Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3130332e32302e3138382e302f32342d3234203d3e203535363835.roa
File:                     3130332e32302e3138382e302f32342d3234203d3e203535363835.roa (raw, json)
Hash identifier:          FtU2Vbq4Im4T/gvhqTCwKPCJFYholcgsmn5vFzxDPfI=
Subject key identifier:   9E:2B:FD:61:20:B2:57:A4:AE:C7:11:51:1A:CD:CE:D8:09:34:28:C7
Certificate issuer:       /CN=B6F0131510E62F73E5F29246F9C8F691811A704D
Certificate serial:       0B263BB74100467E680C786FDD08BBD9D82991A1
Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3130332e32302e3138382e302f32342d3234203d3e203535363835.roa
Signing time:             Mon 02 Jun 2025 02:04:47 +0000
ROA not before:           Mon 02 Jun 2025 01:59:47 +0000
ROA not after:            Mon 01 Jun 2026 02:04:47 +0000
asID:                     55685
IP address blocks:        103.20.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl
                          rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 22:33:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:26:3b:b7:41:00:46:7e:68:0c:78:6f:dd:08:bb:d9:d8:29:91:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D
        Validity
            Not Before: Jun  2 01:59:47 2025 GMT
            Not After : Jun  1 02:04:47 2026 GMT
        Subject: CN=9E2BFD6120B257A4AEC711511ACDCED8093428C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a8:fc:26:6d:ac:fa:10:9b:5e:40:c8:14:31:
                    0e:1d:00:56:b4:d0:86:5b:ae:08:8d:d9:3e:83:e6:
                    95:6d:67:fc:3f:d9:37:25:d5:68:cf:43:73:f9:62:
                    3a:66:e7:12:17:f9:85:f6:57:06:6b:88:bc:c7:0a:
                    66:51:9f:26:19:4b:40:8f:e2:85:2b:3d:fe:17:04:
                    86:e7:1f:7e:7f:bf:05:4b:f6:0b:90:23:d6:25:96:
                    53:34:d4:cf:17:65:ee:ef:d5:57:29:ff:53:da:46:
                    81:8b:b3:bf:81:9a:59:98:1e:08:22:05:e8:ba:ad:
                    cc:7f:62:3d:f9:d7:58:b6:f4:fe:b3:e7:27:4e:5f:
                    e8:00:74:d2:67:e9:c2:2f:fe:f1:a1:04:71:36:bb:
                    9c:9c:9e:a6:eb:1d:71:cd:5e:f2:95:38:f9:76:2e:
                    86:f6:0d:ba:c5:f7:10:4a:14:d7:2b:d3:e7:78:a8:
                    03:10:3a:a3:ae:29:ab:f1:fb:e7:ce:42:05:f8:9b:
                    8d:f7:77:17:89:49:71:67:04:22:fa:23:a3:d3:ff:
                    e7:06:74:bb:9c:72:0b:50:5a:64:d4:a7:68:34:e2:
                    5e:a8:0d:17:26:80:35:39:9b:ba:58:78:a6:c1:cd:
                    4c:b8:13:38:b5:11:87:ca:6a:a4:f1:3d:76:83:24:
                    96:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:2B:FD:61:20:B2:57:A4:AE:C7:11:51:1A:CD:CE:D8:09:34:28:C7
            X509v3 Authority Key Identifier:
                keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3130332e32302e3138382e302f32342d3234203d3e203535363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.20.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:bd:5d:f4:d9:a3:fd:c8:ef:8b:02:3e:14:8b:ff:80:de:19:
         a9:cc:c8:26:c0:56:e0:65:2b:e6:d5:58:56:43:c9:83:ac:f9:
         dd:d6:6d:69:05:5d:53:05:a9:98:b3:32:42:5a:d3:92:8f:47:
         9b:8c:74:80:3e:3d:83:f3:fb:3a:d9:5c:d8:5f:b6:9c:f3:95:
         9b:33:52:1a:fd:20:bf:58:e9:46:25:9f:3c:96:1a:c1:cc:ab:
         2c:a5:67:45:0b:fc:44:0e:9c:d1:36:b1:49:07:aa:d6:b5:5f:
         1d:e5:ce:63:ae:21:22:3f:40:bd:7a:5b:8c:dd:1f:f9:f3:a2:
         36:91:ab:36:bd:63:15:a6:ae:80:59:18:91:57:00:a7:9c:bd:
         7c:63:99:54:b6:02:0c:76:d3:e6:4c:38:7e:ee:b3:e6:7b:7d:
         62:fa:80:65:5f:35:36:73:6f:20:20:01:ab:f6:2c:b5:02:b4:
         e4:1d:79:c9:fb:b3:6b:f9:68:3d:03:a5:73:d2:c3:4f:aa:2b:
         f3:bc:72:a8:60:90:20:6d:05:bb:08:0d:71:89:49:0b:bd:60:
         1d:e3:b7:ed:16:89:f3:03:f0:f3:19:8e:5f:4c:68:1e:96:bd:
         35:68:20:a6:c1:7e:15:cf:64:42:67:00:63:98:00:e4:a1:d9:
         82:d0:0e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:02:01 2025 by rpki-client