Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/3130332e3136322e3232322e302f32342d3234203d3e203438343635.roa
File:                     3130332e3136322e3232322e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier:          bl/n5bigRNUdzOdSRBMJ4xavg1ElwqsMKJXdZov+BBc=
Subject key identifier:   6D:3B:A1:35:1B:A8:F5:78:76:67:3A:F3:9E:8F:7D:56:6C:C2:69:08
Certificate issuer:       /CN=E44D4DE701D932713536A084F76894A6B0473F5E
Certificate serial:       77A12591B7529F63ED8E2EEB42DD8E46A5552881
Authority key identifier: E4:4D:4D:E7:01:D9:32:71:35:36:A0:84:F7:68:94:A6:B0:47:3F:5E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E44D4DE701D932713536A084F76894A6B0473F5E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/3130332e3136322e3232322e302f32342d3234203d3e203438343635.roa
Signing time:             Mon 16 Jun 2025 04:01:12 +0000
ROA not before:           Mon 16 Jun 2025 03:56:12 +0000
ROA not after:            Mon 15 Jun 2026 04:01:12 +0000
asID:                     48465
IP address blocks:        103.162.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.crl
                          rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E44D4DE701D932713536A084F76894A6B0473F5E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 06:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:a1:25:91:b7:52:9f:63:ed:8e:2e:eb:42:dd:8e:46:a5:55:28:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E44D4DE701D932713536A084F76894A6B0473F5E
        Validity
            Not Before: Jun 16 03:56:12 2025 GMT
            Not After : Jun 15 04:01:12 2026 GMT
        Subject: CN=6D3BA1351BA8F57876673AF39E8F7D566CC26908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:00:cb:59:e8:d5:85:ac:c7:28:f0:e3:f9:a5:
                    f3:54:4e:5a:36:32:7e:92:71:dc:7a:a4:30:35:08:
                    42:ad:6b:2f:11:9a:32:9c:d9:b3:01:06:7e:4c:b2:
                    4e:ad:e7:3b:99:d0:80:27:36:17:87:49:a9:73:a7:
                    0d:c2:3e:fa:01:56:6d:30:23:02:50:e5:3d:3e:e6:
                    ef:5f:9e:15:6f:6a:28:23:e2:11:b1:43:30:de:81:
                    53:82:71:5d:5e:73:eb:e2:5b:9c:ea:2a:d7:74:7e:
                    b2:c2:9c:d2:37:f5:65:84:dc:88:17:c8:af:b1:e3:
                    cd:d6:90:2f:ae:6f:30:69:05:6b:3c:3c:28:c6:9c:
                    38:28:c7:10:ff:a7:a2:29:a0:cd:5f:59:8a:84:4c:
                    80:f2:b1:2f:8d:df:a9:ff:bc:8b:5d:37:64:fb:36:
                    ed:35:5b:bc:33:e4:df:0d:3a:b6:51:69:b1:0e:76:
                    b2:91:3a:59:66:a7:65:6b:f8:d1:6b:6b:dd:6c:c9:
                    37:b5:a0:8a:65:c7:d5:7e:bd:ed:c9:98:eb:84:37:
                    6a:f3:a6:76:a7:0c:13:50:81:c4:36:95:3d:9f:ae:
                    9c:0d:e2:2f:6d:51:39:9b:7c:e4:cd:84:31:8d:e4:
                    80:59:09:cc:c9:09:18:1c:81:53:ea:bf:30:9e:a6:
                    2b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:3B:A1:35:1B:A8:F5:78:76:67:3A:F3:9E:8F:7D:56:6C:C2:69:08
            X509v3 Authority Key Identifier:
                keyid:E4:4D:4D:E7:01:D9:32:71:35:36:A0:84:F7:68:94:A6:B0:47:3F:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E44D4DE701D932713536A084F76894A6B0473F5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/3130332e3136322e3232322e302f32342d3234203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:3b:52:e2:bb:d0:1a:fa:21:e0:fe:0a:21:ad:e1:a5:4c:67:
         17:95:74:8e:8b:49:b6:3d:a6:d8:cb:bb:f1:f0:53:fd:3f:8a:
         03:db:28:df:aa:29:bc:ab:08:01:c4:32:8f:13:ec:93:6e:3c:
         68:ca:7b:b5:50:3a:06:fc:6e:8b:28:da:c3:ac:e6:af:13:9d:
         d2:c0:ed:f3:7c:8a:a6:d8:1f:d4:c2:98:4a:c8:58:9f:d1:a9:
         09:b3:b1:70:fe:76:65:48:30:c3:88:07:a0:2d:11:26:52:f4:
         5f:d9:98:68:de:fb:2d:b8:b5:64:f6:d6:23:0d:2d:14:52:40:
         81:f5:e1:91:04:33:97:0e:26:3f:08:17:81:86:7e:ec:d3:d7:
         24:4d:89:8b:93:66:71:97:53:24:59:cf:ed:41:20:14:19:68:
         8f:5c:46:15:7f:3e:8f:27:cf:27:1e:ef:d2:54:d3:8a:49:46:
         3f:42:77:30:e5:ff:63:ea:c1:9a:dc:71:9c:09:d4:15:e6:d0:
         d3:98:38:d9:ff:55:91:4d:60:74:7c:86:54:63:65:5b:8e:04:
         2c:57:d6:a0:de:e6:07:a2:35:e8:82:ca:19:a9:7a:98:b9:05:
         9c:38:9f:d5:d2:45:30:03:0a:a6:72:e1:4f:6c:66:7f:c4:00:
         9d:21:56:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:19:27 2025 by rpki-client