Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/3130332e38372e3233312e302f32342d3234203d3e20313336303838.roa
File:                     3130332e38372e3233312e302f32342d3234203d3e20313336303838.roa (raw, json)
Hash identifier:          OIESnpY4oHzRxvi4zbTiBv7LuhxOpAJnAq903LiQaxo=
Subject key identifier:   87:1B:47:9F:1C:AA:DD:3B:6D:B5:7D:15:59:39:E9:61:69:DA:9A:B3
Certificate issuer:       /CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F
Certificate serial:       3DE325310A0742105E5D120824A9D0C42B2F434E
Authority key identifier: D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/3130332e38372e3233312e302f32342d3234203d3e20313336303838.roa
Signing time:             Mon 02 Jun 2025 02:03:22 +0000
ROA not before:           Mon 02 Jun 2025 01:58:22 +0000
ROA not after:            Mon 01 Jun 2026 02:03:22 +0000
asID:                     136088
IP address blocks:        103.87.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl
                          rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 05:47:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:e3:25:31:0a:07:42:10:5e:5d:12:08:24:a9:d0:c4:2b:2f:43:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F
        Validity
            Not Before: Jun  2 01:58:22 2025 GMT
            Not After : Jun  1 02:03:22 2026 GMT
        Subject: CN=871B479F1CAADD3B6DB57D155939E96169DA9AB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:62:f0:d8:86:2e:4e:3e:d3:0c:8a:ea:15:4d:
                    da:bb:a6:c2:af:f2:51:de:35:2d:f6:ca:41:9a:2b:
                    25:f3:fb:e8:88:9c:7b:ae:83:36:9b:74:0d:a3:86:
                    92:2d:82:85:6c:45:28:b8:36:c2:2d:91:9b:33:a8:
                    79:96:9a:d3:f5:a3:e4:02:d6:62:ff:52:f7:9a:5a:
                    85:41:ed:aa:75:99:c4:57:7e:ec:3e:7b:e1:7a:18:
                    b8:16:4c:c4:ea:e9:0d:d9:b2:66:12:1d:19:29:c2:
                    44:5a:e3:25:46:b7:06:5d:f6:56:c6:0d:7e:03:b8:
                    dc:c2:ee:ea:68:56:43:f2:54:26:13:46:30:1b:2e:
                    e1:e1:37:3d:f4:df:39:a1:1b:0f:55:ee:d3:6f:8f:
                    81:64:b2:87:db:ac:54:61:4c:1a:80:b1:48:39:74:
                    6f:e5:f2:79:ce:37:e6:f1:75:5b:4c:e1:41:27:af:
                    cf:ba:d3:a0:93:79:43:3d:03:82:15:25:f7:ab:17:
                    86:41:b0:df:1d:ef:41:a7:94:34:ac:77:8e:86:f2:
                    b9:f9:3e:13:74:aa:1b:be:c2:5a:9f:58:0c:2c:04:
                    f0:86:be:00:fc:3e:e2:ed:56:bd:c3:de:bb:27:4e:
                    ad:d7:fc:c6:11:a4:b8:c3:05:f9:3b:c6:3b:0b:df:
                    73:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:1B:47:9F:1C:AA:DD:3B:6D:B5:7D:15:59:39:E9:61:69:DA:9A:B3
            X509v3 Authority Key Identifier:
                keyid:D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/3130332e38372e3233312e302f32342d3234203d3e20313336303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:db:1c:11:8c:7a:3d:3c:3e:24:86:9b:20:e7:98:da:db:22:
         46:3d:51:9b:1c:2e:ac:30:a0:71:ba:30:e0:9b:a9:f5:f6:01:
         39:aa:ed:25:ef:7e:c2:e0:ce:f8:a1:d8:4d:82:78:48:35:7c:
         39:d6:2e:56:20:cb:f5:0d:04:43:96:31:c9:85:e6:c9:34:73:
         d4:14:76:be:67:bb:39:0e:2e:92:d2:8d:a3:42:ee:3d:80:77:
         a4:e2:9f:02:c2:f8:65:e8:b5:44:e0:f2:3c:d2:1d:81:da:19:
         1b:43:01:54:0b:77:a7:e7:96:a6:58:6a:d9:37:f0:da:0d:5d:
         55:71:0a:9b:db:17:af:72:12:90:68:62:0f:96:c9:9d:e4:4b:
         d0:95:86:62:a3:3a:f7:f5:af:05:62:68:65:67:ec:33:70:07:
         e7:20:96:e9:ef:4c:45:dc:61:a4:c1:cb:3f:b9:8f:3b:ff:46:
         16:63:fb:d0:34:74:0a:91:a4:fe:e4:b0:3c:d6:5f:85:49:5b:
         c7:db:ae:ee:59:c7:6a:e3:b0:0e:7c:3d:52:82:f3:75:fb:64:
         64:56:78:7b:e2:bb:56:d9:82:97:c9:fd:cd:1c:ae:e5:e8:d3:
         9a:25:dc:7f:01:eb:7e:f9:19:d9:51:c9:b8:18:96:ae:34:cd:
         e6:f9:69:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:01:06 2025 by rpki-client