Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3130332e31302e36332e302f32342d3234203d3e203338373538.roa
File:                     3130332e31302e36332e302f32342d3234203d3e203338373538.roa (raw, json)
Hash identifier:          lTXl5JSGNXk2H6QC/ExXfaBTFR2N2ANdTqoiPB9R7qw=
Subject key identifier:   1B:9D:B2:EC:9A:A7:01:D7:8D:84:96:50:32:46:1C:30:BF:82:72:E1
Certificate issuer:       /CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4
Certificate serial:       08AA662FEB80A3D98332EAB62A37F967506E088D
Authority key identifier: 9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3130332e31302e36332e302f32342d3234203d3e203338373538.roa
Signing time:             Mon 02 Jun 2025 01:00:01 +0000
ROA not before:           Mon 02 Jun 2025 00:55:01 +0000
ROA not after:            Mon 01 Jun 2026 01:00:01 +0000
asID:                     38758
IP address blocks:        103.10.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl
                          rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 09:17:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:aa:66:2f:eb:80:a3:d9:83:32:ea:b6:2a:37:f9:67:50:6e:08:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4
        Validity
            Not Before: Jun  2 00:55:01 2025 GMT
            Not After : Jun  1 01:00:01 2026 GMT
        Subject: CN=1B9DB2EC9AA701D78D84965032461C30BF8272E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3c:6d:49:09:92:55:ad:ca:5d:f9:47:75:1f:
                    e2:f6:5b:be:f0:66:6b:3c:49:43:5a:ca:d0:c2:e7:
                    7c:65:4a:6a:d6:f9:ee:eb:39:e0:4b:19:df:cd:f1:
                    ee:25:bf:08:4d:21:7b:03:ea:20:61:56:70:3b:36:
                    4f:a5:d5:c5:9d:0e:44:7c:cf:61:62:e2:2b:b7:0f:
                    aa:42:80:26:10:a3:51:4d:d1:39:68:9b:67:d5:2c:
                    30:4b:b6:af:ca:e3:d2:77:ef:51:d8:1b:2b:9c:47:
                    d4:14:70:97:7c:f7:18:1c:69:6e:63:56:b9:cf:c5:
                    79:84:d9:8b:cd:d8:01:3c:b6:bd:0f:dd:70:79:a7:
                    f9:07:04:62:92:d0:78:7d:1b:8b:6c:b0:3a:b1:9d:
                    4d:78:e1:ca:1f:4d:09:35:35:b9:98:a3:0f:a8:ca:
                    bb:ca:6d:14:01:de:d2:77:ed:60:03:59:5f:bf:f9:
                    3c:0c:66:f0:7c:d3:29:18:a9:f0:c5:a8:77:5f:db:
                    b7:bb:c5:a4:5c:4a:b4:1d:0e:76:96:8c:e5:88:21:
                    44:e1:e2:01:43:c5:bb:a2:af:19:69:82:7e:07:a0:
                    5e:88:c1:a5:69:05:b1:3a:3b:18:e3:22:d6:c7:2a:
                    17:6f:ba:a0:d9:59:6c:17:a6:fd:2b:64:7d:51:17:
                    dd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:9D:B2:EC:9A:A7:01:D7:8D:84:96:50:32:46:1C:30:BF:82:72:E1
            X509v3 Authority Key Identifier:
                keyid:9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3130332e31302e36332e302f32342d3234203d3e203338373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:ea:16:58:e5:83:b2:ab:31:e6:74:d1:5d:00:3a:6a:49:57:
         7d:b4:52:f6:67:7b:59:e6:55:97:e3:e7:a2:a4:d0:60:3a:1f:
         f1:25:7b:fe:a6:db:ea:ce:84:c4:9e:1a:7e:7c:6c:d2:a0:ef:
         98:f3:71:36:ba:e4:b9:3f:bf:29:7a:87:5f:f2:52:9e:08:1d:
         5e:df:a3:bd:37:72:a1:71:58:b9:de:b4:5f:62:c2:1c:a5:0e:
         88:f8:9d:61:67:ef:11:92:2f:74:53:1b:d2:58:3b:a5:51:ec:
         f7:d7:cc:f7:2c:7f:7f:b9:39:14:f4:c4:5d:29:38:34:3b:5d:
         b0:53:b5:d3:3f:ec:bc:10:a0:e1:2d:a7:8e:9d:e7:7d:c1:a1:
         48:d0:f6:3b:3b:6a:4b:d3:fe:fb:b8:20:36:25:f0:b6:60:bf:
         07:90:00:68:6f:5e:8f:b9:1b:8b:1d:db:f3:f3:ae:a8:88:aa:
         59:06:2c:65:b0:7b:78:4f:d8:d8:b7:7b:13:f9:52:a1:b9:3f:
         7e:a7:05:e5:d2:48:01:0a:49:43:f0:cb:69:b1:7a:dd:ca:1f:
         3f:2a:72:97:08:e5:81:b6:59:96:47:a8:53:31:98:88:7b:59:
         0a:67:3e:30:8e:2e:61:d6:ee:3f:49:0b:db:b7:c6:3b:8d:67:
         9d:55:a7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:14:17 2025 by rpki-client