Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/3130332e3231302e3131392e302f32342d3234203d3e203634303234.roa
File:                     3130332e3231302e3131392e302f32342d3234203d3e203634303234.roa (raw, json)
Hash identifier:          Ytr8LGrcIz/5Ip4kUA/P8vtfeNKUZXIGazNVZyLvVDY=
Subject key identifier:   F6:66:82:0F:F5:45:86:53:3F:96:82:F7:17:B8:E0:24:1C:21:70:B4
Certificate issuer:       /CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9
Certificate serial:       7761C91B93249E2B06DDFCD6666CEFD90FA48EF5
Authority key identifier: BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/3130332e3231302e3131392e302f32342d3234203d3e203634303234.roa
Signing time:             Tue 01 Jul 2025 09:00:02 +0000
ROA not before:           Tue 01 Jul 2025 08:55:02 +0000
ROA not after:            Tue 30 Jun 2026 09:00:02 +0000
asID:                     64024
IP address blocks:        103.210.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl
                          rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 02:47:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:61:c9:1b:93:24:9e:2b:06:dd:fc:d6:66:6c:ef:d9:0f:a4:8e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9
        Validity
            Not Before: Jul  1 08:55:02 2025 GMT
            Not After : Jun 30 09:00:02 2026 GMT
        Subject: CN=F666820FF54586533F9682F717B8E0241C2170B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d2:2f:ea:a6:e2:26:1c:72:ad:26:87:25:ea:
                    d4:1b:3c:42:33:2d:f0:1b:b8:a1:a4:f1:97:06:3a:
                    68:ee:f8:cb:24:c3:39:fd:8d:6d:17:22:60:31:c5:
                    e3:7a:95:e7:21:1b:08:73:d5:e6:d0:2a:a1:91:e5:
                    ce:ed:ed:1b:9a:10:77:47:c7:ba:1e:c5:88:f5:e8:
                    01:4a:48:71:78:a0:a7:07:0e:10:1b:83:fa:24:97:
                    f3:e6:27:3c:7b:54:6c:31:60:2a:19:d0:0d:dd:02:
                    44:6b:35:74:1b:b2:67:a6:10:e1:e1:86:76:3f:4e:
                    3c:32:2e:07:94:1e:67:1d:d5:00:aa:cc:b2:b2:c8:
                    3b:00:af:c9:55:b2:3d:f3:89:45:68:d5:8f:2a:57:
                    da:c6:30:a2:81:82:1b:13:05:19:f3:8e:74:ff:31:
                    c9:39:b7:bc:20:26:b8:6c:af:e8:6c:d8:31:3d:e1:
                    44:5f:a3:64:76:9c:16:fe:85:09:cd:51:1d:05:d9:
                    19:8c:16:0d:d4:f9:a5:ef:af:cf:f4:1d:b4:e1:2e:
                    b0:2d:20:ef:4d:1b:38:a7:03:5c:63:df:10:0f:23:
                    83:5c:d4:72:0e:d0:dd:1c:a0:7b:30:10:3b:39:c5:
                    0c:2c:47:60:89:d4:96:a3:ce:78:ad:54:56:1e:fe:
                    c1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:66:82:0F:F5:45:86:53:3F:96:82:F7:17:B8:E0:24:1C:21:70:B4
            X509v3 Authority Key Identifier:
                keyid:BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/3130332e3231302e3131392e302f32342d3234203d3e203634303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.210.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:07:b0:b7:72:70:8e:f6:32:03:e9:5b:e7:ea:fb:cf:9d:bf:
         1a:db:89:d7:b9:54:4c:47:73:a8:61:53:d0:d4:f3:e2:ff:0a:
         20:a7:f7:3d:42:cd:8a:59:46:74:f8:04:9e:da:2a:67:ab:aa:
         d8:f6:54:39:f9:3c:c5:a5:8f:ed:15:fe:dd:42:f2:ca:7c:a3:
         eb:0f:65:31:88:12:57:94:29:80:96:f3:ee:62:b4:a3:48:fc:
         83:fc:7f:48:40:c9:6f:7d:a3:3c:02:33:f5:0e:f3:b8:35:8b:
         1d:99:40:98:08:47:07:35:9f:3d:e3:85:ce:83:ab:09:91:d6:
         49:7e:e7:c2:60:ec:0d:ae:b2:ca:c7:fc:06:d0:96:e1:ee:31:
         f6:5b:46:1f:f4:41:54:cd:6a:19:e6:e1:3c:3f:27:16:6a:60:
         83:c0:42:b7:f0:f1:67:97:98:37:95:63:f2:bf:4e:96:4b:ee:
         f9:76:1b:7e:e1:a9:a8:ee:c1:03:af:fe:db:4f:dc:4b:91:ea:
         25:7f:62:9c:cd:58:df:1e:cd:41:b0:9a:aa:76:6b:04:f8:86:
         3e:50:bc:a6:5a:fc:ef:68:6f:fd:27:ec:d5:69:19:e1:8c:53:
         56:1e:39:4c:2c:0d:c3:cd:eb:67:a4:94:92:0c:13:a2:67:73:
         30:9d:c7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:41:23 2025 by rpki-client