Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/3130332e3230362e3138362e302f32342d3234203d3e20313336313036.roa
File:                     3130332e3230362e3138362e302f32342d3234203d3e20313336313036.roa (raw, json)
Hash identifier:          n+qiiPbTCALOXLor9QakhzTE2JIZ5+LsarWfK/x2L98=
Subject key identifier:   25:D7:19:05:9C:7C:66:BA:0C:04:EB:09:D6:C1:4A:CA:55:4E:33:47
Certificate issuer:       /CN=55FE929F3DF18E4B5BC4309769AA6C72AFF634CC
Certificate serial:       448D16CCC5F29AA99E5EB3C921D6E9B173E59ADF
Authority key identifier: 55:FE:92:9F:3D:F1:8E:4B:5B:C4:30:97:69:AA:6C:72:AF:F6:34:CC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/3130332e3230362e3138362e302f32342d3234203d3e20313336313036.roa
Signing time:             Wed 16 Apr 2025 09:02:25 +0000
ROA not before:           Wed 16 Apr 2025 08:57:25 +0000
ROA not after:            Wed 15 Apr 2026 09:02:25 +0000
asID:                     136106
IP address blocks:        103.206.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.crl
                          rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 06:24:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:8d:16:cc:c5:f2:9a:a9:9e:5e:b3:c9:21:d6:e9:b1:73:e5:9a:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55FE929F3DF18E4B5BC4309769AA6C72AFF634CC
        Validity
            Not Before: Apr 16 08:57:25 2025 GMT
            Not After : Apr 15 09:02:25 2026 GMT
        Subject: CN=25D719059C7C66BA0C04EB09D6C14ACA554E3347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:be:e4:9f:6a:d2:28:78:2c:2b:7f:9c:3e:65:
                    2d:b8:b9:5a:08:75:1a:fa:33:cb:f3:49:1f:ed:22:
                    9e:b8:78:39:20:be:bb:bb:d3:e3:04:e4:e0:b0:65:
                    83:5c:74:3f:ab:1d:61:2c:9c:96:41:10:f4:91:46:
                    f3:77:bf:14:e8:44:a3:54:59:01:4a:2f:c0:92:5a:
                    e4:8c:1f:29:01:3e:c0:7f:63:4a:92:4e:af:03:90:
                    23:73:f3:e9:68:03:2d:f7:62:34:00:7e:20:56:1e:
                    9b:04:cb:be:eb:87:36:54:6a:a0:89:ff:19:b1:2a:
                    88:8f:7c:f2:76:bb:5b:2f:ac:0b:18:c7:70:e0:be:
                    fa:31:48:58:58:a4:71:b5:bf:22:99:09:5d:9f:6a:
                    75:f2:8c:46:b1:52:93:83:72:75:42:17:df:67:48:
                    41:81:9c:4b:28:c8:06:1b:20:aa:88:87:21:92:46:
                    0f:e1:fc:02:47:08:9a:3c:0e:26:b9:a2:77:56:1f:
                    d4:75:66:c5:6c:82:ca:44:5e:94:9b:bd:eb:61:62:
                    9a:02:ac:17:89:a4:22:2d:dd:05:6b:23:ce:99:2d:
                    3d:32:be:49:3c:fc:3a:ba:14:b2:d1:aa:f7:3f:cb:
                    83:26:c8:9e:57:a5:76:6b:fc:48:44:a9:95:ce:dd:
                    03:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D7:19:05:9C:7C:66:BA:0C:04:EB:09:D6:C1:4A:CA:55:4E:33:47
            X509v3 Authority Key Identifier:
                keyid:55:FE:92:9F:3D:F1:8E:4B:5B:C4:30:97:69:AA:6C:72:AF:F6:34:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/3130332e3230362e3138362e302f32342d3234203d3e20313336313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.206.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:db:16:d0:e6:28:0b:3e:8b:08:7a:74:f6:e2:43:8c:09:06:
         32:92:44:14:44:74:3d:b5:ca:42:b7:d0:82:74:8a:2c:09:83:
         ec:c9:51:77:4f:37:da:24:c5:e8:b4:a0:9d:bc:2b:7e:04:65:
         39:4d:ee:1f:56:99:77:0c:9b:eb:34:bb:be:2a:14:90:be:a4:
         0e:0f:ab:d8:61:47:4a:1d:ac:cf:65:0a:e1:99:69:92:30:ed:
         4c:44:f6:f8:72:ee:75:86:c0:02:fa:bb:4d:d1:39:e5:94:68:
         be:12:d2:62:0f:bc:ab:f2:9a:59:94:cd:43:92:52:17:65:70:
         27:2a:dc:97:4b:68:9e:0c:d8:33:d7:5d:80:80:77:8b:6a:d9:
         cd:64:5f:c4:bd:7f:52:9b:de:82:07:ab:8d:7c:20:59:7f:c1:
         a3:96:10:d2:03:4e:08:b7:1e:c9:ad:47:02:7a:e1:76:e8:cb:
         fb:2b:ff:5e:10:9c:b7:e4:be:07:f0:a6:73:75:e1:26:18:ca:
         df:18:2b:9f:5a:77:9e:22:09:9f:f5:70:22:0c:17:8e:0a:3e:
         4b:fb:6a:59:22:6a:df:f9:df:84:4b:aa:5e:ac:80:91:b1:d4:
         1f:37:f4:35:91:73:59:fc:f6:6c:00:4e:9a:27:87:1e:ac:29:
         b1:1f:ec:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:49:56 2025 by rpki-client