Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/3130332e3134322e31342e302f32332d3234203d3e20313339333735.roa
File:                     3130332e3134322e31342e302f32332d3234203d3e20313339333735.roa (raw, json)
Hash identifier:          Grgdt8iRUAIyZ2qFHWZrH4g5ALyIzB9vEqddBLCgUpI=
Subject key identifier:   55:58:4F:A0:02:66:19:B4:2D:FF:A6:C5:E1:15:AD:AB:60:AD:01:C8
Certificate issuer:       /CN=91E7E283422E38A6A6EDB38593EE074DF8FA29C6
Certificate serial:       2D63DFBED9F5B1CACF2E14579F6ADA1B6B34D4AB
Authority key identifier: 91:E7:E2:83:42:2E:38:A6:A6:ED:B3:85:93:EE:07:4D:F8:FA:29:C6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/3130332e3134322e31342e302f32332d3234203d3e20313339333735.roa
Signing time:             Mon 02 Jun 2025 02:04:08 +0000
ROA not before:           Mon 02 Jun 2025 01:59:08 +0000
ROA not after:            Mon 01 Jun 2026 02:04:08 +0000
asID:                     139375
IP address blocks:        103.142.14.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.crl
                          rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 17:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:63:df:be:d9:f5:b1:ca:cf:2e:14:57:9f:6a:da:1b:6b:34:d4:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91E7E283422E38A6A6EDB38593EE074DF8FA29C6
        Validity
            Not Before: Jun  2 01:59:08 2025 GMT
            Not After : Jun  1 02:04:08 2026 GMT
        Subject: CN=55584FA0026619B42DFFA6C5E115ADAB60AD01C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:55:6a:8c:6d:37:5d:90:66:36:62:b2:da:88:
                    79:92:af:ab:b8:29:b3:f3:57:6e:44:59:36:df:7e:
                    be:12:fe:3b:46:4d:46:72:df:47:ba:18:7f:c4:16:
                    4c:c8:1b:7c:e9:16:3c:fc:31:27:db:24:d2:94:54:
                    bd:29:64:27:ed:4b:bb:87:38:14:b8:da:18:64:b7:
                    0d:e4:aa:1e:f6:f2:9c:f3:67:cd:a8:f0:0f:b2:42:
                    bb:33:b8:fb:09:65:a3:ff:f6:1a:7a:4f:eb:55:9a:
                    df:67:af:46:12:fe:2e:03:ce:cc:08:b6:b8:0f:34:
                    fb:fb:2c:48:7b:f9:98:74:d9:2f:e4:d5:08:76:12:
                    1d:6a:b1:ec:81:5b:93:ab:15:d3:6e:48:b8:7a:c8:
                    dd:d4:30:8b:f0:13:2a:8a:d7:5d:04:79:22:ca:0e:
                    c0:c2:af:30:29:65:8e:ea:e1:1e:43:6b:2f:a5:c7:
                    d9:82:9b:79:59:74:fa:56:e9:f7:4f:8c:d8:e2:d9:
                    f2:27:d5:46:54:51:aa:2a:36:1a:44:2f:71:68:3d:
                    d2:a8:a6:19:60:ec:35:75:80:0d:cb:49:a9:32:92:
                    a0:d8:b8:a5:b4:8a:ef:99:e8:4c:5d:ad:ee:27:89:
                    3f:1c:be:70:23:03:68:ad:47:20:5e:1c:e4:da:7b:
                    b7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:58:4F:A0:02:66:19:B4:2D:FF:A6:C5:E1:15:AD:AB:60:AD:01:C8
            X509v3 Authority Key Identifier:
                keyid:91:E7:E2:83:42:2E:38:A6:A6:ED:B3:85:93:EE:07:4D:F8:FA:29:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/3130332e3134322e31342e302f32332d3234203d3e20313339333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:d8:a4:da:ed:e6:40:f6:79:58:81:7b:b5:ff:64:0c:7f:bb:
         db:56:a1:26:34:83:9f:9c:75:72:48:bc:45:4e:33:77:d4:62:
         0d:f1:3d:c2:fe:9f:c4:5c:de:34:bf:d8:13:15:ac:7e:86:36:
         87:b1:8c:70:6e:8a:b3:8f:84:bc:0a:56:48:9f:b8:c3:b3:86:
         62:91:9c:8e:e6:71:61:ab:d5:74:7b:42:4e:05:26:12:32:5f:
         fe:4d:81:f8:2b:19:72:ac:4d:bc:94:31:0e:a9:11:79:c5:ec:
         01:c9:cf:07:5a:50:f5:b1:40:7f:f8:f1:9d:5e:a7:6b:7e:cd:
         14:b1:25:40:26:c0:f9:17:de:d4:7f:59:7c:8c:a7:8e:bc:43:
         0f:73:c9:74:f7:20:f0:6b:1b:28:22:5e:c2:f2:b9:bf:9f:15:
         e8:45:99:5c:9a:4d:fd:a6:85:af:f7:bf:d4:16:a1:d9:6e:ec:
         2e:1e:2f:08:a8:01:a5:36:9a:c4:e1:a7:1d:5a:1f:68:b0:6f:
         97:df:48:74:45:60:1d:7e:9a:2f:4f:76:9b:2e:a3:67:64:18:
         64:e4:98:24:93:80:0b:5b:cd:67:2f:ec:83:d5:0e:30:be:59:
         a7:4c:4e:e3:ed:95:08:67:97:99:fa:e2:78:d3:10:47:f2:9d:
         84:ba:0c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:01:33 2025 by rpki-client