Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/3130332e3137392e3231382e302f32332d3233203d3e20313431353936.roa
File:                     3130332e3137392e3231382e302f32332d3233203d3e20313431353936.roa (raw, json)
Hash identifier:          UDTJVQMfh18042dfeJjUO+1EVnoX+eeQWO16oZtQKXE=
Subject key identifier:   F7:38:DF:E5:55:CB:16:F7:3B:33:10:D9:EB:28:52:33:03:D4:6E:D3
Certificate issuer:       /CN=139934661CE07BEBBFA824F7225502B15AE8B653
Certificate serial:       4CFD020D2A944A3F1D0228AFC573EB014BB1BF09
Authority key identifier: 13:99:34:66:1C:E0:7B:EB:BF:A8:24:F7:22:55:02:B1:5A:E8:B6:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/139934661CE07BEBBFA824F7225502B15AE8B653.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/3130332e3137392e3231382e302f32332d3233203d3e20313431353936.roa
Signing time:             Tue 03 Jun 2025 11:02:31 +0000
ROA not before:           Tue 03 Jun 2025 10:57:31 +0000
ROA not after:            Tue 02 Jun 2026 11:02:31 +0000
asID:                     141596
IP address blocks:        103.179.218.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.crl
                          rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/139934661CE07BEBBFA824F7225502B15AE8B653.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 21:16:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:fd:02:0d:2a:94:4a:3f:1d:02:28:af:c5:73:eb:01:4b:b1:bf:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=139934661CE07BEBBFA824F7225502B15AE8B653
        Validity
            Not Before: Jun  3 10:57:31 2025 GMT
            Not After : Jun  2 11:02:31 2026 GMT
        Subject: CN=F738DFE555CB16F73B3310D9EB28523303D46ED3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:4e:f3:eb:6b:ca:5b:81:c2:5f:2e:27:a6:b5:
                    64:d4:e8:d0:3c:7b:e9:6c:86:93:24:74:bc:32:73:
                    68:bd:aa:23:5a:b5:4b:4f:f5:1d:d5:75:4d:17:a3:
                    07:17:62:bb:d4:c0:59:92:6d:17:ee:82:9a:63:53:
                    47:ae:f4:44:14:a2:b8:a1:82:7d:89:24:f8:24:8f:
                    a6:cb:c5:18:93:47:83:1c:85:6e:07:76:0d:8a:86:
                    f7:d9:fe:ce:1a:09:b0:c1:04:aa:b1:65:75:a4:8f:
                    08:ad:3b:3c:85:d4:fa:83:99:18:a2:8d:d1:ca:3a:
                    c1:c9:77:5f:10:2a:cd:e1:47:d1:e5:75:31:13:10:
                    18:82:01:8a:03:3e:38:c6:d2:2a:63:fc:1e:26:e8:
                    a5:ca:84:92:68:eb:77:a6:c9:07:fb:6c:e3:aa:23:
                    70:d7:ee:7b:68:67:3d:17:3f:9e:5e:c0:3a:b4:48:
                    53:0f:72:1d:f1:39:c7:6b:70:a1:0b:49:09:94:1f:
                    e6:9d:50:82:08:70:40:58:7c:ee:31:5c:e3:fd:4f:
                    31:87:aa:6a:ea:0f:e4:1b:81:37:5d:f6:c9:ad:e9:
                    cd:57:02:ec:3b:64:bb:73:07:24:85:50:7a:5e:03:
                    4a:4c:1c:8d:65:e1:cb:3c:b4:a7:56:7d:8f:8e:fb:
                    d4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:38:DF:E5:55:CB:16:F7:3B:33:10:D9:EB:28:52:33:03:D4:6E:D3
            X509v3 Authority Key Identifier:
                keyid:13:99:34:66:1C:E0:7B:EB:BF:A8:24:F7:22:55:02:B1:5A:E8:B6:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/139934661CE07BEBBFA824F7225502B15AE8B653.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/3130332e3137392e3231382e302f32332d3233203d3e20313431353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:8c:64:8d:da:89:4e:35:7e:32:04:20:f6:e8:42:63:19:04:
         de:e5:1d:d6:eb:0f:f2:18:f8:ae:cf:56:03:b3:2f:5c:01:06:
         60:55:16:56:20:25:a4:70:05:5c:2a:f8:68:04:db:76:7e:ec:
         9c:7b:9a:3f:be:7d:12:98:fa:e2:68:2a:b3:72:f7:fd:93:cf:
         c2:83:6b:14:77:ab:9e:ef:b0:91:da:65:42:66:7f:48:62:6f:
         61:dc:8a:3d:94:24:20:71:49:83:dd:6d:0a:91:49:b1:50:21:
         15:cd:32:6e:74:de:8a:c8:9f:dd:d8:74:75:79:88:5d:ae:32:
         de:e2:31:e0:e7:80:6c:e3:4e:3c:ae:99:53:f1:ae:8a:0a:a2:
         d3:3c:30:e7:f8:d7:d1:e0:3d:5f:c2:eb:10:a0:ab:b8:e5:dd:
         48:05:6e:45:8b:c4:37:4f:85:3b:1a:df:f1:6e:c6:1c:b4:2b:
         70:28:57:87:48:14:87:c9:b2:04:bd:9d:d9:d9:bd:a3:0b:c9:
         f4:1c:8a:e0:6a:55:fa:41:d4:9c:98:88:db:c4:48:d9:ed:b5:
         d6:45:9a:67:7f:73:10:23:39:af:31:7d:5f:fb:ab:0f:fe:9a:
         cb:b0:2f:32:52:d6:3b:f5:a7:78:8b:b9:05:2c:3d:63:00:ac:
         f8:df:56:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:46:35 2025 by rpki-client