Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/3130332e31352e33362e302f32342d3234203d3e203538343939.roa
File:                     3130332e31352e33362e302f32342d3234203d3e203538343939.roa (raw, json)
Hash identifier:          Ib6AjQYHIsLwQhK435dkfw2SbJ0i4m47zXiCaGZl8vU=
Subject key identifier:   97:1B:D6:88:E0:21:DC:7A:09:BD:B3:B8:64:C7:84:9F:25:F4:4E:85
Certificate issuer:       /CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5
Certificate serial:       25A7C63B5AD82F7F4D3FE39325EBCC617BF9EDFF
Authority key identifier: F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/3130332e31352e33362e302f32342d3234203d3e203538343939.roa
Signing time:             Mon 02 Jun 2025 01:02:47 +0000
ROA not before:           Mon 02 Jun 2025 00:57:47 +0000
ROA not after:            Mon 01 Jun 2026 01:02:47 +0000
asID:                     58499
IP address blocks:        103.15.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl
                          rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 19:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:a7:c6:3b:5a:d8:2f:7f:4d:3f:e3:93:25:eb:cc:61:7b:f9:ed:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5
        Validity
            Not Before: Jun  2 00:57:47 2025 GMT
            Not After : Jun  1 01:02:47 2026 GMT
        Subject: CN=971BD688E021DC7A09BDB3B864C7849F25F44E85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cc:3f:ef:5e:2d:d4:55:13:1a:97:4b:a9:be:
                    e7:62:53:9d:f4:b9:b8:11:8e:9c:cc:7b:54:6d:92:
                    33:4d:a8:53:0a:55:c7:7e:8a:c9:e1:10:82:03:f3:
                    66:7b:8f:b6:31:96:4a:42:b2:44:59:41:10:96:79:
                    0c:00:1b:a7:d8:f4:08:57:b2:9f:d1:85:c2:73:b8:
                    e6:60:cd:df:54:c6:c2:88:a7:44:3d:a1:18:00:d7:
                    8b:f2:23:08:ca:09:60:02:f9:c3:b8:03:f5:e4:36:
                    00:e8:26:a5:cb:0e:a7:36:a2:0d:65:d6:30:b8:1d:
                    bd:cb:58:48:03:72:ca:0e:52:4e:ea:76:be:f4:fa:
                    4b:07:aa:fa:e2:6e:3c:5b:b0:c4:ee:52:46:e2:9f:
                    ac:1e:be:f8:a9:20:a2:19:50:a9:83:de:35:4b:d1:
                    e3:34:a1:10:e8:cb:77:1b:0a:eb:38:b0:d5:96:7d:
                    0b:b5:d3:f2:7a:78:4a:4d:3a:12:7a:84:7a:cd:37:
                    4a:e4:31:b6:56:75:5a:39:f4:3e:c1:32:c3:06:77:
                    c7:6a:bb:3a:20:5a:04:d0:5a:5a:01:0c:8d:37:3d:
                    93:40:46:d4:1e:2a:66:42:76:3c:05:95:22:1b:08:
                    34:fa:ca:5d:28:cd:65:33:f2:b9:ea:dc:1c:5c:9b:
                    62:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:1B:D6:88:E0:21:DC:7A:09:BD:B3:B8:64:C7:84:9F:25:F4:4E:85
            X509v3 Authority Key Identifier:
                keyid:F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/3130332e31352e33362e302f32342d3234203d3e203538343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:de:90:39:9e:9b:d4:70:98:fb:52:74:b8:d5:40:9e:ac:6b:
         2e:a8:30:16:c5:ba:ee:4b:95:59:12:3b:62:bf:0d:b8:f5:5d:
         9a:16:4e:2c:37:28:e7:88:5c:cc:c8:8a:be:8f:c3:83:cf:4f:
         0e:89:3a:2c:bd:1d:69:b2:c7:fb:9f:40:73:ac:13:c0:47:fb:
         9f:76:69:f9:bc:1f:86:96:ee:90:d0:4c:1f:4f:19:1b:68:e8:
         14:5c:60:40:5b:76:3d:0a:8c:2e:3d:d7:dc:70:32:e7:56:25:
         2a:5e:e9:56:a6:ac:78:66:b5:2e:04:3f:43:3f:d3:93:c2:91:
         b5:dc:8c:3b:73:c8:cc:b8:ed:af:e4:fd:bb:54:f1:a1:da:db:
         f2:de:52:c3:01:61:22:27:b2:54:b9:79:b2:97:07:21:51:8b:
         9c:ae:6b:f9:f9:3d:bc:ab:54:2b:20:74:bb:88:dd:36:22:51:
         91:56:a7:40:c4:ce:c5:82:5d:a2:c1:f0:07:fe:da:d3:6d:0d:
         f3:26:d3:72:ef:b2:c3:6a:dd:cd:a9:a9:d0:fc:38:bc:4f:58:
         fb:df:57:76:ec:09:51:19:75:0c:47:51:34:2b:b0:99:b7:6a:
         2d:37:f6:90:56:5e:3f:8f:c7:cb:d0:a4:6b:c9:49:4e:3e:f3:
         04:53:ff:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:55:39 2025 by rpki-client