Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/3130332e37392e39362e302f32342d3234203d3e203634333038.roa
File:                     3130332e37392e39362e302f32342d3234203d3e203634333038.roa (raw, json)
Hash identifier:          wGapFjIoWrukGBmT8iRgZP0dNhbzHUcz+UdRp6Wb0WM=
Subject key identifier:   0A:0D:88:D8:9D:38:E8:FC:3B:46:67:FF:C0:95:0B:16:46:58:B4:19
Certificate issuer:       /CN=A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36
Certificate serial:       3A74E02CE1689D6A55349C6D1BB1E4717A79602C
Authority key identifier: A8:AC:DE:BC:6E:B4:FF:09:A4:8B:38:FE:B1:7C:C1:45:AA:5E:9F:36
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/3130332e37392e39362e302f32342d3234203d3e203634333038.roa
Signing time:             Mon 02 Jun 2025 02:03:52 +0000
ROA not before:           Mon 02 Jun 2025 01:58:52 +0000
ROA not after:            Mon 01 Jun 2026 02:03:52 +0000
asID:                     64308
IP address blocks:        103.79.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.crl
                          rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 20:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:74:e0:2c:e1:68:9d:6a:55:34:9c:6d:1b:b1:e4:71:7a:79:60:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36
        Validity
            Not Before: Jun  2 01:58:52 2025 GMT
            Not After : Jun  1 02:03:52 2026 GMT
        Subject: CN=0A0D88D89D38E8FC3B4667FFC0950B164658B419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a1:81:53:e1:9d:c5:f9:68:04:39:6d:10:da:
                    b4:bd:08:4f:b7:d3:8b:38:d0:5f:02:28:4f:0e:ba:
                    13:44:10:73:f1:ad:51:ed:f5:fd:86:cd:c6:7b:ee:
                    09:14:34:10:ae:81:a2:b3:15:90:dc:6d:1e:80:05:
                    ed:53:64:6d:2c:3a:03:d9:c3:6a:ac:58:a8:31:b7:
                    17:54:23:1c:73:c9:3c:ad:fa:c3:54:37:ad:b8:46:
                    99:98:e9:8d:00:16:3f:41:9f:cf:b1:bb:2c:d5:b4:
                    6b:d8:82:69:dc:e3:5f:17:de:6a:88:53:90:d7:53:
                    a1:28:79:b2:28:bd:b8:8f:8a:f7:90:0d:07:34:2e:
                    95:e9:9a:e0:3f:da:71:bb:37:ed:c1:bc:8d:df:7c:
                    b1:ec:fc:36:ed:be:d3:c1:be:cc:56:e9:c2:fe:f6:
                    e9:41:1f:29:0a:3b:4c:76:8b:7f:3d:9f:b7:77:55:
                    b3:af:be:9b:f9:6a:de:1c:4c:0d:2d:5d:b0:7f:f9:
                    67:67:7a:3a:a7:93:a2:9f:14:d2:36:dc:39:43:e3:
                    93:40:b6:29:1d:b8:7c:98:a9:15:96:c1:f7:4d:1d:
                    ff:1c:f4:3e:43:d0:e7:ea:83:3a:a3:32:90:c9:1e:
                    ba:ab:cb:b7:ae:27:7f:55:7a:7e:26:e2:cb:ab:97:
                    4d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:0D:88:D8:9D:38:E8:FC:3B:46:67:FF:C0:95:0B:16:46:58:B4:19
            X509v3 Authority Key Identifier:
                keyid:A8:AC:DE:BC:6E:B4:FF:09:A4:8B:38:FE:B1:7C:C1:45:AA:5E:9F:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/3130332e37392e39362e302f32342d3234203d3e203634333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:2f:aa:8c:60:0e:ea:78:e7:21:29:7e:c8:a3:6a:9f:5e:74:
         34:4d:86:4e:ff:e9:7b:aa:2f:2c:7b:84:12:7f:c3:d7:d5:67:
         1e:bd:22:d0:a4:ee:98:de:96:ec:c1:e1:3d:0a:be:64:8a:20:
         96:6a:7c:8e:9e:00:93:3f:42:04:c9:a8:c6:af:6b:c2:44:7e:
         93:26:b8:bc:c3:bc:b5:4e:83:f0:cc:4d:12:fa:e0:e5:ce:6e:
         7d:fa:b0:a7:1c:b5:8d:7c:62:45:dd:ab:84:c6:63:8d:7f:38:
         75:f8:f5:7b:24:a5:28:01:08:5c:a5:d4:ec:93:96:d8:1b:af:
         d7:c8:42:40:6b:23:11:19:bc:55:9d:7e:89:b3:84:ab:70:31:
         37:64:b7:db:4b:4f:f1:01:7d:b3:b6:27:15:fd:bb:94:2e:f2:
         5f:34:9a:ff:2f:79:86:9c:6b:a4:00:c9:5a:49:a0:17:f9:48:
         56:6b:a2:84:7f:d5:cf:35:c8:5e:bd:fe:ea:e4:c9:ef:22:10:
         41:4b:65:24:b3:f7:51:db:d2:16:2c:bf:70:75:37:13:ed:8f:
         d7:55:32:80:be:9b:5b:75:fc:f6:d0:ff:ad:6b:62:8f:8a:fd:
         d9:fa:ed:0f:f5:e4:5b:38:92:a2:ff:54:b4:88:5e:d7:4b:f0:
         33:6c:a8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:56:43 2025 by rpki-client