Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136342e302f32332d3233203d3e203538333639.roa
File:                     3130332e342e3136342e302f32332d3233203d3e203538333639.roa (raw, json)
Hash identifier:          I0OrdP4L22T7IwYy+CuV1YxKVESVWGq7bXwcs1QHiFQ=
Subject key identifier:   D9:83:BC:D8:D8:74:35:2B:CC:D9:65:33:C5:4F:C9:16:3E:74:CD:87
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       1FF9E4A07BE66C70F846E6D23C21E1B8905A978D
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136342e302f32332d3233203d3e203538333639.roa
Signing time:             Mon 02 Jun 2025 02:03:41 +0000
ROA not before:           Mon 02 Jun 2025 01:58:41 +0000
ROA not after:            Mon 01 Jun 2026 02:03:41 +0000
asID:                     58369
IP address blocks:        103.4.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 13:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:f9:e4:a0:7b:e6:6c:70:f8:46:e6:d2:3c:21:e1:b8:90:5a:97:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jun  2 01:58:41 2025 GMT
            Not After : Jun  1 02:03:41 2026 GMT
        Subject: CN=D983BCD8D874352BCCD96533C54FC9163E74CD87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:28:7e:f0:7a:d6:f1:1c:8f:ba:a3:a3:9d:c2:
                    73:f4:b2:a2:7b:17:61:36:86:ae:4a:6e:0e:a2:14:
                    d9:d1:9b:b4:8e:91:0d:11:c9:38:e6:66:73:6d:40:
                    dd:d1:b0:79:77:80:44:04:ae:7f:8c:72:a4:4b:3b:
                    ae:e3:8f:61:f0:5f:e5:bf:ef:54:c0:e3:a0:a8:c3:
                    9c:72:e0:1e:c6:30:ce:c5:31:16:f6:96:f5:f9:83:
                    5c:35:25:b0:d1:65:44:0b:59:34:70:2e:42:0c:6f:
                    18:4b:8f:1f:51:71:1f:33:de:b1:13:ee:03:a2:9c:
                    21:03:c4:c5:5e:4b:74:68:88:5b:c1:0b:50:72:50:
                    eb:bb:1a:25:0a:3f:76:b9:2d:0a:c6:83:2d:fe:70:
                    dc:ed:b1:80:44:2f:ca:61:51:d5:b6:ec:39:86:3d:
                    34:33:95:85:94:03:ea:2a:46:6f:1c:bc:2d:4b:ae:
                    50:76:c1:1f:6e:b7:74:af:6d:57:39:87:56:0b:26:
                    f9:e8:72:a9:d7:d3:1e:09:dc:2b:c7:10:38:e9:cb:
                    a9:69:b9:d3:16:8a:77:17:9d:27:b0:f7:d7:a9:e7:
                    72:dc:fe:89:e4:69:04:23:35:cc:b8:a3:f4:a7:7f:
                    92:3a:4e:f2:83:ef:4e:22:ac:fc:50:b1:66:d0:6d:
                    1a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:83:BC:D8:D8:74:35:2B:CC:D9:65:33:C5:4F:C9:16:3E:74:CD:87
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136342e302f32332d3233203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:27:6e:c7:05:d2:f0:ca:81:f4:f6:c3:dc:eb:1f:3d:66:96:
         2b:ce:1d:a9:3f:ff:ee:bc:80:c9:78:42:ea:ce:d6:dc:7f:12:
         31:29:89:b2:d6:49:62:69:44:f2:bf:cd:c9:d4:18:db:29:d1:
         c8:7a:46:87:26:bb:94:9e:a0:2b:02:a8:85:d3:0f:16:b1:7f:
         74:2f:2b:b6:89:89:2c:1e:42:4f:a5:0b:27:e3:88:60:45:81:
         bd:52:17:6e:88:05:b6:3f:8f:38:43:a2:f1:6c:54:a6:36:d9:
         72:25:d5:d3:05:45:06:ab:1c:30:12:a9:41:77:eb:fb:91:29:
         a3:1a:08:c7:1b:bc:35:da:e8:44:11:ff:a1:73:f5:da:17:cf:
         ce:04:ce:f6:57:b3:94:00:16:66:4f:9a:f4:ad:38:89:c5:85:
         75:fb:db:00:f9:b8:55:2f:89:93:e6:77:d2:18:21:a1:ab:ed:
         5d:77:61:fd:4f:11:8f:e9:94:e9:1a:89:5b:a5:a2:07:6d:ef:
         d7:38:8f:5b:9c:02:c7:84:f7:a6:a1:da:0b:eb:67:d9:8e:fe:
         ec:1a:42:b2:7a:b1:98:17:f1:3f:fe:6d:02:6a:e6:08:11:73:
         e0:a0:4b:14:4a:ec:8d:bc:8d:b6:50:20:e7:de:b6:17:96:a4:
         e8:ed:de:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:11:26 2025 by rpki-client