Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/3130332e31392e35362e302f32342d3234203d3e20313332363337.roa
File:                     3130332e31392e35362e302f32342d3234203d3e20313332363337.roa (raw, json)
Hash identifier:          1GyJK6Rqd4FApqF94uFU3YdEq/5dWlAXo/swD/OMmMQ=
Subject key identifier:   AD:80:88:28:43:28:6F:A6:71:91:21:1B:20:C8:16:CF:B1:54:A0:A2
Certificate issuer:       /CN=7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD
Certificate serial:       391AFC9BC4F3DE334E240F6A4A0F9851C990FAD5
Authority key identifier: 7E:FA:64:C1:15:73:C2:92:E1:92:C2:CD:EA:C4:D5:F8:B8:C2:1D:BD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/3130332e31392e35362e302f32342d3234203d3e20313332363337.roa
Signing time:             Mon 02 Jun 2025 02:05:02 +0000
ROA not before:           Mon 02 Jun 2025 02:00:02 +0000
ROA not after:            Mon 01 Jun 2026 02:05:02 +0000
asID:                     132637
IP address blocks:        103.19.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl
                          rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 19:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:1a:fc:9b:c4:f3:de:33:4e:24:0f:6a:4a:0f:98:51:c9:90:fa:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD
        Validity
            Not Before: Jun  2 02:00:02 2025 GMT
            Not After : Jun  1 02:05:02 2026 GMT
        Subject: CN=AD80882843286FA67191211B20C816CFB154A0A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3b:40:76:2e:42:0a:fa:85:b2:cc:98:04:74:
                    a7:28:35:15:cc:df:48:f0:d6:b3:bf:d2:4d:43:d0:
                    15:f6:31:2c:d7:cd:ae:4d:77:85:5a:ea:96:a4:ed:
                    e6:5f:9c:ff:6f:69:24:2a:67:33:3e:96:e5:d4:d6:
                    58:4c:b5:05:cf:c4:c4:cf:e0:76:71:30:c6:a8:01:
                    f8:bb:18:80:af:ee:6f:86:70:34:1d:52:9d:07:83:
                    87:09:ca:a8:52:bb:37:43:2b:d2:ce:f9:45:26:a8:
                    6a:e1:93:b1:a8:1f:14:e9:b1:12:54:fe:48:1b:71:
                    b2:df:b5:39:95:8a:e1:e7:a8:b4:4b:ac:6b:8c:80:
                    ac:23:a8:f7:5d:62:af:03:49:a8:4c:79:5d:64:e7:
                    86:59:5b:82:c0:23:8f:ec:86:e8:2a:df:50:f1:a5:
                    b0:5f:95:54:61:a9:1c:d3:98:b0:6d:c0:4c:6c:96:
                    6e:ea:e8:aa:a7:b7:33:3e:50:36:2b:f7:30:d1:6c:
                    e7:d6:c9:a0:e9:a9:b9:49:51:26:cd:80:86:8a:2f:
                    05:84:d3:4c:7b:df:6d:9c:0a:94:ea:52:a4:f6:aa:
                    5b:a9:6e:8d:a1:90:df:e6:c4:9e:24:9d:f4:4b:93:
                    81:02:aa:a4:9f:8c:e2:ec:12:fc:56:97:be:a4:48:
                    3b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:80:88:28:43:28:6F:A6:71:91:21:1B:20:C8:16:CF:B1:54:A0:A2
            X509v3 Authority Key Identifier:
                keyid:7E:FA:64:C1:15:73:C2:92:E1:92:C2:CD:EA:C4:D5:F8:B8:C2:1D:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/3130332e31392e35362e302f32342d3234203d3e20313332363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:74:3b:03:e0:de:4b:db:78:90:25:62:50:70:de:61:68:b9:
         df:36:41:99:5b:e9:c8:bf:04:4e:b5:2a:bd:e1:af:61:4c:03:
         b7:00:39:fc:86:0e:ba:b7:fa:04:94:4b:43:45:3d:3e:6a:ea:
         b3:d7:c1:50:25:d6:e6:76:17:c7:0d:9b:5b:46:dd:c5:fe:52:
         5d:ba:58:4a:9a:dd:86:10:6e:58:24:d7:c3:9e:9c:e7:e3:b6:
         9b:1e:5b:96:19:aa:9b:92:c8:a5:4e:22:51:2b:71:51:94:1f:
         58:4b:69:e0:e5:69:06:05:a1:14:ed:8b:50:61:eb:b5:fb:08:
         b7:26:a6:4e:2f:b4:1b:f0:8f:d5:9a:2f:71:76:d6:3d:a7:9e:
         16:c3:13:d1:3f:4f:33:ab:09:1d:71:93:db:c0:1b:4e:a1:da:
         05:34:ab:ac:7a:3f:98:cd:48:48:dd:03:1f:6d:a7:65:fa:74:
         76:d4:dd:3c:9e:b7:02:a2:ac:2c:c5:cb:d5:0a:e1:8f:57:3d:
         f9:aa:3e:68:57:b5:fd:f3:c8:65:79:aa:1c:19:c7:bf:66:91:
         77:ab:93:41:9c:63:b7:0e:8c:f6:7f:b3:5e:dc:f8:47:aa:89:
         6e:b9:f8:ed:15:98:22:89:b0:0e:43:8f:2c:fc:0a:f3:af:97:
         71:aa:4e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:58:40 2025 by rpki-client