Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/3130332e36342e31342e302f32342d3234203d3e20313335343438.roa
File:                     3130332e36342e31342e302f32342d3234203d3e20313335343438.roa (raw, json)
Hash identifier:          QC8bpRsjoPax2VeFVISF7pou7WEj+SsbxVAbvHu+cPo=
Subject key identifier:   36:28:A6:8F:63:D6:D6:32:B0:AE:E8:52:E0:DC:19:A7:7F:A9:2E:D1
Certificate issuer:       /CN=03315D0E966A85B878EA9058B8CF03EAF2881889
Certificate serial:       20454D6D287F4915D30D35DBF6165BCE88B91BA9
Authority key identifier: 03:31:5D:0E:96:6A:85:B8:78:EA:90:58:B8:CF:03:EA:F2:88:18:89
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/3130332e36342e31342e302f32342d3234203d3e20313335343438.roa
Signing time:             Mon 02 Jun 2025 02:03:43 +0000
ROA not before:           Mon 02 Jun 2025 01:58:43 +0000
ROA not after:            Mon 01 Jun 2026 02:03:43 +0000
asID:                     135448
IP address blocks:        103.64.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.crl
                          rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 12:33:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:45:4d:6d:28:7f:49:15:d3:0d:35:db:f6:16:5b:ce:88:b9:1b:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03315D0E966A85B878EA9058B8CF03EAF2881889
        Validity
            Not Before: Jun  2 01:58:43 2025 GMT
            Not After : Jun  1 02:03:43 2026 GMT
        Subject: CN=3628A68F63D6D632B0AEE852E0DC19A77FA92ED1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:87:0d:d9:6c:12:ea:7e:08:72:a8:09:98:a8:
                    5b:c2:cf:c5:7b:34:3b:85:34:be:09:8d:9d:36:2e:
                    95:98:09:a3:97:16:a9:69:61:dc:30:d9:16:61:02:
                    c2:a2:1f:ca:a7:7a:c7:5b:20:42:b4:36:1c:a6:08:
                    e2:3f:8a:a8:de:c7:66:29:1c:7d:0d:ed:57:fc:7c:
                    0e:82:e6:89:eb:0f:c1:77:ec:6f:64:51:3f:d4:39:
                    58:9d:ca:4e:1d:36:a3:0a:6f:20:e2:76:56:b1:b3:
                    dd:4c:35:88:e1:d2:7b:1e:5e:23:e8:e9:d2:52:5c:
                    cf:6c:52:0a:7d:51:e5:f6:78:6a:18:dd:e7:fc:80:
                    cf:94:8d:53:3d:3a:30:79:25:92:ad:9a:33:25:c9:
                    15:bf:0d:68:0a:01:e2:9b:0c:dc:68:ac:0e:58:6b:
                    63:3c:a1:a3:2e:d1:e1:0c:bd:65:7c:15:27:51:9a:
                    af:03:e8:72:84:7b:16:fe:e4:0d:28:27:9d:39:af:
                    38:65:80:dc:a1:4d:1c:2f:bf:1c:2c:5b:b8:f9:16:
                    d9:98:7d:24:da:4a:d9:be:c5:c1:bf:39:f0:59:af:
                    eb:5d:6a:ca:0e:ff:17:d2:93:82:0d:1c:76:63:c7:
                    cf:d5:6e:4d:f9:07:09:e2:48:1d:d7:ac:51:f9:13:
                    44:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:28:A6:8F:63:D6:D6:32:B0:AE:E8:52:E0:DC:19:A7:7F:A9:2E:D1
            X509v3 Authority Key Identifier:
                keyid:03:31:5D:0E:96:6A:85:B8:78:EA:90:58:B8:CF:03:EA:F2:88:18:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/3130332e36342e31342e302f32342d3234203d3e20313335343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.64.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:67:4c:82:fd:9b:c3:35:e6:4f:9a:97:e2:21:a2:5d:c3:e2:
         b8:fb:0b:0e:16:dc:75:08:60:02:91:a6:27:69:d6:4b:ae:46:
         ed:ec:ab:00:32:69:b7:8c:3a:fc:f1:82:92:c4:99:dc:8e:f2:
         f4:f9:24:90:8b:43:61:70:b0:54:02:9e:93:75:9d:71:17:e0:
         0c:04:5b:ae:2d:10:0b:e1:c5:94:81:68:6e:5f:1b:ec:91:38:
         46:84:2c:6b:6c:2b:22:49:37:b3:0b:1f:55:95:2f:db:b4:0b:
         81:ee:c3:4a:25:32:c3:83:c4:d0:4b:b9:2d:ea:af:16:bb:ee:
         b4:40:8e:4c:ae:87:86:b6:38:47:c1:8a:84:0a:c7:1c:19:7c:
         4c:02:76:dd:ba:1f:2a:80:11:23:88:f1:10:96:5d:58:e2:de:
         45:63:f6:72:5e:7a:a2:07:1b:04:cf:95:1c:8c:c1:3d:fb:a9:
         ff:ba:0d:48:68:b4:af:08:f1:6d:4c:f7:a3:bf:ad:36:90:94:
         d3:a5:a7:de:32:c9:49:fa:c6:97:3f:c3:a5:46:32:98:2d:d2:
         f7:12:b6:ef:71:3b:73:c9:04:0a:9e:ec:ee:ad:3d:df:f4:5c:
         e1:c5:02:4b:2e:58:4b:5b:80:53:cf:eb:98:9d:20:47:23:00:
         0b:20:ab:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:08:33 2025 by rpki-client