Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3130332e3133352e312e302f32342d3234203d3e203338333230.roa
File:                     3130332e3133352e312e302f32342d3234203d3e203338333230.roa (raw, json)
Hash identifier:          jxUYJQpEaP8bPhyLYtacTJc3csgAE9Hd2kaadYQz8QA=
Subject key identifier:   71:98:A1:A4:38:C1:95:2F:74:BB:C6:03:7F:BC:89:89:9A:1E:F3:6E
Certificate issuer:       /CN=3C3C868A5674B425FAE567426BCB238E23AE20AC
Certificate serial:       52992E845C31DC1B3B7810DA7B8C3B4D4D91B845
Authority key identifier: 3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3130332e3133352e312e302f32342d3234203d3e203338333230.roa
Signing time:             Mon 07 Jul 2025 04:02:24 +0000
ROA not before:           Mon 07 Jul 2025 03:57:24 +0000
ROA not after:            Mon 06 Jul 2026 04:02:24 +0000
asID:                     38320
IP address blocks:        103.135.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl
                          rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Jul 2025 02:43:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:99:2e:84:5c:31:dc:1b:3b:78:10:da:7b:8c:3b:4d:4d:91:b8:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C3C868A5674B425FAE567426BCB238E23AE20AC
        Validity
            Not Before: Jul  7 03:57:24 2025 GMT
            Not After : Jul  6 04:02:24 2026 GMT
        Subject: CN=7198A1A438C1952F74BBC6037FBC89899A1EF36E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e4:9f:b2:98:2a:b8:f0:f7:47:2a:c6:57:fb:
                    1f:b6:c5:60:ea:d2:f8:cd:a0:cd:7a:c5:65:03:89:
                    e6:f0:05:e5:3d:fd:74:b6:de:4e:97:fd:0d:d1:04:
                    84:41:9f:76:fd:f6:69:9d:43:6b:6e:32:6d:be:2c:
                    be:c6:ba:e6:19:58:a3:c2:ec:2a:f4:ce:d3:75:5e:
                    e7:f1:e9:7e:3f:02:97:4f:8f:a1:08:ec:db:44:78:
                    d1:c1:e7:e5:64:92:a1:83:9c:b7:eb:e0:40:ab:b9:
                    e1:d7:63:9e:64:54:ea:e8:94:65:03:37:90:55:40:
                    8e:dc:c4:d2:a2:df:5f:a5:3d:5b:99:07:83:b6:12:
                    c9:67:e1:63:42:d2:32:e9:b6:06:bf:c0:6a:ab:7b:
                    b9:84:ca:b3:f3:9f:cd:a3:88:7b:61:d6:97:48:ff:
                    01:a2:02:a4:41:cc:ff:2e:91:5e:e8:7b:55:f9:7b:
                    78:ec:46:73:8c:63:b6:0a:5e:fd:c7:55:b3:42:32:
                    98:44:ba:61:d1:db:64:23:12:4d:60:6b:61:dd:6d:
                    da:9a:27:37:c3:90:93:bb:32:e2:99:4b:01:4c:70:
                    21:ed:cb:92:aa:b6:e7:21:e2:e8:54:8b:59:80:05:
                    37:83:ce:38:3d:02:fc:b8:cf:d3:03:3a:58:f2:c3:
                    fc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:98:A1:A4:38:C1:95:2F:74:BB:C6:03:7F:BC:89:89:9A:1E:F3:6E
            X509v3 Authority Key Identifier:
                keyid:3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3130332e3133352e312e302f32342d3234203d3e203338333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:76:08:af:75:61:a7:ab:72:78:59:65:a6:5f:0a:8c:93:ab:
         32:31:01:0a:6b:57:1b:de:8d:ef:ab:35:fe:bf:74:fe:4d:0f:
         65:d5:65:58:dd:e7:2d:c2:fa:ad:8f:a2:ef:e3:76:fd:47:d5:
         c7:76:41:f6:c8:98:54:73:cb:a1:13:51:13:99:f6:a1:04:37:
         b5:ee:97:63:55:52:6b:ba:63:8f:a2:6e:9d:54:83:68:5f:1e:
         1b:3b:28:74:83:6c:4b:16:a7:06:67:35:e4:f2:af:90:36:c4:
         d0:8f:d3:3e:3e:5e:f5:b0:0c:4b:03:09:33:f2:b3:8d:d3:a7:
         6f:38:dd:97:cd:3b:8c:50:0c:6f:d1:bc:01:4d:52:68:e5:36:
         77:1d:22:02:26:37:a1:45:8f:6b:e0:f2:6c:d3:88:72:ad:2d:
         f4:41:67:c9:5b:f4:1e:26:71:ba:f2:f4:aa:55:18:b9:1c:18:
         90:7a:20:6e:25:8d:b9:ef:65:98:1c:18:31:40:b6:a6:13:2d:
         d5:9f:bb:73:37:50:92:64:da:79:03:67:5e:8e:b7:cb:c8:d7:
         9b:c6:87:3a:49:31:63:08:50:c4:7c:b6:21:01:87:f4:6d:8c:
         58:8f:0d:17:55:12:05:40:c3:1b:5a:77:6c:ec:bc:6e:db:ee:
         69:7e:96:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:02:11 2025 by rpki-client