Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/3130332e3130362e3137322e302f32332d3234203d3e20313336383838.roa
File:                     3130332e3130362e3137322e302f32332d3234203d3e20313336383838.roa (raw, json)
Hash identifier:          DZlWR7tuLnpwDkeYEthZYN05oc1IXglcFF75rJ6G2+c=
Subject key identifier:   F5:E8:17:4A:7E:F1:FF:26:8B:74:4A:18:8B:68:D3:3F:D9:1F:76:C9
Certificate issuer:       /CN=B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8
Certificate serial:       639E268EF5B461159690D8B7234E8F60CD0D3F3F
Authority key identifier: B2:FA:6D:D6:2C:0D:60:EA:AD:64:F6:B4:71:D2:2D:29:44:32:B7:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/3130332e3130362e3137322e302f32332d3234203d3e20313336383838.roa
Signing time:             Mon 02 Jun 2025 01:02:46 +0000
ROA not before:           Mon 02 Jun 2025 00:57:46 +0000
ROA not after:            Mon 01 Jun 2026 01:02:46 +0000
asID:                     136888
IP address blocks:        103.106.172.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.crl
                          rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 19:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:9e:26:8e:f5:b4:61:15:96:90:d8:b7:23:4e:8f:60:cd:0d:3f:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8
        Validity
            Not Before: Jun  2 00:57:46 2025 GMT
            Not After : Jun  1 01:02:46 2026 GMT
        Subject: CN=F5E8174A7EF1FF268B744A188B68D33FD91F76C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:33:a0:36:56:2f:f3:d8:42:e8:aa:2a:61:80:
                    be:2c:5f:21:01:7c:f5:9e:5a:cd:f7:69:1a:12:a9:
                    d8:8f:9f:9d:6c:39:da:d6:f6:f9:68:7a:86:c0:a2:
                    08:27:8e:08:ec:ef:08:9c:3d:95:0f:22:11:bb:1d:
                    17:31:59:db:35:61:62:a2:69:46:8b:72:d2:f8:21:
                    14:18:4e:ad:b5:cf:4a:ac:c1:ae:e6:b0:c4:b9:d5:
                    a9:74:28:8c:26:8e:1c:67:af:62:0e:d3:45:4b:16:
                    0c:d9:77:e6:f7:e6:97:9a:03:2c:e7:c3:b8:36:fe:
                    a5:de:4e:34:48:4a:ca:bb:6a:93:4a:fb:d3:d5:84:
                    70:97:2d:ef:bd:9d:35:96:b7:43:42:b8:04:b1:d0:
                    31:09:8b:5d:f0:db:dc:f0:e5:cb:07:4f:b9:68:19:
                    16:45:0e:ee:40:ea:4b:42:b3:03:d1:60:30:1a:da:
                    95:b0:3c:fc:7b:11:61:7e:f2:b5:1d:75:75:eb:71:
                    82:5a:e6:bc:69:27:c9:5e:e5:e6:20:2a:7d:4c:93:
                    e2:37:bb:16:cb:31:4c:5f:7d:a5:6c:51:1e:89:8c:
                    d7:d4:49:23:16:b5:fa:24:f9:7d:4d:50:03:4e:3e:
                    3c:27:7c:ac:a0:0d:ed:91:97:19:45:6a:1e:f2:0d:
                    a4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E8:17:4A:7E:F1:FF:26:8B:74:4A:18:8B:68:D3:3F:D9:1F:76:C9
            X509v3 Authority Key Identifier:
                keyid:B2:FA:6D:D6:2C:0D:60:EA:AD:64:F6:B4:71:D2:2D:29:44:32:B7:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/3130332e3130362e3137322e302f32332d3234203d3e20313336383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:ca:18:81:0a:9d:e5:9b:c4:03:ba:0c:81:1d:10:e3:b7:6a:
         e0:2d:09:3b:fd:a2:c0:6c:4d:53:66:df:1f:0c:54:84:ba:4c:
         92:33:c0:0a:03:d6:6b:ba:5f:66:6a:ac:2c:46:5e:6c:f0:7b:
         a7:27:2f:77:c4:cb:b8:54:9c:d2:6f:01:68:11:d4:40:5d:06:
         16:00:3c:dc:e4:c0:bb:f6:60:c1:5e:fc:d1:19:77:cf:3f:a0:
         84:69:dc:a0:2a:ee:59:f6:97:61:e5:6b:54:84:4f:39:30:64:
         33:06:98:f2:d1:ea:31:cb:35:b1:78:42:24:1e:7f:61:90:0c:
         a5:bf:ad:c9:c9:27:90:c1:d0:d2:4c:c5:56:ad:8b:f6:cf:33:
         11:61:91:3d:02:fb:1b:57:20:7c:16:40:00:85:9a:b8:9f:0e:
         ab:cc:e9:fe:ee:b7:f8:5b:f7:a3:25:bf:c5:57:b5:dc:88:c4:
         38:bd:79:86:46:d0:f2:ee:46:9d:d5:f7:57:25:bb:28:25:06:
         b9:ad:2d:31:d5:58:81:31:63:de:13:7d:53:f0:9d:44:34:72:
         8e:44:f0:07:9f:7b:81:42:bc:9b:86:c2:c9:7a:80:5f:f3:34:
         4d:98:33:f5:9a:f2:d1:fd:a5:23:d1:df:82:62:5a:51:64:a8:
         0c:be:96:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:24:24 2025 by rpki-client