Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/3130332e3139312e35322e302f32332d3234203d3e2034383030.roa
File:                     3130332e3139312e35322e302f32332d3234203d3e2034383030.roa (raw, json)
Hash identifier:          e+A7LYn+NCGFiG7Es9xiBuZGY1wSb3yZo5rf4YGYc54=
Subject key identifier:   D1:62:AD:E6:3E:E1:B4:8D:5C:03:43:EB:1E:53:22:B7:4C:F7:63:90
Certificate issuer:       /CN=8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1
Certificate serial:       3932A518C2A7760B412AC1D350218F6880882B5D
Authority key identifier: 8C:C3:A6:7D:BA:16:2B:44:30:DF:0F:08:F8:10:A7:B9:53:CB:A4:A1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/3130332e3139312e35322e302f32332d3234203d3e2034383030.roa
Signing time:             Tue 29 Apr 2025 08:00:01 +0000
ROA not before:           Tue 29 Apr 2025 07:55:01 +0000
ROA not after:            Tue 28 Apr 2026 08:00:01 +0000
asID:                     4800
IP address blocks:        103.191.52.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl
                          rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 12:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:32:a5:18:c2:a7:76:0b:41:2a:c1:d3:50:21:8f:68:80:88:2b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1
        Validity
            Not Before: Apr 29 07:55:01 2025 GMT
            Not After : Apr 28 08:00:01 2026 GMT
        Subject: CN=D162ADE63EE1B48D5C0343EB1E5322B74CF76390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:76:85:26:e2:4e:b7:9e:53:69:48:3f:a6:49:
                    2f:cf:3c:ae:fb:25:bd:12:95:91:33:92:6f:3b:f6:
                    a0:05:b6:30:69:2a:bf:55:a7:31:e5:16:ee:cd:f0:
                    ba:df:73:6d:88:41:19:df:0a:eb:a3:bd:c2:d2:2c:
                    3b:b1:5e:18:7b:c6:47:a6:a5:6b:21:96:76:16:96:
                    5b:8f:3f:ed:60:29:30:85:6b:3c:f3:91:52:c9:08:
                    49:35:bd:47:f1:a1:43:bb:d3:53:f5:3e:67:54:15:
                    43:51:e2:70:b1:b4:d8:5f:fe:5a:14:38:70:ee:77:
                    92:2a:db:00:55:4e:62:63:d4:2d:47:db:12:27:fd:
                    04:21:4e:35:e6:cd:32:4c:08:f0:c6:9f:18:53:f1:
                    8e:35:49:b9:fd:4d:3f:23:c0:65:a9:e7:fa:dc:1f:
                    88:9a:76:fa:27:60:ba:ea:c4:9e:ec:fd:4f:5e:19:
                    4f:39:4b:60:d2:3a:20:b8:6f:7a:3f:8b:0e:a3:91:
                    29:1a:2c:15:8d:7c:13:5e:3c:ec:4b:44:63:bf:06:
                    b7:79:d8:ac:36:98:a9:68:ca:48:69:78:19:41:94:
                    ad:ae:64:92:91:a7:d1:04:b8:df:b5:46:38:ac:92:
                    5c:23:28:8a:1b:b0:86:bc:46:39:6c:11:94:bd:98:
                    e6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:62:AD:E6:3E:E1:B4:8D:5C:03:43:EB:1E:53:22:B7:4C:F7:63:90
            X509v3 Authority Key Identifier:
                keyid:8C:C3:A6:7D:BA:16:2B:44:30:DF:0F:08:F8:10:A7:B9:53:CB:A4:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/3130332e3139312e35322e302f32332d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:55:06:81:5c:44:60:49:a1:da:ab:15:50:14:29:86:c2:0e:
         71:47:ed:c7:10:0d:0b:f1:7b:5e:15:d4:81:a7:03:ac:15:3c:
         00:53:a6:e3:b2:5e:7d:29:dd:bd:68:fc:a3:13:95:7b:ba:db:
         07:2a:d9:9a:b9:f8:89:c2:f6:df:30:b3:73:e5:54:05:20:1e:
         81:5e:c4:8d:72:ed:83:0b:33:46:e7:25:2c:25:7b:e5:09:cf:
         fc:a6:5b:03:80:c0:35:ab:2e:d8:94:2e:ff:8b:08:31:0c:05:
         a4:f1:b7:00:a9:87:2e:28:bd:ab:05:90:0c:27:94:e9:ad:8c:
         43:2e:29:22:bb:0d:ee:1d:c9:8a:06:b1:b6:d1:34:17:8d:f6:
         85:4d:af:51:34:bb:b7:c9:e5:72:0a:23:91:ae:b9:50:6e:83:
         26:f6:2b:18:7e:33:9e:f9:26:99:2a:78:92:35:d8:01:4d:79:
         2e:4f:19:9e:d9:f4:c4:cc:bb:a2:cd:04:53:a0:3f:72:ba:6a:
         18:ff:6e:c2:2a:8e:af:9c:e0:eb:18:12:ef:82:d7:02:55:e1:
         6d:22:c0:97:a1:30:6d:45:06:d1:e5:ea:7b:47:3c:f4:8b:60:
         20:de:b4:b8:d4:1b:38:28:be:76:02:b3:74:e6:e5:cf:c2:e3:
         00:4a:24:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:29:18 2025 by rpki-client