Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/3130332e3135352e3136362e302f32332d3233203d3e20313431303634.roa
File:                     3130332e3135352e3136362e302f32332d3233203d3e20313431303634.roa (raw, json)
Hash identifier:          eyzaiFvv4c1HmHtA1p4wBBlGeENQrifGbWD1MbCWveE=
Subject key identifier:   B3:C2:74:88:02:98:39:FE:0F:4E:24:23:86:F3:DD:90:DF:EF:47:8F
Certificate issuer:       /CN=C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B
Certificate serial:       58AA7DFD032084A3A2D655AF2ADBE05D2ED7F9D0
Authority key identifier: C4:CE:1B:D3:CB:FB:01:5E:60:96:5A:65:E2:FB:31:A6:BA:26:18:9B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/3130332e3135352e3136362e302f32332d3233203d3e20313431303634.roa
Signing time:             Mon 02 Jun 2025 01:02:26 +0000
ROA not before:           Mon 02 Jun 2025 00:57:26 +0000
ROA not after:            Mon 01 Jun 2026 01:02:26 +0000
asID:                     141064
IP address blocks:        103.155.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl
                          rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 19:59:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:aa:7d:fd:03:20:84:a3:a2:d6:55:af:2a:db:e0:5d:2e:d7:f9:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B
        Validity
            Not Before: Jun  2 00:57:26 2025 GMT
            Not After : Jun  1 01:02:26 2026 GMT
        Subject: CN=B3C27488029839FE0F4E242386F3DD90DFEF478F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:97:f8:6f:2e:5d:60:ce:b7:ad:61:20:1e:6b:
                    7a:2d:ac:d7:9a:eb:16:f0:98:87:d4:6c:51:19:98:
                    e1:30:fe:a7:36:ee:85:0a:cc:ea:23:14:50:6e:78:
                    f4:40:5a:06:3b:a2:c3:8f:05:31:5e:7b:05:45:62:
                    4b:d2:dd:9d:90:43:37:d2:e4:bb:2e:4e:2f:da:ee:
                    f7:9b:b8:b8:98:cf:92:b7:19:bd:be:3f:5a:83:1a:
                    46:fb:a8:5b:a2:8f:5b:1d:3e:c9:5a:b0:d6:b8:68:
                    da:92:8e:0f:d9:9b:13:ac:de:36:80:21:44:2b:eb:
                    b3:14:a9:b0:d9:b5:4e:e1:3f:c4:5a:ae:93:2d:35:
                    7a:51:1e:00:39:9b:33:d6:ee:c9:94:8a:10:bf:9f:
                    2e:47:71:6e:a6:2d:35:d2:a5:25:ee:84:d2:da:0d:
                    94:7f:2e:0f:f6:cd:c9:29:58:27:59:6b:ee:11:a4:
                    af:95:c5:1b:c9:13:1c:ad:8e:91:d8:db:84:a5:f5:
                    71:c5:57:82:36:d8:e7:5c:97:f9:3f:4f:24:d7:8e:
                    65:1c:29:07:82:da:e0:33:84:67:00:94:81:18:68:
                    0d:0e:75:02:8c:ed:1b:6e:db:ef:ae:f1:04:c7:81:
                    c8:2b:1c:a8:71:76:61:36:d6:4b:b4:06:5e:f0:59:
                    53:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C2:74:88:02:98:39:FE:0F:4E:24:23:86:F3:DD:90:DF:EF:47:8F
            X509v3 Authority Key Identifier:
                keyid:C4:CE:1B:D3:CB:FB:01:5E:60:96:5A:65:E2:FB:31:A6:BA:26:18:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/3130332e3135352e3136362e302f32332d3233203d3e20313431303634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:bc:c2:8a:23:c0:12:a0:00:3e:65:20:92:ad:ba:e1:bf:59:
         5a:48:a6:5a:89:43:0e:d8:10:a8:de:df:39:d6:45:6c:40:80:
         b2:47:14:0e:3d:d5:4f:f7:5e:dc:ab:be:00:f3:be:e0:81:a0:
         9c:90:10:4a:59:92:3e:f4:a2:a0:37:16:cd:6c:4d:65:84:45:
         b5:9f:8a:3f:a6:a1:4f:2b:59:03:be:be:9c:ac:52:0b:6d:73:
         e9:dc:6c:0f:58:26:5a:27:f0:a9:3b:fd:c2:d3:db:77:12:51:
         94:60:0b:53:53:56:52:2c:41:d3:35:b5:80:97:0c:0d:34:71:
         59:6b:85:4a:a5:fb:08:18:d9:73:9b:b3:85:72:4e:94:bd:ed:
         83:8b:3e:4c:0f:64:ea:ba:b8:ce:93:21:9e:72:4b:3a:d4:2e:
         fc:f9:d2:c3:59:81:31:d2:f6:6b:4b:35:6a:31:cb:c7:4d:b6:
         fd:31:44:8b:96:9e:99:01:d1:0e:b5:7c:f3:7f:00:48:e8:cc:
         d7:6d:cc:f5:13:26:d8:0d:db:a1:24:2f:2c:0d:f2:9a:3d:4d:
         b7:f2:60:0e:3f:8e:0d:a5:d6:f0:c3:0e:57:bb:cd:82:af:b5:
         09:8a:9a:fe:b6:f5:6f:83:c2:3d:78:44:37:be:a0:53:13:92:
         cf:f4:9f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:15:28 2025 by rpki-client