Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136342e302f32342d3234203d3e203538333639.roa
File:                     3130332e342e3136342e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          HRe9vgNL7Zh+mywpMP6gh5RXaZwyeKj1AVvDUKvQuuQ=
Subject key identifier:   F4:98:56:8B:E3:FE:AC:F1:D8:F1:8E:5A:78:7A:59:6E:48:D5:0A:C7
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       3F9A97670C7F106C4378F446E3A3D7B83E1864D0
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136342e302f32342d3234203d3e203538333639.roa
Signing time:             Mon 02 Jun 2025 02:03:35 +0000
ROA not before:           Mon 02 Jun 2025 01:58:35 +0000
ROA not after:            Mon 01 Jun 2026 02:03:35 +0000
asID:                     58369
IP address blocks:        103.4.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 13:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:9a:97:67:0c:7f:10:6c:43:78:f4:46:e3:a3:d7:b8:3e:18:64:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jun  2 01:58:35 2025 GMT
            Not After : Jun  1 02:03:35 2026 GMT
        Subject: CN=F498568BE3FEACF1D8F18E5A787A596E48D50AC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a4:cd:8c:7a:3a:0e:16:32:8a:37:b6:e3:c9:
                    da:1a:bd:f6:05:dc:ac:20:f6:09:7e:54:07:9e:89:
                    a2:43:79:c9:93:f1:07:f4:e4:0c:76:33:bf:86:29:
                    ae:3b:c6:9b:88:3e:4c:f3:a8:91:74:e0:31:82:27:
                    e1:b8:81:0e:e0:bb:e5:4d:3c:ef:89:a3:b4:98:c5:
                    e3:42:e5:32:34:d5:cd:04:c0:e6:53:68:b7:c4:d2:
                    09:11:e3:80:14:97:47:1d:58:de:b3:cb:8d:9f:d8:
                    c8:40:3c:06:fa:93:ab:10:38:61:91:35:6d:b4:6d:
                    d0:5c:a4:ec:5e:d7:f5:b5:10:cf:0c:72:dc:ea:ca:
                    f4:6e:1a:a0:20:2a:70:7e:e1:12:27:2d:8d:1b:71:
                    06:c2:13:bc:a3:cd:2c:77:ed:5f:a1:1f:d8:4d:ae:
                    50:22:4e:bb:7f:bb:c8:53:02:2b:e1:82:0d:ea:eb:
                    da:51:a5:8d:59:9d:53:36:97:7c:42:50:42:38:fc:
                    30:c6:bd:3e:17:13:66:ba:67:bf:9d:b4:fa:be:c0:
                    51:81:1d:7e:53:d2:e3:8e:ef:e9:93:a8:74:f5:ef:
                    a6:f4:05:a4:2a:60:73:6b:9d:85:d7:f4:53:bf:c1:
                    2a:2b:07:19:80:ee:c1:04:09:18:ad:ab:6c:4c:73:
                    2e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:98:56:8B:E3:FE:AC:F1:D8:F1:8E:5A:78:7A:59:6E:48:D5:0A:C7
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136342e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:45:f3:f7:1e:69:05:d7:26:65:40:35:dc:fd:f7:8c:fb:15:
         5b:9c:a2:2e:b1:43:6e:bd:89:69:e0:68:2b:6a:3d:6b:a4:2a:
         63:a3:0f:e9:c7:71:a8:66:22:02:f1:9a:77:d2:64:f0:a7:b5:
         66:aa:cc:ba:46:b9:13:36:7f:1b:db:22:40:0a:b2:93:04:e2:
         10:38:49:d7:39:49:c3:82:6e:19:10:3c:1b:e8:58:89:76:57:
         3f:1c:a2:05:53:89:a2:e1:cf:7d:f3:0e:3f:ee:e0:2a:8c:d9:
         f0:86:ea:3b:a5:90:69:8e:7e:99:54:2e:8f:54:32:e8:a4:02:
         c5:1a:53:2b:c0:ee:cd:b2:2b:cb:9a:e4:43:95:fd:2f:04:29:
         e1:95:5a:93:0a:37:6f:38:97:3d:05:00:cd:c3:86:e1:68:24:
         7e:c2:51:13:db:82:7c:b9:d4:8a:9b:0c:67:81:5b:94:a2:da:
         60:66:0e:96:66:94:bd:dc:79:b5:c7:a9:05:ee:8c:3d:11:4a:
         4f:d5:b3:a0:b8:d4:ab:15:d8:95:31:38:7b:08:ee:50:4f:d4:
         b4:a4:e2:9d:2c:59:92:a9:1d:f2:a7:08:5d:7f:8a:42:49:42:
         61:ca:c8:7a:c9:56:56:2a:e1:41:57:ce:e2:4a:bd:fc:73:c7:
         8b:e1:a1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:11:58 2025 by rpki-client