Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/3130332e3132342e3139362e302f32342d3234203d3e20313338303936.roa
File:                     3130332e3132342e3139362e302f32342d3234203d3e20313338303936.roa (raw, json)
Hash identifier:          n0pHhF58CPylB9y5w46zbjaPBFWjrRvur8ZNb3WIRks=
Subject key identifier:   6E:FD:61:EC:AA:C5:6A:9B:32:58:94:18:AD:7B:16:39:52:1C:21:D6
Certificate issuer:       /CN=B605D71FEB5A1DBE5676CFACB394ABBA37C83A86
Certificate serial:       59F6EA3817078D482B1BBD180E6C61EB1E64C842
Authority key identifier: B6:05:D7:1F:EB:5A:1D:BE:56:76:CF:AC:B3:94:AB:BA:37:C8:3A:86
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/3130332e3132342e3139362e302f32342d3234203d3e20313338303936.roa
Signing time:             Mon 02 Jun 2025 02:03:09 +0000
ROA not before:           Mon 02 Jun 2025 01:58:09 +0000
ROA not after:            Mon 01 Jun 2026 02:03:09 +0000
asID:                     138096
IP address blocks:        103.124.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.crl
                          rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 21:44:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:f6:ea:38:17:07:8d:48:2b:1b:bd:18:0e:6c:61:eb:1e:64:c8:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B605D71FEB5A1DBE5676CFACB394ABBA37C83A86
        Validity
            Not Before: Jun  2 01:58:09 2025 GMT
            Not After : Jun  1 02:03:09 2026 GMT
        Subject: CN=6EFD61ECAAC56A9B32589418AD7B1639521C21D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:55:25:54:03:e2:1f:d7:28:22:e4:79:11:11:
                    fc:1c:7b:df:ef:cd:11:56:1d:f0:3e:0a:b1:5d:a4:
                    b5:ff:fb:b7:6f:50:16:80:ce:18:40:11:40:5c:15:
                    7c:01:d7:5f:05:46:fd:88:2a:09:80:85:54:64:39:
                    53:2a:50:b5:47:11:f3:b8:f6:c7:4c:e8:31:fb:b7:
                    da:80:f8:13:04:15:be:1f:8b:a4:72:de:aa:78:8b:
                    9c:03:04:32:2a:e5:30:71:91:30:e8:b4:47:2d:0a:
                    73:9d:80:e3:ed:d5:56:11:38:bf:14:6b:e9:53:a8:
                    42:d5:24:44:b0:c3:6b:18:b0:1c:19:99:f0:1b:4c:
                    59:53:a6:c8:16:9b:3c:3c:8e:03:0c:33:71:51:04:
                    8d:b2:12:1a:99:e3:fd:53:39:db:e7:b4:8c:af:46:
                    3e:6c:e2:c1:53:55:82:05:32:b3:d1:4c:c7:83:6e:
                    72:cd:8f:e0:54:09:5f:e7:86:4a:15:bf:07:77:87:
                    ab:0a:50:f6:3e:ac:fd:5e:21:7e:34:3f:01:f0:1a:
                    91:c5:00:20:ba:7f:fb:26:e4:2b:6d:95:c9:09:1b:
                    88:fe:04:0e:c6:40:fb:f5:e9:3d:4c:8e:ee:e2:f6:
                    55:28:9f:c6:05:ae:a8:de:f8:f5:13:2b:2f:ec:a8:
                    39:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:FD:61:EC:AA:C5:6A:9B:32:58:94:18:AD:7B:16:39:52:1C:21:D6
            X509v3 Authority Key Identifier:
                keyid:B6:05:D7:1F:EB:5A:1D:BE:56:76:CF:AC:B3:94:AB:BA:37:C8:3A:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605D71FEB5A1DBE5676CFACB394ABBA37C83A86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/45dff9b3-9041-4dd6-b7ab-02060d65d09a/0/3130332e3132342e3139362e302f32342d3234203d3e20313338303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:15:37:ce:af:3e:bb:7f:bc:d1:18:cd:8c:09:04:6d:5d:40:
         dd:bb:4e:a5:5a:a3:b7:4b:09:d9:66:ee:63:23:f9:c8:cf:13:
         f8:67:32:88:90:89:c0:25:33:c9:1e:3e:17:7b:80:f3:c4:2c:
         3b:88:2f:65:1f:90:b5:58:04:49:4e:09:5e:1f:dc:c2:fb:c1:
         8c:a8:7f:a3:aa:36:4d:66:55:5a:a0:81:b3:91:c6:3e:7b:ff:
         b2:b9:f5:ce:e2:5b:0f:dc:de:fc:4c:8f:a1:b5:b6:86:b3:a2:
         76:04:c5:58:28:5a:2a:0d:bc:61:11:d4:f4:b3:d2:c0:12:31:
         82:05:c5:ea:6e:53:5c:3e:ee:11:16:3e:c2:e1:e5:bf:92:a8:
         af:0c:bd:2b:e4:ea:b0:1d:16:15:2e:f4:f2:a8:03:6d:e2:2f:
         ff:8b:2c:34:d4:c3:0b:07:22:13:c6:e2:92:6b:81:88:7d:e1:
         0c:d2:d3:36:be:fd:ff:9f:31:9b:0d:fc:07:08:e2:4e:d3:74:
         ca:0b:5d:36:a6:d5:5f:cc:89:e2:de:51:c0:63:30:49:8a:cc:
         68:eb:75:de:15:d3:ff:03:7f:a1:fb:0c:35:89:86:91:ff:61:
         74:8e:0e:ce:93:2e:39:1f:44:2b:bd:2b:be:64:75:fc:8a:20:
         d8:69:27:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:33:41 2025 by rpki-client