c2:93:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 22:31:45 2025 by rpki-client