Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/3130332e3136312e3139342e302f32342d3234203d3e20313431363232.roa
File:                     3130332e3136312e3139342e302f32342d3234203d3e20313431363232.roa (raw, json)
Hash identifier:          byxFPyjiQJT5Oo5JN6VrZseWPHWMRktKnANVfaiZKVo=
Subject key identifier:   0E:2B:6B:65:B2:15:DB:EB:64:12:05:13:E5:18:20:AE:0C:D8:B1:B9
Certificate issuer:       /CN=052EE59C1D4149A77DF1555311C056DCDBC5FF4C
Certificate serial:       31F6310CB89A88DA0FFFD36719B97D159AB9EEF0
Authority key identifier: 05:2E:E5:9C:1D:41:49:A7:7D:F1:55:53:11:C0:56:DC:DB:C5:FF:4C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/3130332e3136312e3139342e302f32342d3234203d3e20313431363232.roa
Signing time:             Fri 13 Jun 2025 14:00:00 +0000
ROA not before:           Fri 13 Jun 2025 13:55:00 +0000
ROA not after:            Fri 12 Jun 2026 14:00:00 +0000
asID:                     141622
IP address blocks:        103.161.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.crl
                          rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 01:53:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:f6:31:0c:b8:9a:88:da:0f:ff:d3:67:19:b9:7d:15:9a:b9:ee:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=052EE59C1D4149A77DF1555311C056DCDBC5FF4C
        Validity
            Not Before: Jun 13 13:55:00 2025 GMT
            Not After : Jun 12 14:00:00 2026 GMT
        Subject: CN=0E2B6B65B215DBEB64120513E51820AE0CD8B1B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6a:cd:d8:29:cc:8a:d4:ae:09:bf:3a:df:e0:
                    a8:7d:f7:b9:a0:0d:cb:d0:e7:05:30:f1:5b:38:ae:
                    93:bb:3e:d5:b6:57:8d:47:6c:3e:a1:31:6c:86:04:
                    48:13:68:42:f9:86:ff:31:07:4f:74:82:e2:e6:91:
                    ff:1b:42:7d:7a:6e:a3:28:b5:9a:d0:f2:4e:a3:90:
                    b6:7a:a0:54:81:7d:ea:3d:a6:14:49:73:cb:63:fb:
                    17:2f:86:a3:35:bd:82:e6:e6:dc:86:a2:77:58:8f:
                    86:ec:55:16:f4:55:91:74:32:d3:c4:c6:a8:8c:bb:
                    69:76:0e:c4:90:9d:e7:f7:a1:78:87:87:80:e3:f1:
                    9d:d9:73:a1:97:3b:db:08:b4:89:5c:96:0b:36:fc:
                    b1:0f:27:8e:62:ad:77:15:f4:5b:de:b2:fc:b2:22:
                    97:1a:25:de:6b:47:cb:93:e1:07:0e:ab:67:7b:22:
                    09:e6:4a:8a:cd:b7:7b:93:66:6a:91:38:a0:0e:72:
                    8a:e4:65:03:5a:70:90:70:c0:8f:0c:66:01:70:81:
                    59:44:fa:d1:0d:1f:b9:14:ad:53:cd:59:02:b4:2f:
                    6c:9d:b5:8d:c0:ad:64:ba:01:3b:43:e3:f8:72:1f:
                    5d:85:47:6f:53:89:ff:9b:f6:7a:63:3a:a9:cb:90:
                    80:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:2B:6B:65:B2:15:DB:EB:64:12:05:13:E5:18:20:AE:0C:D8:B1:B9
            X509v3 Authority Key Identifier:
                keyid:05:2E:E5:9C:1D:41:49:A7:7D:F1:55:53:11:C0:56:DC:DB:C5:FF:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/3130332e3136312e3139342e302f32342d3234203d3e20313431363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:99:61:d1:c2:05:30:1e:aa:36:fb:d2:f5:14:3f:9c:bb:12:
         39:ea:5a:ce:36:a4:a0:50:5d:cf:f9:f7:dc:96:c3:a0:c9:90:
         9a:02:f0:a8:17:de:43:54:3a:b1:e6:ef:8c:4a:23:77:b5:35:
         e5:15:85:89:26:73:26:db:3f:00:fc:6e:b0:20:4d:b7:22:8a:
         10:bd:ed:3c:40:ac:6e:6f:a5:7a:2f:0d:8d:f6:64:25:72:9e:
         9c:88:03:1a:d8:c8:94:b9:86:60:64:b3:b0:06:fc:e6:b1:4d:
         e4:ca:66:22:bc:33:97:ff:e1:2e:e4:eb:97:73:5c:43:e6:5e:
         63:e6:ec:d2:c3:e1:db:e8:c8:02:0b:1f:89:8b:36:7f:d0:8c:
         fe:11:5d:bf:df:74:56:db:36:cd:e8:fe:d9:89:f9:3a:63:66:
         c9:25:cb:06:55:b0:6c:03:0a:6d:09:f8:e1:93:5f:c9:91:ab:
         68:12:bc:46:0a:da:be:96:49:13:0b:6b:dc:39:fb:ae:6f:38:
         29:b1:ac:d8:15:d7:ae:b3:a8:83:c3:aa:ae:ea:18:f9:8d:4b:
         7d:94:57:14:73:2a:4d:52:0f:36:f0:9f:07:1e:86:40:53:1c:
         d2:5a:ef:4f:70:4f:04:aa:4d:58:40:74:0b:4d:21:54:7d:65:
         83:f6:2d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 02:14:04 2025 by rpki-client