Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/3130332e34312e3139322e302f32322d3234203d3e203538333937.roa
File:                     3130332e34312e3139322e302f32322d3234203d3e203538333937.roa (raw, json)
Hash identifier:          tCKZnr+Fo8fKV3h9jsU8NXOGTFbn5oaaGoERKkkWRWs=
Subject key identifier:   E1:BF:3E:9E:D1:C8:DE:5E:A1:07:65:FB:5E:21:4E:03:9B:29:5B:96
Certificate issuer:       /CN=498B46B789361D2AAA4E5CF9B2A81E223925A89F
Certificate serial:       26695B1A55A4D7FB6A88BDB2A1DB2C34E0AB3FDA
Authority key identifier: 49:8B:46:B7:89:36:1D:2A:AA:4E:5C:F9:B2:A8:1E:22:39:25:A8:9F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/3130332e34312e3139322e302f32322d3234203d3e203538333937.roa
Signing time:             Mon 02 Jun 2025 02:04:12 +0000
ROA not before:           Mon 02 Jun 2025 01:59:12 +0000
ROA not after:            Mon 01 Jun 2026 02:04:12 +0000
asID:                     58397
IP address blocks:        103.41.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl
                          rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 15:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:69:5b:1a:55:a4:d7:fb:6a:88:bd:b2:a1:db:2c:34:e0:ab:3f:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=498B46B789361D2AAA4E5CF9B2A81E223925A89F
        Validity
            Not Before: Jun  2 01:59:12 2025 GMT
            Not After : Jun  1 02:04:12 2026 GMT
        Subject: CN=E1BF3E9ED1C8DE5EA10765FB5E214E039B295B96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d8:b1:5b:8b:0d:71:d3:55:44:83:37:9c:4a:
                    fe:45:51:f2:5f:71:58:43:93:1b:fd:71:a5:c9:e1:
                    6b:b4:99:d3:5e:57:cb:9d:c5:97:d1:cc:10:24:2b:
                    95:9a:9b:96:f8:78:62:f1:c8:69:19:51:79:9e:3a:
                    df:87:79:1a:6a:d1:d3:80:20:58:0b:1c:eb:7e:2a:
                    b1:43:9a:22:f5:15:d1:a9:75:7e:f3:f3:ef:f8:51:
                    e3:c3:64:18:e3:30:2d:e9:10:30:da:0d:3f:f9:9c:
                    ac:a1:7c:eb:83:12:56:be:f5:c4:be:6a:b4:38:f9:
                    68:ff:76:ee:91:d0:59:50:9e:14:59:4d:fb:45:86:
                    10:29:5f:0a:ee:33:18:7b:fb:0d:30:41:56:30:be:
                    1a:02:5c:0e:a2:aa:bf:f6:e8:1d:d2:4d:d7:d1:45:
                    e9:d6:a4:75:73:b8:3e:a0:0b:f5:24:30:3a:c7:7f:
                    bf:01:7e:96:13:df:68:c4:0d:8b:e5:1d:6b:38:40:
                    b2:0e:14:ac:80:67:8e:fd:da:58:f0:7f:dc:77:c9:
                    1e:7e:cf:37:1a:e1:f2:71:cd:93:ca:56:59:55:f4:
                    9a:21:97:a5:dd:cc:76:a9:18:d5:67:37:3d:04:9c:
                    95:7b:3b:09:fc:59:c6:64:d5:c3:84:72:9b:ba:dd:
                    fc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:BF:3E:9E:D1:C8:DE:5E:A1:07:65:FB:5E:21:4E:03:9B:29:5B:96
            X509v3 Authority Key Identifier:
                keyid:49:8B:46:B7:89:36:1D:2A:AA:4E:5C:F9:B2:A8:1E:22:39:25:A8:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/498B46B789361D2AAA4E5CF9B2A81E223925A89F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/498B46B789361D2AAA4E5CF9B2A81E223925A89F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/519166a1-18cd-44d3-a6e0-2ef82f760d28/0/3130332e34312e3139322e302f32322d3234203d3e203538333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.41.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cd:fa:a4:e3:58:b2:2a:45:a4:bc:0c:90:1b:28:a8:92:20:d7:
         ff:23:4d:ec:b9:63:6d:7c:5b:78:ee:fd:fc:2a:20:77:5e:51:
         ee:0f:52:f2:5b:ed:71:ab:1a:a0:f4:8b:b6:ef:ca:36:a3:12:
         61:a2:a8:32:99:09:5b:cd:73:8f:8a:85:94:26:8b:32:2a:d8:
         36:52:3d:ab:2d:fb:37:97:84:41:6e:98:01:35:95:4c:0d:62:
         8c:f3:5c:67:e2:0f:16:45:87:cc:2c:06:59:38:f3:80:1f:f8:
         cc:a9:2e:f4:b0:44:20:10:35:1d:63:c2:66:cb:13:b4:07:ce:
         ca:a1:37:bd:a1:7c:ff:48:35:b2:2a:f2:ad:5a:0c:2f:28:d9:
         ad:e4:72:88:07:ef:b6:6b:43:39:27:c7:0d:59:e2:bb:4d:01:
         74:83:3f:66:c1:05:cc:7e:1a:cc:16:6a:fe:74:c1:2e:86:8d:
         83:9a:6f:30:d5:e3:68:10:5c:2d:10:28:12:e0:97:fa:44:36:
         20:d2:b6:5e:20:14:68:99:02:df:2f:17:36:e1:93:18:10:7b:
         85:b5:a1:d5:e7:47:ee:de:ed:1c:15:63:71:e5:59:82:ce:0c:
         c0:a4:71:dc:89:7b:09:04:51:2a:9e:14:f9:07:5e:cc:58:59:
         87:f9:58:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:36:54 2025 by rpki-client