Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/3130332e33302e302e302f32322d3234203d3e20313331373738.roa
File:                     3130332e33302e302e302f32322d3234203d3e20313331373738.roa (raw, json)
Hash identifier:          N5m6EQloSn7cPSOHDMXggl0h6eDrNc8qhyGZ+DM46fM=
Subject key identifier:   65:40:C3:E6:AC:33:DB:72:39:D4:90:A3:16:22:A6:0B:BD:62:B0:F2
Certificate issuer:       /CN=4C493E592E006837A093CD288BB55329BE38D2D2
Certificate serial:       2AEB85919DE55988909EDF81E4FCE761B12EB393
Authority key identifier: 4C:49:3E:59:2E:00:68:37:A0:93:CD:28:8B:B5:53:29:BE:38:D2:D2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C493E592E006837A093CD288BB55329BE38D2D2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/3130332e33302e302e302f32322d3234203d3e20313331373738.roa
Signing time:             Mon 02 Jun 2025 02:04:05 +0000
ROA not before:           Mon 02 Jun 2025 01:59:05 +0000
ROA not after:            Mon 01 Jun 2026 02:04:05 +0000
asID:                     131778
IP address blocks:        103.30.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/4C493E592E006837A093CD288BB55329BE38D2D2.crl
                          rsync://repo-rpki.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/4C493E592E006837A093CD288BB55329BE38D2D2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C493E592E006837A093CD288BB55329BE38D2D2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 15:29:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:eb:85:91:9d:e5:59:88:90:9e:df:81:e4:fc:e7:61:b1:2e:b3:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C493E592E006837A093CD288BB55329BE38D2D2
        Validity
            Not Before: Jun  2 01:59:05 2025 GMT
            Not After : Jun  1 02:04:05 2026 GMT
        Subject: CN=6540C3E6AC33DB7239D490A31622A60BBD62B0F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b3:0a:ad:80:e5:7b:77:68:a6:38:67:49:85:
                    20:5c:fb:26:c3:66:e3:08:86:06:5d:b9:0f:86:3c:
                    43:27:51:f9:62:45:ea:59:da:0b:30:80:65:33:4f:
                    56:7b:78:37:87:c5:b3:cb:6d:83:1f:4b:08:d4:4e:
                    79:a0:ee:5d:23:e3:c3:a8:2a:a4:b8:29:0a:98:3c:
                    1e:f2:ef:8d:5e:39:af:e0:88:81:ce:7b:b9:8a:fc:
                    e4:3a:10:61:31:f5:a0:00:04:bd:a6:02:ec:49:e1:
                    51:8c:23:d5:4f:cd:ec:66:f9:ee:d2:57:79:8c:94:
                    29:3f:e4:69:5e:c9:99:29:46:2c:7c:f7:24:fd:c2:
                    f7:1d:af:8e:ae:94:1f:51:5e:97:38:34:79:fd:07:
                    09:fa:93:33:c8:ef:5b:d2:47:3c:e0:7c:14:54:7e:
                    dd:93:5d:2e:44:ed:67:91:4d:48:58:c6:d8:0e:43:
                    f4:3f:f8:fe:9e:11:66:f6:c1:b5:54:54:ad:1f:d1:
                    4d:3a:25:16:08:8b:0b:80:d5:5f:f1:4b:2a:ec:54:
                    82:36:5d:90:58:04:d3:75:35:92:70:40:16:b6:ca:
                    61:db:a4:30:2b:b9:9f:eb:32:4b:da:01:bf:79:b7:
                    b9:17:a4:da:7c:ae:87:c2:dc:85:d0:9b:8e:4a:8a:
                    41:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:40:C3:E6:AC:33:DB:72:39:D4:90:A3:16:22:A6:0B:BD:62:B0:F2
            X509v3 Authority Key Identifier:
                keyid:4C:49:3E:59:2E:00:68:37:A0:93:CD:28:8B:B5:53:29:BE:38:D2:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/4C493E592E006837A093CD288BB55329BE38D2D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C493E592E006837A093CD288BB55329BE38D2D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/3130332e33302e302e302f32322d3234203d3e20313331373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:9f:cf:bf:e8:5a:46:cf:d7:73:fa:50:86:a5:30:6f:f0:66:
         aa:17:17:3a:63:e1:79:20:b8:7d:f7:b2:16:64:f6:62:bb:e9:
         7b:c6:1c:ac:d8:72:06:d2:5c:a2:28:45:9b:ef:13:7b:42:7f:
         85:4c:68:fc:7a:d2:df:4d:5d:60:c9:28:ea:9b:c1:fe:5c:e3:
         a0:c6:19:c9:e5:3f:88:60:9f:8d:67:36:f0:76:8e:b4:3c:bc:
         6a:56:06:d3:55:69:66:dd:26:9a:6d:e8:8a:fb:e7:86:b6:31:
         47:6d:64:43:89:ae:33:eb:63:fb:2e:40:d9:f2:51:fb:c1:20:
         f3:c4:e4:9e:6c:a9:f4:dd:17:72:78:48:4b:fe:4c:ab:6e:44:
         13:dd:82:cc:f0:06:b5:0b:af:7c:e9:a1:63:fe:49:14:bd:c9:
         15:12:ab:a3:55:30:1d:80:38:18:6a:c3:8f:85:81:97:89:24:
         0e:f3:a4:8e:c0:bd:50:7d:a7:91:1c:08:e5:70:95:23:ac:97:
         2c:03:be:9a:14:f7:e6:8d:39:94:37:81:0a:6a:8e:f2:eb:17:
         25:63:b3:e7:ce:79:70:d7:0f:2b:79:fa:6c:00:00:14:b3:75:
         ff:0d:9c:a5:76:83:45:3d:8b:d6:cf:de:d1:51:04:6b:f3:a7:
         7a:c8:e9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:39:38 2025 by rpki-client