Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/3130332e39362e3131362e302f32342d3234203d3e20313335343531.roa
File:                     3130332e39362e3131362e302f32342d3234203d3e20313335343531.roa (raw, json)
Hash identifier:          oN07EEzMfkHBn9JnnG4sRK6teKNd4kpEdvJthcOFQvg=
Subject key identifier:   A5:74:35:A0:2F:D3:4D:97:74:6D:F3:8E:7A:16:DD:24:03:09:B7:64
Certificate issuer:       /CN=05BC764F85F9F88CE41FD879C6125E65117E8E79
Certificate serial:       6DE7411834E432683FDE970BC421FD80B459E36A
Authority key identifier: 05:BC:76:4F:85:F9:F8:8C:E4:1F:D8:79:C6:12:5E:65:11:7E:8E:79
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05BC764F85F9F88CE41FD879C6125E65117E8E79.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/3130332e39362e3131362e302f32342d3234203d3e20313335343531.roa
Signing time:             Mon 02 Jun 2025 02:04:27 +0000
ROA not before:           Mon 02 Jun 2025 01:59:27 +0000
ROA not after:            Mon 01 Jun 2026 02:04:27 +0000
asID:                     135451
IP address blocks:        103.96.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/05BC764F85F9F88CE41FD879C6125E65117E8E79.crl
                          rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/05BC764F85F9F88CE41FD879C6125E65117E8E79.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05BC764F85F9F88CE41FD879C6125E65117E8E79.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 22:36:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e7:41:18:34:e4:32:68:3f:de:97:0b:c4:21:fd:80:b4:59:e3:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05BC764F85F9F88CE41FD879C6125E65117E8E79
        Validity
            Not Before: Jun  2 01:59:27 2025 GMT
            Not After : Jun  1 02:04:27 2026 GMT
        Subject: CN=A57435A02FD34D97746DF38E7A16DD240309B764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f2:3a:9c:db:e6:8d:18:3b:5c:a9:a1:63:dc:
                    1f:c7:db:8b:74:df:e0:0b:91:36:c8:25:1f:83:c0:
                    de:39:d8:83:4a:67:43:eb:94:2d:04:36:e5:82:da:
                    de:07:d0:a2:56:c3:c9:a9:2c:19:1a:24:57:0e:65:
                    4c:3d:bc:da:60:02:70:97:77:ed:38:57:0b:21:16:
                    1c:ac:44:c8:c5:ff:3f:eb:f0:03:23:ba:d5:9f:f6:
                    78:fb:fd:7b:4d:8b:d3:13:58:bb:75:e4:b9:c2:32:
                    7e:70:5e:b4:2a:d0:43:4a:40:f7:14:c6:d9:ac:c6:
                    75:c6:b1:76:a4:13:68:c3:6a:48:2f:ac:e4:d5:c6:
                    d1:3c:de:57:23:61:97:76:25:32:87:4c:2f:f2:2c:
                    b1:23:80:e5:dd:fd:5d:be:91:73:5b:61:82:02:e3:
                    0e:7d:9d:19:be:ae:35:f6:b4:8a:62:69:a2:99:b2:
                    75:6f:7a:0f:00:87:65:17:4f:8a:05:97:28:78:62:
                    8c:f5:33:e0:ad:7e:a6:a6:81:aa:d6:e6:97:62:74:
                    c3:17:f1:88:5f:24:f1:a2:91:b2:9c:5b:d0:b3:64:
                    09:6a:93:63:ee:3d:95:89:4b:1e:34:5b:d1:37:9f:
                    01:c1:45:fc:e0:90:44:a9:2e:5b:8d:3d:5c:bd:16:
                    fe:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:74:35:A0:2F:D3:4D:97:74:6D:F3:8E:7A:16:DD:24:03:09:B7:64
            X509v3 Authority Key Identifier:
                keyid:05:BC:76:4F:85:F9:F8:8C:E4:1F:D8:79:C6:12:5E:65:11:7E:8E:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/05BC764F85F9F88CE41FD879C6125E65117E8E79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05BC764F85F9F88CE41FD879C6125E65117E8E79.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/3130332e39362e3131362e302f32342d3234203d3e20313335343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:f7:25:e1:b0:2a:53:16:92:78:ad:62:39:eb:a3:c9:db:26:
         88:d8:f4:8f:cc:32:c5:e6:20:13:8e:15:83:da:92:a0:09:a5:
         6c:08:53:1d:b2:20:19:65:a0:7a:e2:12:d3:a0:e9:e5:78:f5:
         fe:f7:7f:8f:af:a1:ab:7e:e9:ce:94:06:6b:18:05:04:ae:ea:
         b7:d6:8c:22:58:9b:f7:63:75:cf:97:7f:10:a7:db:45:8e:65:
         72:98:e1:54:75:27:71:e7:fe:37:0d:ca:75:22:e0:75:53:d3:
         09:07:72:a1:f4:64:8e:42:79:9e:11:88:d4:8b:fe:99:26:cc:
         d2:4b:ce:40:b5:d8:02:b8:19:15:ee:82:e7:74:ed:2b:42:31:
         ed:f3:64:ab:44:a6:84:98:16:27:a4:29:1c:6a:20:cb:eb:c8:
         cb:2e:ec:95:6e:07:40:b5:41:1d:76:38:d3:cc:84:89:05:d6:
         05:79:cb:6f:55:98:90:97:ca:b0:aa:24:1d:d8:63:7b:24:1d:
         bb:0c:08:0c:ed:19:09:ff:45:b1:76:9e:c0:4f:1e:54:94:35:
         32:20:56:dc:f1:eb:10:8b:8f:5d:37:5b:5b:25:86:74:70:b5:
         24:6f:08:74:48:b0:03:bb:94:ea:5e:7f:3a:41:0d:8e:f8:4c:
         06:d9:22:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:01:43 2025 by rpki-client