Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/3130332e32382e3134382e302f32342d3234203d3e203538343737.roa
File:                     3130332e32382e3134382e302f32342d3234203d3e203538343737.roa (raw, json)
Hash identifier:          YHgchxUowX4afg18dRitbsm1i2Jr1bcDLdOROkNe9ds=
Subject key identifier:   14:AB:56:5E:53:88:06:2E:36:F2:1A:29:2D:25:A1:3E:97:7E:A9:03
Certificate issuer:       /CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6
Certificate serial:       6D9840D7CE949682850EF11385690CF1C70ECF03
Authority key identifier: 10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/3130332e32382e3134382e302f32342d3234203d3e203538343737.roa
Signing time:             Mon 02 Jun 2025 02:04:29 +0000
ROA not before:           Mon 02 Jun 2025 01:59:29 +0000
ROA not after:            Mon 01 Jun 2026 02:04:29 +0000
asID:                     58477
IP address blocks:        103.28.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl
                          rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 20:25:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:98:40:d7:ce:94:96:82:85:0e:f1:13:85:69:0c:f1:c7:0e:cf:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6
        Validity
            Not Before: Jun  2 01:59:29 2025 GMT
            Not After : Jun  1 02:04:29 2026 GMT
        Subject: CN=14AB565E5388062E36F21A292D25A13E977EA903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:44:90:bd:45:bc:e0:cc:46:0f:35:6b:bc:67:
                    79:40:db:59:eb:ce:58:15:8c:8e:d3:27:44:e1:e8:
                    b0:21:98:a9:d0:86:7b:c2:49:b0:ed:42:58:a2:26:
                    c2:dc:6a:80:4f:f5:bb:b6:35:1a:3b:90:f7:fc:56:
                    c1:ad:d7:d7:ba:b1:79:91:bc:ab:4f:7f:8b:92:58:
                    3f:4a:fd:d7:27:08:6d:50:e7:d7:fa:ce:9a:0b:43:
                    7a:4e:f6:09:63:88:39:45:61:a0:4e:1d:fd:f3:62:
                    39:4d:f8:ba:ac:8e:af:5e:48:93:a6:4b:3f:1a:0f:
                    d2:aa:7c:bf:7c:5a:df:7b:2e:45:d1:d9:3c:af:43:
                    d9:01:3d:67:3b:9b:97:5c:b1:f9:ba:10:5d:0a:d5:
                    00:0e:96:15:8f:41:79:fb:8f:1a:e3:8b:d3:c3:e1:
                    09:aa:62:96:37:84:51:a1:26:92:4a:5c:dd:9d:de:
                    92:84:be:ba:ce:47:c7:85:af:b6:21:0b:d1:50:27:
                    de:ce:ad:f5:87:09:85:b9:6d:37:5e:87:80:77:7a:
                    7e:1f:9e:e8:31:f1:cf:dc:30:87:0f:71:fb:f6:8f:
                    28:20:94:2d:37:63:e8:92:b4:29:25:42:f7:b2:2d:
                    73:8a:2d:26:d1:1a:27:ed:0c:92:44:c9:c2:60:f6:
                    57:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:AB:56:5E:53:88:06:2E:36:F2:1A:29:2D:25:A1:3E:97:7E:A9:03
            X509v3 Authority Key Identifier:
                keyid:10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/3130332e32382e3134382e302f32342d3234203d3e203538343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:f3:81:27:7e:37:b4:9b:11:9a:01:41:ac:4a:7a:2e:5b:4d:
         d9:a1:2c:a6:ab:ec:71:b3:2c:35:9e:fe:a3:b7:c1:04:f1:ae:
         bd:a7:32:e8:18:5c:21:b2:09:f8:7e:89:6a:9c:b0:8f:1e:0f:
         9f:3a:da:15:af:f0:bf:77:7d:e6:cb:1e:5d:01:80:30:10:ee:
         bc:ba:14:db:e1:ca:a7:ed:a0:47:98:3f:da:d5:26:64:42:2f:
         bd:b3:f4:fd:23:4f:72:62:95:ce:27:c6:7d:5b:95:ad:9a:df:
         7d:6c:49:54:97:35:cc:c8:fb:cc:4a:51:62:c7:6e:79:d1:fe:
         6f:bf:a0:dc:cc:d6:9d:38:35:00:4f:26:0c:ce:69:eb:ff:35:
         18:3f:31:f4:3c:59:fb:78:1f:0d:a0:c1:7f:7f:9b:40:6c:b7:
         91:bc:a1:93:c7:40:54:f7:3d:ef:a4:3c:67:15:0d:ab:d3:f3:
         03:b4:de:11:96:e0:74:27:18:63:b6:22:d3:e1:f2:80:ca:44:
         77:11:d2:25:80:a3:ef:62:eb:24:e9:fa:c6:43:8c:75:9a:c8:
         50:31:99:8e:06:59:d6:7c:17:70:09:e7:dd:df:e3:69:d9:40:
         d6:6f:51:07:be:96:c9:7e:ba:84:76:c0:30:6a:d8:92:a2:a5:
         96:79:e8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:12:56 2025 by rpki-client