Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3130332e3133352e322e302f32342d3234203d3e203338333230.roa
File:                     3130332e3133352e322e302f32342d3234203d3e203338333230.roa (raw, json)
Hash identifier:          KZ/BrcpNlnq1GeOoeq+ujqu98XEmwwqQMF5ra78kfE0=
Subject key identifier:   35:6B:33:C8:D0:AC:5A:04:49:BA:BB:A3:ED:8B:C4:62:E3:26:E6:4C
Certificate issuer:       /CN=3C3C868A5674B425FAE567426BCB238E23AE20AC
Certificate serial:       3CF9E29B2D608675FB7578A81EC86670C94F48CF
Authority key identifier: 3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3130332e3133352e322e302f32342d3234203d3e203338333230.roa
Signing time:             Mon 07 Jul 2025 04:02:24 +0000
ROA not before:           Mon 07 Jul 2025 03:57:24 +0000
ROA not after:            Mon 06 Jul 2026 04:02:24 +0000
asID:                     38320
IP address blocks:        103.135.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl
                          rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Jul 2025 02:43:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:f9:e2:9b:2d:60:86:75:fb:75:78:a8:1e:c8:66:70:c9:4f:48:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C3C868A5674B425FAE567426BCB238E23AE20AC
        Validity
            Not Before: Jul  7 03:57:24 2025 GMT
            Not After : Jul  6 04:02:24 2026 GMT
        Subject: CN=356B33C8D0AC5A0449BABBA3ED8BC462E326E64C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f6:7a:a3:db:a7:ae:80:69:52:e7:88:d1:18:
                    44:6c:8e:5f:6c:5c:c2:83:70:54:26:bc:f1:54:b4:
                    48:36:46:0a:c9:54:4d:34:a1:01:45:83:93:7b:f1:
                    f3:ec:9b:7a:98:e7:74:a4:ef:ce:a7:8c:58:2c:21:
                    d2:e9:7a:5f:ed:ea:ab:73:ea:7f:0a:a9:96:43:c8:
                    3f:a5:0c:86:e9:09:a9:9e:8d:fb:94:17:b3:ed:ad:
                    bd:69:93:31:d7:48:84:42:87:58:87:80:21:f9:3d:
                    cd:fb:55:2b:58:be:9e:26:b3:7c:d6:0e:cb:b4:1d:
                    af:f6:d7:90:1d:81:46:ce:1c:75:71:0a:ad:0c:04:
                    f1:70:47:7e:f4:fb:18:26:a8:b3:d8:2a:0e:f9:81:
                    33:32:1e:ce:cf:72:ff:23:83:27:38:8f:7f:1c:48:
                    bf:99:5a:6e:4d:30:8a:be:ef:5f:7a:7d:43:31:0a:
                    ff:28:09:89:52:c2:06:3a:9f:f0:b8:c0:b0:75:46:
                    fc:af:74:01:3a:ce:1e:d4:d5:ce:1b:aa:ba:8d:cc:
                    78:cf:5e:26:6e:9b:96:d5:8a:34:57:f1:28:56:8f:
                    28:98:3b:d4:e6:b6:da:39:33:0d:b7:62:3d:7b:a2:
                    71:06:da:59:27:dc:7a:36:ef:9c:41:39:52:24:be:
                    6e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:6B:33:C8:D0:AC:5A:04:49:BA:BB:A3:ED:8B:C4:62:E3:26:E6:4C
            X509v3 Authority Key Identifier:
                keyid:3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3130332e3133352e322e302f32342d3234203d3e203338333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:35:04:f5:a2:b9:7c:34:11:6f:de:79:4a:66:45:fd:51:c6:
         83:15:b6:bc:52:59:c2:cb:43:12:07:f4:c3:7e:e7:2d:51:9a:
         5f:d6:2e:83:1f:22:a1:81:7a:ac:6f:2c:48:bd:75:a3:6a:14:
         85:d4:90:d7:f1:e1:68:c3:18:71:dd:b5:5f:d3:09:bf:93:22:
         d4:66:9b:c0:15:fc:e9:93:c2:3e:b7:f0:88:2e:a4:ed:c8:81:
         cb:c1:1d:06:c0:7a:31:e8:c3:7d:f8:a4:9e:0c:2c:fd:95:b5:
         9f:a6:19:fd:9d:45:c7:af:54:87:c4:81:a6:6e:4c:15:52:75:
         4e:33:eb:9f:e9:8b:dc:26:41:0c:31:13:65:d6:f2:5e:dc:d8:
         1e:45:53:86:53:7c:46:76:d3:f5:21:61:04:a6:3d:cd:2a:88:
         61:bb:0f:fe:d1:67:a6:0c:df:a6:f0:c8:93:cc:df:54:cf:0a:
         86:42:3f:8f:32:c3:08:c7:04:c8:da:df:d0:6a:9b:f3:a3:61:
         66:3c:04:1a:dc:30:c9:99:98:5a:5e:00:ac:08:cd:a1:d3:17:
         05:f5:7d:6f:8e:4a:75:36:3b:11:24:7e:2b:87:b4:43:41:14:
         fd:d7:30:ef:24:b1:d2:0e:7b:bd:36:32:38:5e:95:48:89:af:
         2c:31:54:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:04:12 2025 by rpki-client