Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/3130332e3132362e382e302f32322d3234203d3e20313338313036.roa
File:                     3130332e3132362e382e302f32322d3234203d3e20313338313036.roa (raw, json)
Hash identifier:          ZsZIR/g2J09b8mzwbXIsn9lVQoQrr39ZtxdAzPnbJQw=
Subject key identifier:   66:07:0F:4F:A9:06:58:4B:23:66:07:32:DF:8D:29:74:45:3F:97:B3
Certificate issuer:       /CN=25FB03D0A2C3547C3A38ACAE2A752BB15A245E15
Certificate serial:       38B86BEB36F0715B3146782D1CE1F90CB3867854
Authority key identifier: 25:FB:03:D0:A2:C3:54:7C:3A:38:AC:AE:2A:75:2B:B1:5A:24:5E:15
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/3130332e3132362e382e302f32322d3234203d3e20313338313036.roa
Signing time:             Mon 02 Jun 2025 02:04:57 +0000
ROA not before:           Mon 02 Jun 2025 01:59:57 +0000
ROA not after:            Mon 01 Jun 2026 02:04:57 +0000
asID:                     138106
IP address blocks:        103.126.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl
                          rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 18:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:b8:6b:eb:36:f0:71:5b:31:46:78:2d:1c:e1:f9:0c:b3:86:78:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25FB03D0A2C3547C3A38ACAE2A752BB15A245E15
        Validity
            Not Before: Jun  2 01:59:57 2025 GMT
            Not After : Jun  1 02:04:57 2026 GMT
        Subject: CN=66070F4FA906584B23660732DF8D2974453F97B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:82:ce:7f:59:cb:e0:b5:cc:ce:b9:3d:e5:a9:
                    d5:46:a5:ec:1a:be:d0:7e:c6:14:66:f6:b8:39:8a:
                    5f:e8:a8:fe:a1:77:a6:1f:52:37:40:29:65:fe:db:
                    6c:70:77:54:8a:55:7c:b1:79:fd:2b:30:80:9b:65:
                    08:20:df:65:44:8d:3d:12:cf:30:e6:0b:90:7d:59:
                    45:31:ad:74:15:d1:56:0c:25:41:90:45:e1:70:a2:
                    07:24:75:d8:d2:16:37:4d:05:fa:0a:0d:55:a4:a1:
                    b1:03:bc:c4:ba:c6:54:17:c5:02:57:66:72:96:62:
                    d4:5d:24:cf:94:6d:3d:7c:6f:d6:f8:2d:5b:86:e5:
                    34:c6:38:21:d4:ab:6d:78:44:2d:a2:19:9a:96:a9:
                    d7:62:8b:a0:5c:df:51:6a:42:06:c2:c4:03:dc:4e:
                    ac:3d:8a:9b:69:7f:23:a3:01:05:cb:fa:59:1b:a3:
                    bf:b2:b0:18:5e:5e:00:1f:46:fa:75:cc:32:b7:13:
                    f7:30:f6:48:cd:a1:81:e8:fc:9f:73:00:0b:8c:c5:
                    57:c4:e0:fc:49:8b:6e:82:0c:0c:cd:e0:6b:2c:21:
                    ac:cf:94:4d:df:bf:b0:fd:79:43:78:c5:90:10:bc:
                    ff:cd:c5:59:35:2f:cd:e2:70:4c:2e:7a:cf:dc:c7:
                    b0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:07:0F:4F:A9:06:58:4B:23:66:07:32:DF:8D:29:74:45:3F:97:B3
            X509v3 Authority Key Identifier:
                keyid:25:FB:03:D0:A2:C3:54:7C:3A:38:AC:AE:2A:75:2B:B1:5A:24:5E:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/3130332e3132362e382e302f32322d3234203d3e20313338313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:8e:ab:01:82:e1:d1:92:b7:6d:31:20:33:72:ad:7d:7e:71:
         33:a6:bb:82:97:19:60:a5:be:72:4b:92:a9:74:ed:7b:b8:6d:
         4a:21:22:ef:ce:56:3f:dd:ac:1e:ba:04:46:0b:de:21:e8:cf:
         33:fa:f2:9a:52:2a:90:5a:55:77:a6:e8:61:0c:00:a9:6a:71:
         5f:80:f0:a0:d3:f1:20:96:ee:d9:ec:ff:44:e5:b9:e9:4c:b9:
         dd:af:9b:31:a8:df:f3:d0:84:97:a3:3f:45:c5:e8:94:52:fc:
         30:55:ae:d3:f3:f0:2d:3d:21:cc:e0:4f:31:6b:2c:1f:fa:d6:
         e3:53:fd:77:3a:af:12:31:ba:26:96:b5:8a:88:c5:b5:97:79:
         3d:b3:4b:49:fe:83:a6:f6:65:80:b1:83:fc:a9:87:51:a5:81:
         41:69:95:a4:cb:f2:0a:f0:90:09:a1:dc:54:93:5c:2d:08:88:
         f6:b5:9e:62:d6:97:56:a1:47:a6:64:d0:99:f8:f4:15:d9:3e:
         59:b4:b5:d2:d3:26:0d:48:83:5d:8e:41:85:de:a2:85:5b:41:
         e2:59:44:75:88:94:9c:37:70:ac:44:ca:5e:cb:2c:fc:d1:37:
         1d:c1:e0:dc:0b:f8:0e:b7:d3:31:4e:a9:e6:38:f0:4a:67:c7:
         01:6a:5e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:36:45 2025 by rpki-client