Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136342e302f32322d3232203d3e203538333639.roa
File:                     3130332e342e3136342e302f32322d3232203d3e203538333639.roa (raw, json)
Hash identifier:          Pwbv+bZJNkDRQl/iZ6eJ7Ga979eBmOqiGHe4bx17KGQ=
Subject key identifier:   25:1A:29:88:44:AE:DE:54:07:EB:92:46:0D:15:8B:69:D6:36:5C:C9
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       69D34B996015517FAB0D0A3DC32CC3E5DFB4E7ED
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136342e302f32322d3232203d3e203538333639.roa
Signing time:             Mon 02 Jun 2025 02:03:36 +0000
ROA not before:           Mon 02 Jun 2025 01:58:36 +0000
ROA not after:            Mon 01 Jun 2026 02:03:36 +0000
asID:                     58369
IP address blocks:        103.4.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 13:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:d3:4b:99:60:15:51:7f:ab:0d:0a:3d:c3:2c:c3:e5:df:b4:e7:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jun  2 01:58:36 2025 GMT
            Not After : Jun  1 02:03:36 2026 GMT
        Subject: CN=251A298844AEDE5407EB92460D158B69D6365CC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:67:a4:b8:4e:de:2d:91:22:b2:f5:2b:2f:57:
                    b5:42:03:7b:3b:d5:56:6a:dd:53:d1:5b:33:a9:34:
                    78:ec:21:57:c7:cd:f8:2d:54:f8:d8:e9:8b:60:b1:
                    56:d2:9e:b5:15:5a:fb:e9:b8:dd:bc:d8:45:6c:53:
                    75:49:aa:71:0b:49:5a:2c:83:4b:32:0c:f3:4e:c7:
                    0d:95:4c:d3:18:6b:4a:cc:7f:f1:d5:f0:f0:23:97:
                    82:7a:d2:18:40:0f:d6:a7:97:2b:01:23:e0:e9:eb:
                    ac:05:4c:33:74:be:76:fb:53:2d:b1:c3:d9:24:c9:
                    74:3c:de:76:f1:31:f1:37:ab:54:5b:28:11:62:59:
                    1c:cb:63:bf:e2:54:26:01:34:c6:76:97:67:f3:50:
                    45:3b:7e:6e:ec:e3:cc:de:ad:a0:51:36:c9:35:54:
                    67:49:db:a7:9d:42:a4:95:40:5e:5e:17:83:c3:ac:
                    29:22:6b:9e:39:c4:17:be:37:8d:a0:22:39:58:0e:
                    18:7e:0c:a7:34:2f:65:d8:ea:f2:52:92:c4:d6:b8:
                    5d:a0:8d:e2:97:f9:00:b4:5e:39:70:be:4c:93:1e:
                    53:d3:71:ba:10:1f:62:75:ac:90:5d:83:52:13:01:
                    9b:ba:49:47:fd:d0:44:ae:52:5b:93:24:78:c3:4b:
                    58:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:1A:29:88:44:AE:DE:54:07:EB:92:46:0D:15:8B:69:D6:36:5C:C9
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136342e302f32322d3232203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:91:88:49:c0:99:15:e3:63:2a:fd:50:46:3b:ba:15:24:4f:
         66:50:a4:c6:8b:e5:c4:5b:ed:47:ae:7d:d1:07:0f:d3:d5:46:
         90:0b:ec:22:b8:c0:1a:92:01:a3:c8:18:ba:a1:3c:7f:dc:47:
         3e:26:26:60:f2:a4:23:1a:09:d2:c8:58:f8:2f:42:18:5e:1d:
         fc:f2:27:14:7f:b6:86:eb:97:55:ab:bb:90:a2:32:e6:02:03:
         a8:83:24:d3:26:e2:f2:4a:80:84:47:bf:c1:77:ec:20:1f:9b:
         2d:8e:4e:18:8e:40:8f:e5:56:f9:35:65:6a:ef:42:52:84:b0:
         70:4f:4f:c2:9e:62:8a:71:fd:14:7b:c3:e4:c5:2f:cb:db:ab:
         f4:ea:cf:4c:4d:4f:d7:05:b3:c8:c0:90:e6:a5:d7:6e:61:8d:
         88:01:0a:c2:c4:08:6d:34:76:bf:de:e4:71:a8:40:0b:89:b9:
         af:b9:4a:07:87:53:70:ce:a7:72:1f:ed:6a:7b:8b:e3:47:01:
         b2:b7:de:d0:41:7d:75:7c:fa:fb:86:b8:cb:37:71:52:cc:a0:
         1f:e5:00:a5:c7:75:ff:55:c8:40:c5:17:70:e6:19:a3:25:ff:
         fa:2e:aa:c7:81:43:9a:03:2f:e2:a4:a1:6c:ab:6c:fc:35:1f:
         17:24:a2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:11:12 2025 by rpki-client