Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/3130332e3134382e38342e302f32342d3234203d3e20313339393836.roa
File:                     3130332e3134382e38342e302f32342d3234203d3e20313339393836.roa (raw, json)
Hash identifier:          mAx24Mrm6AI9KeLaD2h/5RLJ5ztWp5mCELhp+sgXhQM=
Subject key identifier:   C0:24:69:16:78:41:DB:3C:13:3A:2F:B2:9B:C4:22:05:70:D3:29:EB
Certificate issuer:       /CN=95C3BA7F23B6351721F77DA8020731F9DA46B3C8
Certificate serial:       1B0DD5788E950999B0159A860219871E6FFE5A08
Authority key identifier: 95:C3:BA:7F:23:B6:35:17:21:F7:7D:A8:02:07:31:F9:DA:46:B3:C8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/3130332e3134382e38342e302f32342d3234203d3e20313339393836.roa
Signing time:             Mon 02 Jun 2025 02:04:03 +0000
ROA not before:           Mon 02 Jun 2025 01:59:03 +0000
ROA not after:            Mon 01 Jun 2026 02:04:03 +0000
asID:                     139986
IP address blocks:        103.148.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl
                          rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 00:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:0d:d5:78:8e:95:09:99:b0:15:9a:86:02:19:87:1e:6f:fe:5a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95C3BA7F23B6351721F77DA8020731F9DA46B3C8
        Validity
            Not Before: Jun  2 01:59:03 2025 GMT
            Not After : Jun  1 02:04:03 2026 GMT
        Subject: CN=C02469167841DB3C133A2FB29BC4220570D329EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:b9:69:d1:d9:15:23:2d:19:46:ab:93:48:d3:
                    9a:4d:90:62:1f:4a:b2:0b:e1:4a:09:45:08:d3:49:
                    03:53:58:75:ff:c4:5c:9b:68:bd:8d:36:71:cf:07:
                    e5:7e:d8:b5:8f:07:a9:32:55:bc:59:30:80:c2:d7:
                    e0:ae:e6:91:5e:4d:79:78:ef:3f:ee:c5:59:12:48:
                    4f:9b:80:35:21:8e:f0:c9:0b:5d:35:4c:8c:3a:98:
                    c0:dd:a1:ea:a0:b0:f9:c4:1f:43:35:33:96:c2:84:
                    ee:06:d5:76:94:69:16:9f:77:6b:46:f2:ce:f9:a7:
                    9c:0b:5a:bc:ea:7d:35:b3:4d:8c:ab:02:9d:ff:f4:
                    03:1d:06:0c:76:01:a8:82:93:cd:5f:25:c4:7e:41:
                    7d:77:c2:84:6d:78:85:a0:f9:34:cb:2c:10:96:51:
                    de:c8:df:1c:c5:47:c0:a4:91:0b:1a:88:4a:26:37:
                    87:67:b5:73:b8:2c:3d:60:4b:eb:02:51:77:27:38:
                    62:ed:67:c5:98:17:8e:ca:e8:d0:7f:90:6f:a6:5c:
                    b8:8e:1e:75:73:15:84:4f:4a:2d:5d:71:4d:bb:5a:
                    a1:71:d7:d2:ff:d7:00:d2:b6:7c:62:c1:be:94:75:
                    63:7d:95:21:87:df:99:48:49:4c:ba:ec:2b:3f:80:
                    25:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:24:69:16:78:41:DB:3C:13:3A:2F:B2:9B:C4:22:05:70:D3:29:EB
            X509v3 Authority Key Identifier:
                keyid:95:C3:BA:7F:23:B6:35:17:21:F7:7D:A8:02:07:31:F9:DA:46:B3:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/3130332e3134382e38342e302f32342d3234203d3e20313339393836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:07:f4:ff:51:4c:ab:9d:d9:66:1f:5c:a0:a4:40:07:63:8b:
         d1:8e:32:09:82:02:77:a4:9d:b9:e8:06:30:0d:57:de:97:48:
         6b:85:d9:1c:68:7d:13:3a:e4:66:3a:29:6a:92:4a:7c:85:74:
         74:f0:6a:14:b0:e7:db:e7:f1:ae:61:5b:14:f1:81:ea:33:da:
         93:a8:80:fe:40:b7:d2:12:2e:3e:52:53:04:6c:6f:fc:71:1a:
         70:18:4a:2c:72:9d:8a:3e:58:43:ad:3c:25:b9:1d:ca:f6:68:
         7e:79:ac:7e:a8:ae:c1:f6:53:f7:e7:86:7f:1e:62:df:4c:bf:
         2b:67:25:d5:3f:14:54:25:06:5f:2b:b6:45:68:3b:ce:24:b2:
         fd:88:2c:0a:bb:71:20:0d:c0:f9:d2:b0:46:fe:e7:d9:dd:a1:
         e2:cc:ba:bb:84:90:16:5f:98:57:7f:cd:0d:88:f4:9e:64:ac:
         cb:7f:4b:5e:33:86:38:89:2b:89:e0:a4:7b:ab:78:c5:81:da:
         97:0c:75:e7:09:87:3e:ea:5e:ed:bc:cc:be:09:3e:85:a6:6c:
         19:e7:89:0f:9b:61:b9:55:59:29:1a:bb:c1:1e:c0:03:fc:81:
         cb:33:74:0e:27:95:d6:10:6c:4a:e5:74:1c:e8:4c:5a:e9:0e:
         4b:c4:ca:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:28:02 2025 by rpki-client