Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/3130332e39362e3131382e302f32332d3234203d3e20313335343531.roa
File:                     3130332e39362e3131382e302f32332d3234203d3e20313335343531.roa (raw, json)
Hash identifier:          f0BWuTzxCArn4KfGhPORVbfEFH0pcc52v4wRTW6XvmA=
Subject key identifier:   9B:36:B5:17:81:F4:DD:06:DE:39:03:E3:EE:CC:30:3F:E4:A1:7B:68
Certificate issuer:       /CN=05BC764F85F9F88CE41FD879C6125E65117E8E79
Certificate serial:       434E8C26F7A1BD563A7C8B924D5BC04D1EF715B9
Authority key identifier: 05:BC:76:4F:85:F9:F8:8C:E4:1F:D8:79:C6:12:5E:65:11:7E:8E:79
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05BC764F85F9F88CE41FD879C6125E65117E8E79.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/3130332e39362e3131382e302f32332d3234203d3e20313335343531.roa
Signing time:             Mon 02 Jun 2025 02:04:27 +0000
ROA not before:           Mon 02 Jun 2025 01:59:27 +0000
ROA not after:            Mon 01 Jun 2026 02:04:27 +0000
asID:                     135451
IP address blocks:        103.96.118.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/05BC764F85F9F88CE41FD879C6125E65117E8E79.crl
                          rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/05BC764F85F9F88CE41FD879C6125E65117E8E79.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05BC764F85F9F88CE41FD879C6125E65117E8E79.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 22:36:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:4e:8c:26:f7:a1:bd:56:3a:7c:8b:92:4d:5b:c0:4d:1e:f7:15:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05BC764F85F9F88CE41FD879C6125E65117E8E79
        Validity
            Not Before: Jun  2 01:59:27 2025 GMT
            Not After : Jun  1 02:04:27 2026 GMT
        Subject: CN=9B36B51781F4DD06DE3903E3EECC303FE4A17B68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f2:02:38:06:f0:6e:40:d4:9d:4f:37:7d:18:
                    87:0f:9a:c6:fe:bc:04:e4:af:e9:c8:dc:f4:8e:aa:
                    cf:06:16:07:3e:1d:43:08:ca:34:da:bd:1e:0f:f9:
                    47:2e:95:2c:f6:6d:b6:37:15:5e:2f:ed:94:78:13:
                    87:7e:48:9e:aa:20:a1:7c:7d:62:f6:01:43:a4:b9:
                    bf:31:1a:65:61:e8:3c:9d:3f:f8:e6:4c:02:75:ec:
                    f5:5f:a6:8b:f7:15:8d:86:38:cf:2c:3a:c2:ba:27:
                    30:ee:2d:04:7f:40:85:ca:55:1a:29:f6:6c:d9:0d:
                    77:a0:d1:d7:ed:ba:df:95:a6:57:37:2b:76:7e:35:
                    b6:7d:3a:a6:48:dc:77:cc:0d:97:1f:08:e5:7f:39:
                    44:28:30:0a:55:36:6f:a5:5c:d8:74:e2:98:01:97:
                    be:bc:b0:2f:05:f4:ad:8e:15:fe:fa:5f:b7:93:c9:
                    54:f7:ab:45:8a:2b:a7:c1:64:07:11:8b:1a:81:df:
                    11:90:14:a7:5c:58:b1:b3:25:94:b2:94:48:3e:9b:
                    7a:dd:81:c6:b1:f6:d8:bf:17:c2:4f:6c:5a:b0:a2:
                    c0:62:5e:40:a6:0a:b0:93:b9:44:11:a9:37:b5:e4:
                    45:26:25:23:7f:9a:96:39:20:15:48:e6:43:47:7d:
                    97:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:36:B5:17:81:F4:DD:06:DE:39:03:E3:EE:CC:30:3F:E4:A1:7B:68
            X509v3 Authority Key Identifier:
                keyid:05:BC:76:4F:85:F9:F8:8C:E4:1F:D8:79:C6:12:5E:65:11:7E:8E:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/05BC764F85F9F88CE41FD879C6125E65117E8E79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05BC764F85F9F88CE41FD879C6125E65117E8E79.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/3130332e39362e3131382e302f32332d3234203d3e20313335343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:75:37:d4:c9:87:94:1f:ad:1e:13:9d:57:f8:da:cd:b6:e8:
         d8:6a:9a:d1:91:5e:93:bf:53:ad:88:98:c7:04:bb:06:78:df:
         9f:51:c8:7c:4e:35:cb:7d:cf:1a:1d:4b:b2:9b:80:33:35:42:
         47:b1:10:43:ad:cb:fc:c6:d2:14:7d:e3:4b:6e:e0:d7:34:c3:
         fe:4e:7c:d9:e5:d7:99:2e:03:a2:17:b4:c5:60:fc:af:0d:70:
         f2:7f:a8:64:95:9b:42:5d:74:08:40:fc:74:f0:27:80:d3:6a:
         8b:2c:6e:d8:d9:77:9c:0e:e5:9b:84:56:36:06:9f:e5:ad:eb:
         13:cd:ad:6b:ac:f5:eb:c1:28:eb:2c:09:52:6a:21:50:f9:69:
         74:82:ab:9b:dd:6b:d7:12:60:e6:89:5f:68:ba:e0:dd:c1:ed:
         84:ae:f1:ee:4f:96:b0:fc:16:0a:26:eb:1f:d5:33:a6:e8:75:
         4f:44:d3:1a:f4:9c:e7:4f:22:ed:a6:96:ea:9b:e6:48:06:3c:
         6c:dc:cc:11:ba:22:04:1c:59:df:51:95:89:ad:e8:15:c9:ed:
         5a:e1:00:2c:fa:82:41:fb:fd:f8:b8:25:f3:49:ed:fd:f1:cd:
         41:2b:84:77:5f:b9:43:68:fe:cf:c3:9f:13:bd:3d:e7:9c:e3:
         08:7e:ff:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:56:03 2025 by rpki-client