Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136372e302f32342d3234203d3e203538333639.roa
File:                     3130332e342e3136372e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          GdrkZhw8jVvbn9eDSCo6MlZOMvtn4k3Wc9Ef4jPwBoU=
Subject key identifier:   F4:EB:29:54:5C:E9:82:B6:24:30:35:83:4D:92:C0:8D:CE:1B:82:2B
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       7CB80EB65474D184577FB28DA667F54B4A212A3E
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136372e302f32342d3234203d3e203538333639.roa
Signing time:             Mon 02 Jun 2025 02:03:40 +0000
ROA not before:           Mon 02 Jun 2025 01:58:40 +0000
ROA not after:            Mon 01 Jun 2026 02:03:40 +0000
asID:                     58369
IP address blocks:        103.4.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 13:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:b8:0e:b6:54:74:d1:84:57:7f:b2:8d:a6:67:f5:4b:4a:21:2a:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jun  2 01:58:40 2025 GMT
            Not After : Jun  1 02:03:40 2026 GMT
        Subject: CN=F4EB29545CE982B6243035834D92C08DCE1B822B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d3:fc:8f:5d:f1:4e:1c:cf:ec:65:91:70:5c:
                    0c:f0:1a:aa:e3:a2:15:c0:a9:4a:d6:96:a5:4a:6d:
                    77:66:6b:ce:4a:e9:3c:b0:3c:1f:ea:91:74:98:5e:
                    32:8e:44:62:a1:ac:c7:7b:14:5c:af:07:39:49:33:
                    00:53:1c:c1:28:af:34:1e:97:3f:a2:c1:c8:69:f7:
                    e6:bd:33:0a:6c:55:8d:fa:77:ae:b4:1b:40:f2:3e:
                    43:b3:3a:be:f7:ba:e0:63:75:5c:4c:8e:7c:04:5c:
                    ca:37:98:dc:70:96:b7:c8:ea:05:7c:fb:08:71:1c:
                    2a:61:d7:43:e3:19:2d:34:f1:e4:e4:e1:34:c4:fd:
                    16:4e:5e:cd:58:f0:80:e0:f8:60:6e:ee:bf:c0:06:
                    4f:a8:0b:71:86:9a:90:93:49:80:2f:fa:92:01:82:
                    1b:be:63:5f:1d:58:ea:28:a3:c8:bb:47:35:e0:ab:
                    53:09:6a:b0:d5:ea:fe:71:ae:00:8b:40:26:7d:d6:
                    65:b1:eb:02:b9:32:3e:23:dc:55:7e:01:87:d0:53:
                    77:8f:15:95:29:1c:b1:ad:79:f2:5a:77:e4:e3:61:
                    a3:eb:55:b6:53:c7:07:5d:b1:7a:66:00:36:58:f4:
                    0a:18:00:35:c6:22:11:3a:4f:68:ce:32:9f:59:b0:
                    6a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:EB:29:54:5C:E9:82:B6:24:30:35:83:4D:92:C0:8D:CE:1B:82:2B
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136372e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:73:08:a7:21:4a:1b:1e:ac:3e:9a:1b:5e:08:18:d2:73:c2:
         5b:72:3d:d3:bf:15:a7:ab:7d:46:fd:56:a4:72:5e:ef:31:73:
         eb:6a:fe:63:f2:df:9f:6f:dd:81:da:1d:45:a2:10:9c:9f:1c:
         fb:ba:68:bc:d8:46:2c:c7:b1:5c:c5:20:4d:f4:12:7d:2b:75:
         ab:35:5c:11:6d:b6:0b:ff:71:99:96:79:c1:eb:50:da:d2:6f:
         d8:dd:5a:bb:56:89:56:f6:12:84:7e:18:f4:08:14:7d:aa:01:
         37:cc:2b:c9:6d:d3:bd:08:03:b4:4d:db:50:fc:88:77:e4:dc:
         72:4f:6f:fc:f9:2a:f4:33:07:57:d0:f2:2e:d8:7d:8d:d3:51:
         5e:eb:b6:5e:41:54:a2:ae:94:44:41:df:e7:ba:d5:b4:0b:19:
         23:9e:7e:9b:5c:8e:0b:4e:c6:e7:c7:58:c3:3e:e1:fd:39:23:
         1d:b3:0f:fc:a9:39:06:00:88:07:be:3b:7a:8a:21:84:e7:8c:
         c7:4c:98:f9:0c:5e:97:3f:30:9f:33:8f:94:6d:91:db:45:a7:
         fe:f4:f7:c3:32:53:d4:5e:e4:2f:16:ed:3c:b0:de:11:77:06:
         72:ea:cc:2f:f9:c8:01:f6:fb:7e:e4:25:07:52:76:52:f6:fc:
         b9:6b:2d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:12:06 2025 by rpki-client