Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/3130332e39312e32342e302f32322d3234203d3e20313432333739.roa
File:                     3130332e39312e32342e302f32322d3234203d3e20313432333739.roa (raw, json)
Hash identifier:          AU2BjjxLKOB7x1afsJypIVoDqfBt5Pa++/i1Uy3JBXs=
Subject key identifier:   8B:76:93:C5:38:8B:15:83:F6:B0:5D:91:C5:BF:FA:DE:7B:C7:7F:FD
Certificate issuer:       /CN=25D788BD2A450C01354B9AB70826895FDFF56208
Certificate serial:       0B9FBF4D2FB57BFF66B0DA5E6B7255D8C10EA0FF
Authority key identifier: 25:D7:88:BD:2A:45:0C:01:35:4B:9A:B7:08:26:89:5F:DF:F5:62:08
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25D788BD2A450C01354B9AB70826895FDFF56208.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/3130332e39312e32342e302f32322d3234203d3e20313432333739.roa
Signing time:             Wed 30 Apr 2025 05:00:02 +0000
ROA not before:           Wed 30 Apr 2025 04:55:02 +0000
ROA not after:            Wed 29 Apr 2026 05:00:02 +0000
asID:                     142379
IP address blocks:        103.91.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/25D788BD2A450C01354B9AB70826895FDFF56208.crl
                          rsync://repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/25D788BD2A450C01354B9AB70826895FDFF56208.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25D788BD2A450C01354B9AB70826895FDFF56208.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 21:52:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:9f:bf:4d:2f:b5:7b:ff:66:b0:da:5e:6b:72:55:d8:c1:0e:a0:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25D788BD2A450C01354B9AB70826895FDFF56208
        Validity
            Not Before: Apr 30 04:55:02 2025 GMT
            Not After : Apr 29 05:00:02 2026 GMT
        Subject: CN=8B7693C5388B1583F6B05D91C5BFFADE7BC77FFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c8:4d:ed:25:47:c2:e1:31:3c:35:a9:e8:b5:
                    ac:1f:b9:b9:ae:43:d4:15:e7:f5:b6:d4:e1:15:7f:
                    17:cf:4f:90:b7:e5:d6:bf:45:20:d0:33:c9:c9:85:
                    d2:d0:5a:7f:ee:e2:f7:98:34:5d:85:cf:c0:46:b8:
                    23:d6:d3:0c:9b:ed:09:b3:e0:6a:77:c7:07:9e:ae:
                    36:ef:bb:ee:aa:56:ea:22:ef:0d:f5:4f:73:13:88:
                    6b:a4:8c:76:05:61:07:34:4a:5f:08:76:3d:ae:40:
                    28:be:4b:4a:fc:d3:b6:32:db:cf:77:e2:91:f1:dc:
                    0f:4e:aa:9d:ba:f7:f8:a6:9c:cb:40:67:8f:3b:45:
                    b3:26:12:af:12:c7:57:b1:c6:89:64:d1:7e:b6:fa:
                    ae:b4:02:11:02:15:2f:e1:3d:a8:3e:f8:91:3d:1c:
                    13:17:5e:28:75:d8:17:cd:1e:2d:b7:03:5e:df:c3:
                    59:98:c0:f1:e9:2d:2d:22:a0:91:56:ae:b9:24:65:
                    32:62:f9:0f:52:4f:66:1e:cc:82:51:ba:28:f9:f7:
                    1f:ab:17:ed:d3:f1:79:e9:3d:2f:96:37:c6:8a:71:
                    b0:46:40:ed:39:6a:18:c4:d2:48:89:56:c0:53:60:
                    eb:58:3b:aa:cb:91:fa:8c:1e:4f:83:34:05:8e:90:
                    8c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:76:93:C5:38:8B:15:83:F6:B0:5D:91:C5:BF:FA:DE:7B:C7:7F:FD
            X509v3 Authority Key Identifier:
                keyid:25:D7:88:BD:2A:45:0C:01:35:4B:9A:B7:08:26:89:5F:DF:F5:62:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/25D788BD2A450C01354B9AB70826895FDFF56208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25D788BD2A450C01354B9AB70826895FDFF56208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/3130332e39312e32342e302f32322d3234203d3e20313432333739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.91.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:f4:b1:18:ea:af:d2:ca:4c:70:99:6d:1f:ee:61:77:99:fb:
         a2:15:a9:d1:7b:13:93:59:19:5b:37:94:79:82:74:f9:77:4b:
         81:e9:ee:a3:05:1d:4d:61:cb:e4:de:90:ec:a1:a8:69:46:57:
         25:b2:f1:66:71:d3:ee:ae:56:7d:08:bb:2d:44:7d:8e:c6:28:
         bd:9f:45:e6:ec:92:4e:dd:09:33:4d:27:30:05:04:3f:27:3f:
         6f:ca:a7:ab:bb:a6:cc:c8:5e:56:8e:77:c2:95:53:6a:a6:59:
         7f:43:21:71:8e:bb:44:eb:85:c3:29:14:89:5d:d0:89:68:a8:
         c6:01:b8:fe:00:d1:e1:d0:cb:99:55:b1:8c:4d:e4:46:b3:72:
         65:3a:ed:5a:5c:0a:d8:97:f7:59:4a:57:d1:63:61:de:31:a5:
         22:0d:50:27:85:0b:56:64:56:46:a7:bf:bc:1b:83:96:fa:2f:
         92:4b:d9:86:dc:c8:82:4f:1e:8a:d2:9c:15:15:90:e5:92:da:
         37:4d:3c:14:a1:31:83:14:76:cb:4c:ae:00:2f:2f:05:57:70:
         5b:1e:ad:28:d5:46:04:2d:58:b6:b9:c1:19:35:c0:b5:06:7b:
         69:88:78:25:70:74:83:44:7a:7a:6a:7e:12:54:25:8f:51:1f:
         e7:c3:15:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:15:10 2025 by rpki-client