Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/3130332e3132312e3134382e302f32332d3233203d3e203538333639.roa
File:                     3130332e3132312e3134382e302f32332d3233203d3e203538333639.roa (raw, json)
Hash identifier:          1MO7kNfuZHEztN7LWlrlsKvsPX1c2EMnYyDa6xlPz/k=
Subject key identifier:   4F:9E:34:70:45:D7:98:F2:CF:18:8E:F9:BB:1F:FF:BA:B6:FC:10:3A
Certificate issuer:       /CN=98F94938EA9072872BE06639F79DC61C000F849C
Certificate serial:       4E0A247DBAC22EBFA4B252C762D455F65353BACC
Authority key identifier: 98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/3130332e3132312e3134382e302f32332d3233203d3e203538333639.roa
Signing time:             Mon 02 Jun 2025 02:02:44 +0000
ROA not before:           Mon 02 Jun 2025 01:57:44 +0000
ROA not after:            Mon 01 Jun 2026 02:02:44 +0000
asID:                     58369
IP address blocks:        103.121.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.crl
                          rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 12:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:0a:24:7d:ba:c2:2e:bf:a4:b2:52:c7:62:d4:55:f6:53:53:ba:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98F94938EA9072872BE06639F79DC61C000F849C
        Validity
            Not Before: Jun  2 01:57:44 2025 GMT
            Not After : Jun  1 02:02:44 2026 GMT
        Subject: CN=4F9E347045D798F2CF188EF9BB1FFFBAB6FC103A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:64:92:54:d2:8c:f8:12:44:9f:c3:ee:17:ed:
                    40:fb:b3:10:0f:37:f0:44:fb:aa:11:91:d4:40:f0:
                    19:a7:38:0b:c0:3d:27:be:61:70:77:ff:2c:6f:b9:
                    06:4f:51:d2:75:b3:9c:a5:ef:6f:34:c2:d3:05:36:
                    e4:b4:51:64:26:ff:6d:87:a9:3e:85:86:ca:6d:5e:
                    71:e6:bb:c7:d6:53:df:c8:24:72:63:8b:3a:d7:01:
                    c9:6b:f3:ad:e8:4c:bc:6f:88:0b:09:49:d7:14:94:
                    68:ff:92:b4:4e:e0:1e:36:b8:fa:56:ea:f2:fa:ce:
                    34:93:f8:a3:ad:dc:f2:21:3e:08:cb:b4:f5:c7:ca:
                    ef:0f:fd:3f:41:b1:39:27:88:80:80:48:d1:4b:a4:
                    62:fa:36:2e:84:12:cc:02:26:dc:c7:30:ec:8c:4a:
                    1c:bd:b7:0c:1c:b0:11:22:6e:3d:89:3c:e4:75:17:
                    4a:80:de:d5:95:3e:aa:3d:46:da:48:a9:f5:79:75:
                    49:fc:8a:d4:37:38:59:ee:25:86:e5:54:74:36:07:
                    7b:47:1e:de:c6:b5:8e:8a:9c:fa:53:7d:01:1d:a1:
                    58:20:40:57:2e:42:6b:af:d2:57:17:00:9c:da:fb:
                    9f:23:02:5d:45:24:6b:70:32:9d:4a:fc:29:31:1b:
                    77:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:9E:34:70:45:D7:98:F2:CF:18:8E:F9:BB:1F:FF:BA:B6:FC:10:3A
            X509v3 Authority Key Identifier:
                keyid:98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/3130332e3132312e3134382e302f32332d3233203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:03:85:07:94:62:48:3b:37:77:9a:7c:f0:e1:53:3a:9d:ab:
         1a:19:c4:a2:4b:4b:87:f0:2e:b2:21:3e:35:51:79:7d:20:85:
         da:76:77:49:e2:3c:33:6a:9a:84:21:55:bd:57:10:e5:6f:02:
         75:60:c1:a1:17:62:d8:b4:fd:17:0e:83:28:69:cb:e8:2e:50:
         4e:a0:b1:4a:2a:75:24:f9:76:21:47:b6:62:4e:36:ca:6f:df:
         81:e1:d8:ba:cf:a8:08:3d:57:26:15:45:92:03:60:6a:cb:78:
         29:1e:45:06:1a:86:db:b4:54:39:ec:45:9a:32:32:4d:b8:23:
         5b:81:d3:bc:d5:31:6b:25:f5:bb:a9:e3:44:35:08:c3:4f:f5:
         86:fc:e0:72:cd:cd:da:b7:47:87:45:c5:e3:8c:68:2e:59:ce:
         4d:6f:c7:f2:35:62:78:e3:40:5c:04:00:bf:cd:52:2d:80:14:
         47:8c:3c:6a:97:58:ec:77:18:af:54:3a:dd:02:95:2e:3a:51:
         93:f8:8d:86:98:f4:c4:9a:26:10:60:01:ec:e6:36:91:6a:8d:
         bf:0d:68:16:b5:c7:dd:e9:47:d8:8c:14:63:0f:09:3d:7b:ab:
         57:b4:c4:29:71:cd:fa:f1:59:49:0b:0e:94:40:d9:da:75:d3:
         00:db:00:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:50:01 2025 by rpki-client