Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/3130332e31352e33362e302f32332d3233203d3e203538343939.roa
File:                     3130332e31352e33362e302f32332d3233203d3e203538343939.roa (raw, json)
Hash identifier:          tsFXcVi2vQ7ookPqbCA3Q2goRlJZ3P3EWx7MteHU17w=
Subject key identifier:   53:2F:DF:A1:CC:D3:8C:72:70:C8:FB:D0:3A:4C:7E:FC:9B:E5:C9:6C
Certificate issuer:       /CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5
Certificate serial:       16DEAABCC3AC7B8BA791CA5BC30581906A1A3383
Authority key identifier: F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/3130332e31352e33362e302f32332d3233203d3e203538343939.roa
Signing time:             Mon 02 Jun 2025 01:02:47 +0000
ROA not before:           Mon 02 Jun 2025 00:57:47 +0000
ROA not after:            Mon 01 Jun 2026 01:02:47 +0000
asID:                     58499
IP address blocks:        103.15.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl
                          rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 19:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:de:aa:bc:c3:ac:7b:8b:a7:91:ca:5b:c3:05:81:90:6a:1a:33:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5
        Validity
            Not Before: Jun  2 00:57:47 2025 GMT
            Not After : Jun  1 01:02:47 2026 GMT
        Subject: CN=532FDFA1CCD38C7270C8FBD03A4C7EFC9BE5C96C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e5:f7:f9:74:58:a9:eb:a5:ab:5d:7f:1a:6b:
                    5f:27:ff:e4:29:6a:10:32:49:8d:7c:d9:2a:90:65:
                    b4:30:21:08:5e:69:f5:fb:3d:13:5b:68:09:df:62:
                    5d:5a:89:9b:bf:9a:66:9a:de:65:4e:13:16:4c:21:
                    74:1b:1f:bd:ee:d6:12:28:f3:7f:a7:10:bd:1d:4e:
                    2b:6b:ed:f7:89:bc:1d:60:b6:2f:7a:9d:60:26:95:
                    e0:61:8b:0f:39:78:5e:15:19:bf:40:46:f5:00:03:
                    4e:32:81:96:5b:f4:b4:fd:9a:bb:f4:56:b2:6d:02:
                    57:7c:7d:17:9f:32:57:2e:b3:29:c1:8d:35:9b:e7:
                    9d:d3:48:42:97:0e:91:7d:a5:10:ec:b6:75:ca:66:
                    bf:1f:27:58:b8:76:1e:01:22:4a:ec:6d:ca:b5:7c:
                    f3:a9:a1:fb:66:f6:ff:ea:ec:6e:7c:65:6e:b1:bc:
                    e3:54:5f:f6:0e:23:e4:c7:05:1e:97:76:40:9c:62:
                    3d:d5:a5:81:bd:c4:e5:e8:29:d1:44:79:58:49:85:
                    d1:f7:f3:47:5f:c9:7f:5d:f3:51:2d:30:ca:d8:1b:
                    20:1f:c6:5b:85:7c:bb:49:f5:f6:a6:8c:24:19:94:
                    e6:46:45:ef:8f:f0:fa:60:1e:70:f8:ae:c5:53:7e:
                    48:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:2F:DF:A1:CC:D3:8C:72:70:C8:FB:D0:3A:4C:7E:FC:9B:E5:C9:6C
            X509v3 Authority Key Identifier:
                keyid:F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/3130332e31352e33362e302f32332d3233203d3e203538343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:f3:b6:97:7d:b2:08:3e:3d:ff:e3:b2:04:cf:80:71:b1:da:
         b9:ec:57:5b:3f:c4:f0:d1:d3:49:af:ce:de:75:a0:c3:25:a2:
         be:59:71:d4:75:7f:ee:3f:9b:0d:20:cb:7a:98:ca:18:0b:56:
         56:4a:66:97:71:dc:0a:b8:17:b7:d7:ec:09:1f:ea:12:0e:ea:
         1e:18:16:9e:57:2a:58:59:a9:85:b7:fd:8e:fc:4f:c2:79:31:
         4e:70:b9:65:83:85:b5:43:35:d3:fa:cc:2c:75:4b:8f:2a:dd:
         ed:78:ac:85:a8:b0:8c:af:b4:34:8d:00:58:30:c8:b4:00:3c:
         99:ff:66:a0:c7:3e:0e:f4:e3:1d:04:ef:37:e3:fb:b7:bf:cb:
         87:d6:5b:53:bf:64:90:31:a4:6c:df:6d:97:a0:ae:d1:93:18:
         a6:38:74:89:c7:8b:5b:97:3e:e9:91:69:00:73:c4:34:01:d8:
         3f:f2:f7:ce:1f:7d:c4:2e:eb:c7:d6:59:93:05:18:dc:5c:bf:
         23:33:93:dd:34:da:a9:13:9a:ad:5b:69:2a:e2:b1:07:66:b6:
         73:63:fc:59:26:ae:a8:fb:fb:52:c4:47:b2:0d:88:c7:53:33:
         c6:cf:d8:85:94:18:ef:65:06:40:22:73:0e:b7:e2:29:1e:92:
         65:80:7c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:44:12 2025 by rpki-client