Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/3130332e3133302e3133362e302f32322d3234203d3e20313333383135.roa
File:                     3130332e3133302e3133362e302f32322d3234203d3e20313333383135.roa (raw, json)
Hash identifier:          gDwS3CZNot9PKNbXfgVaxRg3XKEAojqRRjZmWUnIieM=
Subject key identifier:   0E:0B:4D:88:F4:64:57:2D:99:9D:37:B5:84:FD:FE:59:22:A5:24:E9
Certificate issuer:       /CN=CEA03A07989107F547A2B2ABAA6AD4E70312AD5C
Certificate serial:       0E7CEEED73D74342AD4C0A757E382A4653470AF6
Authority key identifier: CE:A0:3A:07:98:91:07:F5:47:A2:B2:AB:AA:6A:D4:E7:03:12:AD:5C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/3130332e3133302e3133362e302f32322d3234203d3e20313333383135.roa
Signing time:             Mon 02 Jun 2025 01:02:53 +0000
ROA not before:           Mon 02 Jun 2025 00:57:53 +0000
ROA not after:            Mon 01 Jun 2026 01:02:53 +0000
asID:                     133815
IP address blocks:        103.130.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.crl
                          rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 14:20:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:7c:ee:ed:73:d7:43:42:ad:4c:0a:75:7e:38:2a:46:53:47:0a:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEA03A07989107F547A2B2ABAA6AD4E70312AD5C
        Validity
            Not Before: Jun  2 00:57:53 2025 GMT
            Not After : Jun  1 01:02:53 2026 GMT
        Subject: CN=0E0B4D88F464572D999D37B584FDFE5922A524E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:39:52:e8:9f:8c:3a:cb:70:1e:b3:ae:0d:4e:
                    55:f8:f4:a2:82:a1:3d:4d:63:01:d1:04:58:fa:1e:
                    09:5b:0c:dc:cb:f2:18:63:1f:ca:b1:87:3d:1d:bd:
                    47:06:27:fc:9e:8e:21:90:ca:43:01:b9:c8:92:3f:
                    4a:b0:a0:55:ce:06:17:44:48:b6:9b:29:f6:dc:2a:
                    2c:c7:7a:7e:7e:a6:57:be:6c:ea:e9:df:a6:57:78:
                    e7:fb:9d:98:dd:a6:27:f6:10:55:19:70:7b:1f:34:
                    0e:83:fa:ee:26:0b:d9:61:e4:65:04:57:a5:10:c6:
                    c3:d7:7a:25:e1:02:14:07:6d:8a:52:a9:dc:38:88:
                    3e:8f:48:d4:d8:7c:9e:86:dc:a1:94:f1:d4:2e:21:
                    e3:ff:2e:85:6b:5f:70:24:c6:54:38:9a:67:f6:98:
                    4c:fb:73:da:60:91:29:33:64:92:f3:cb:82:41:fb:
                    dd:c5:63:e6:82:20:71:fd:e5:20:ea:69:08:d2:c8:
                    ce:cd:37:9c:b9:d1:4d:33:32:03:36:43:d0:4e:0f:
                    f0:78:d3:4d:f2:a4:f8:fb:c3:e4:ec:18:0f:de:1f:
                    7c:04:b4:6b:2f:6e:6e:f7:c0:88:a8:62:d6:6f:a9:
                    3b:ac:cd:5b:5f:1f:96:0a:7e:86:ba:bc:40:24:ce:
                    41:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:0B:4D:88:F4:64:57:2D:99:9D:37:B5:84:FD:FE:59:22:A5:24:E9
            X509v3 Authority Key Identifier:
                keyid:CE:A0:3A:07:98:91:07:F5:47:A2:B2:AB:AA:6A:D4:E7:03:12:AD:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/3130332e3133302e3133362e302f32322d3234203d3e20313333383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:82:2d:3d:25:ac:9f:e2:f6:93:24:d7:33:42:c0:de:47:80:
         71:1f:32:68:67:82:ae:03:f1:81:07:ba:73:f4:ce:8f:ed:cb:
         42:36:69:1b:99:5c:5d:c8:13:08:46:08:8b:72:ac:54:0d:b5:
         d3:47:35:c2:42:a4:cb:01:74:59:25:14:55:3a:72:91:15:b9:
         cb:da:82:d9:27:f0:32:8f:55:79:f0:85:15:d9:d3:3c:cf:dc:
         3b:25:76:1c:07:ac:9a:04:c0:29:9f:0a:f4:8c:f6:25:fb:7a:
         1d:1c:40:28:60:ce:b4:dc:e1:fb:bb:48:b0:d3:7c:c8:ee:f7:
         53:35:a0:e0:ba:28:15:4c:ea:7d:80:9b:40:a0:0c:14:4e:68:
         7d:55:f3:7f:8f:8d:c2:d0:33:11:08:3e:6d:7b:86:14:40:fa:
         39:75:9f:d5:73:26:ad:77:ac:5a:33:71:74:84:8c:1c:f4:80:
         b6:41:23:f2:09:31:60:ce:25:dc:f7:87:2a:96:c6:db:9c:c4:
         6d:71:24:69:e1:ea:fa:87:fe:df:23:d6:0a:92:0a:af:90:64:
         20:c1:38:b9:a0:88:e3:c6:f2:91:97:36:ba:ef:c0:08:2b:07:
         55:69:78:13:2f:33:26:25:93:51:8a:22:03:18:02:a8:b0:85:
         2d:8e:28:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:12:41 2025 by rpki-client