Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/3130332e37392e39312e302f32342d3234203d3e203634333035.roa
File:                     3130332e37392e39312e302f32342d3234203d3e203634333035.roa (raw, json)
Hash identifier:          mguZPFd0yEF7BbBBd2+SDugjtQLZV2wjK9kQOQsORjM=
Subject key identifier:   BE:A3:A8:6E:67:00:3A:53:82:CB:B0:D0:BD:A3:81:66:0F:A2:0F:E2
Certificate issuer:       /CN=EED8A9475E4020DA0F2BEF589D15102EB06B658F
Certificate serial:       56CBFD9145B45749C7A15C4253B48794EC5D4D8B
Authority key identifier: EE:D8:A9:47:5E:40:20:DA:0F:2B:EF:58:9D:15:10:2E:B0:6B:65:8F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EED8A9475E4020DA0F2BEF589D15102EB06B658F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/3130332e37392e39312e302f32342d3234203d3e203634333035.roa
Signing time:             Mon 02 Jun 2025 01:02:32 +0000
ROA not before:           Mon 02 Jun 2025 00:57:32 +0000
ROA not after:            Mon 01 Jun 2026 01:02:32 +0000
asID:                     64305
IP address blocks:        103.79.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/EED8A9475E4020DA0F2BEF589D15102EB06B658F.crl
                          rsync://repo-rpki.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/EED8A9475E4020DA0F2BEF589D15102EB06B658F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EED8A9475E4020DA0F2BEF589D15102EB06B658F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 14:03:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:cb:fd:91:45:b4:57:49:c7:a1:5c:42:53:b4:87:94:ec:5d:4d:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EED8A9475E4020DA0F2BEF589D15102EB06B658F
        Validity
            Not Before: Jun  2 00:57:32 2025 GMT
            Not After : Jun  1 01:02:32 2026 GMT
        Subject: CN=BEA3A86E67003A5382CBB0D0BDA381660FA20FE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c8:ef:4d:42:87:d5:b1:75:5c:f1:24:34:c8:
                    a3:b0:fc:14:14:08:a8:5f:1c:0f:77:d1:9f:ef:4f:
                    2c:bb:a9:9f:c4:b8:30:e5:8b:12:be:3c:df:e9:7a:
                    cb:0b:a5:3c:0f:26:5e:ce:fb:94:5d:79:50:d3:5e:
                    92:7c:ed:da:da:ed:da:9a:11:35:f2:08:fc:85:12:
                    69:42:81:21:f8:ad:50:70:0f:ad:ad:ce:4c:01:8a:
                    07:cd:26:e0:2e:88:07:ad:10:63:f1:e7:69:11:a8:
                    82:56:fc:5b:c6:fc:2a:be:7f:22:2d:8d:82:75:ce:
                    7c:a5:12:45:95:21:57:be:0e:46:3e:62:7a:14:94:
                    ac:8d:81:f6:6e:0f:05:01:b0:45:b6:31:fb:d3:73:
                    78:18:4a:c7:01:fe:25:5b:9c:26:88:56:5f:d5:8b:
                    d2:e5:e4:17:55:b7:20:54:f4:5e:9a:74:28:8c:90:
                    e7:4e:0e:cd:63:99:95:b6:b5:bb:b8:dd:ec:e7:a3:
                    a7:cb:1b:95:0c:e8:56:d3:f2:86:d0:83:f1:92:68:
                    00:0a:d4:52:1b:66:b5:ab:c1:9a:71:e6:c5:0f:66:
                    1d:b7:4f:07:7d:21:9a:e6:d6:47:a2:85:66:11:ea:
                    02:c9:1a:ea:14:61:b1:e5:fe:32:bf:2d:20:1c:e5:
                    db:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A3:A8:6E:67:00:3A:53:82:CB:B0:D0:BD:A3:81:66:0F:A2:0F:E2
            X509v3 Authority Key Identifier:
                keyid:EE:D8:A9:47:5E:40:20:DA:0F:2B:EF:58:9D:15:10:2E:B0:6B:65:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/EED8A9475E4020DA0F2BEF589D15102EB06B658F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EED8A9475E4020DA0F2BEF589D15102EB06B658F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/3130332e37392e39312e302f32342d3234203d3e203634333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:ee:68:ac:f7:2f:30:10:34:87:43:c2:5a:65:0b:41:f5:cb:
         a4:8f:09:a7:45:0b:82:72:3c:f6:1d:a6:42:3a:7a:28:aa:c7:
         6c:cd:93:cf:2e:41:fa:04:3b:d1:9e:ea:46:22:1b:9c:3d:10:
         b9:86:70:11:1e:2d:98:8d:bf:7e:6c:16:75:b6:4a:9b:3b:6a:
         d1:8b:b1:27:37:d0:07:45:06:f3:52:38:e6:10:59:86:1a:c4:
         fa:52:cf:d9:06:80:4a:e6:26:18:3d:49:f1:df:ca:c9:ac:65:
         c9:49:da:5d:f5:77:af:f8:f8:3b:90:18:63:8c:8c:f5:ff:78:
         c7:8a:0e:37:84:1e:4f:f7:0e:7d:c3:57:8a:1b:58:c3:bc:79:
         ea:a8:6c:72:97:91:82:09:47:57:0c:d9:55:6e:32:47:10:4d:
         12:88:69:f3:1b:f2:af:64:be:79:4d:70:2c:84:f3:cd:91:5c:
         18:57:a1:30:e5:b8:1e:e4:1f:9d:a6:f3:c3:0e:9d:ec:8f:04:
         17:8d:00:92:a1:d9:df:ca:b1:52:8a:b3:ee:cd:23:f3:01:46:
         bb:9b:9c:1b:99:0d:85:5a:12:9e:b1:f6:4c:d1:96:40:cd:8a:
         b7:05:92:9c:39:98:b1:3c:39:b8:fd:ca:e5:7c:99:06:29:28:
         e6:f7:f7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:47:17 2025 by rpki-client