Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/3130332e3135382e32312e302f32342d3234203d3e203438343635.roa
File:                     3130332e3135382e32312e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier:          Y2HrxpbOCYLMY6XBSkrTiPuTnGk3sto9vtxHqBDKXLo=
Subject key identifier:   9C:34:B5:E1:02:C5:79:9E:C5:33:EF:0C:95:45:14:B4:F9:C9:CC:19
Certificate issuer:       /CN=BE82B469998A9E829F882655C99A5A05535A1AD4
Certificate serial:       757226D787A37E6E8EF373595E09F79B0862BA25
Authority key identifier: BE:82:B4:69:99:8A:9E:82:9F:88:26:55:C9:9A:5A:05:53:5A:1A:D4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/3130332e3135382e32312e302f32342d3234203d3e203438343635.roa
Signing time:             Mon 16 Jun 2025 03:02:51 +0000
ROA not before:           Mon 16 Jun 2025 02:57:51 +0000
ROA not after:            Mon 15 Jun 2026 03:02:51 +0000
asID:                     48465
IP address blocks:        103.158.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.crl
                          rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 11:04:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:72:26:d7:87:a3:7e:6e:8e:f3:73:59:5e:09:f7:9b:08:62:ba:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE82B469998A9E829F882655C99A5A05535A1AD4
        Validity
            Not Before: Jun 16 02:57:51 2025 GMT
            Not After : Jun 15 03:02:51 2026 GMT
        Subject: CN=9C34B5E102C5799EC533EF0C954514B4F9C9CC19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:70:9b:11:0a:27:2c:45:a8:e2:0f:ad:a4:e3:
                    47:0e:89:e2:9b:e5:73:fd:c9:bf:65:ce:55:3f:0b:
                    ab:df:4a:8b:df:9a:7b:a6:69:06:2d:9d:7c:c0:3d:
                    b7:26:c4:78:18:22:e6:60:ef:12:a1:e6:c9:eb:32:
                    69:e0:da:76:80:a7:9f:cc:b3:0b:22:81:7b:37:6d:
                    ed:5d:1a:2a:74:24:5c:92:4f:69:5d:97:57:eb:ad:
                    75:e4:a8:b4:c2:25:e3:57:1a:77:f0:2f:0e:fe:c2:
                    d4:c4:5d:33:66:88:a1:b6:de:33:d9:2c:d2:6b:a3:
                    22:fc:c6:d9:62:ac:eb:a4:68:55:a8:96:1f:08:b4:
                    cf:55:f0:a5:2e:66:52:93:ad:49:8a:b5:0b:38:dc:
                    a6:28:00:e7:d0:4d:44:a8:47:1e:48:80:47:75:bd:
                    c1:6a:7e:c4:85:ad:e5:33:fd:bf:19:6d:60:c0:96:
                    73:b5:7b:fc:4d:71:1a:2a:ff:a4:66:ef:38:d5:9b:
                    40:79:20:24:96:06:95:e5:dd:53:d1:65:ec:4e:ae:
                    fd:a1:cb:6f:b7:16:da:ef:1c:09:50:6c:c3:9d:74:
                    ec:bc:8a:52:bb:c2:59:cd:d3:80:42:5e:68:03:d5:
                    b9:2f:2c:8d:03:3c:d5:50:6e:fc:2b:32:ce:69:97:
                    2f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:34:B5:E1:02:C5:79:9E:C5:33:EF:0C:95:45:14:B4:F9:C9:CC:19
            X509v3 Authority Key Identifier:
                keyid:BE:82:B4:69:99:8A:9E:82:9F:88:26:55:C9:9A:5A:05:53:5A:1A:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/3130332e3135382e32312e302f32342d3234203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:b9:f7:b7:aa:c9:ac:76:9d:dc:db:bb:bd:ff:e0:04:8c:c5:
         61:fe:8d:b9:ad:f6:06:5c:4f:74:e6:46:3f:0b:fa:54:ea:2d:
         21:ab:dd:aa:01:0d:84:30:b7:09:57:05:eb:c8:a4:75:10:56:
         da:75:22:56:b1:f6:1b:d3:85:4e:a0:e3:1a:47:d1:46:11:c3:
         45:4d:ce:b2:29:a0:1d:2d:f6:68:8c:e6:8a:89:62:63:4e:84:
         b5:b8:75:8a:2b:eb:96:85:ca:01:16:91:79:e1:be:c7:c8:bd:
         c3:a6:8d:0e:67:04:e9:15:a6:bc:ab:a0:dc:53:00:cd:65:56:
         f9:e0:49:37:2a:80:8e:77:dc:a1:c2:d0:65:a4:ae:8d:c6:67:
         28:64:94:39:57:c1:92:3f:d0:8a:0a:d0:26:b8:ae:6a:64:3a:
         55:b9:c3:2e:82:6a:f3:71:39:6e:15:e5:77:19:f5:00:da:50:
         6d:3e:cf:81:e0:44:77:43:7b:ec:f2:ec:fd:f0:86:57:b4:09:
         73:ba:0e:72:d7:7e:db:99:ed:70:bf:65:88:fa:ec:5a:6f:66:
         aa:aa:38:a1:1c:e8:39:4e:46:2f:78:2d:99:6a:ae:f6:6d:82:
         5d:03:13:34:a2:55:0a:19:a1:b9:38:25:36:ba:d0:c1:7a:0b:
         f5:75:9a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:29:27 2025 by rpki-client