Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/3130332e3132362e3230322e302f32332d3233203d3e20313338313133.roa
File:                     3130332e3132362e3230322e302f32332d3233203d3e20313338313133.roa (raw, json)
Hash identifier:          x7tsLph+/FB0QeKJjGm8RZPvo26S0bN0rsI7VAab3d8=
Subject key identifier:   75:B6:EF:3A:C7:45:21:AE:6A:6A:08:9E:C1:55:48:37:79:16:D7:5E
Certificate issuer:       /CN=8CFA88063D5C0A51C1D737A5170338865A245358
Certificate serial:       56F743A69DC6D21742AEAC4F25F54B938CE20746
Authority key identifier: 8C:FA:88:06:3D:5C:0A:51:C1:D7:37:A5:17:03:38:86:5A:24:53:58
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/3130332e3132362e3230322e302f32332d3233203d3e20313338313133.roa
Signing time:             Mon 02 Jun 2025 01:02:55 +0000
ROA not before:           Mon 02 Jun 2025 00:57:55 +0000
ROA not after:            Mon 01 Jun 2026 01:02:55 +0000
asID:                     138113
IP address blocks:        103.126.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.crl
                          rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 23:33:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:f7:43:a6:9d:c6:d2:17:42:ae:ac:4f:25:f5:4b:93:8c:e2:07:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CFA88063D5C0A51C1D737A5170338865A245358
        Validity
            Not Before: Jun  2 00:57:55 2025 GMT
            Not After : Jun  1 01:02:55 2026 GMT
        Subject: CN=75B6EF3AC74521AE6A6A089EC15548377916D75E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:87:89:d0:df:67:7f:66:80:b8:22:de:5d:ec:
                    97:09:75:9f:21:31:2f:82:e9:16:0f:c6:af:8d:9c:
                    76:42:6e:80:c0:07:b6:74:8d:da:60:1c:0a:e4:d9:
                    d9:40:bd:76:e9:c2:26:54:c8:d4:1f:31:bd:2d:16:
                    17:1c:9e:6a:45:35:6d:b9:9c:51:2b:9d:85:62:21:
                    35:1e:67:97:0c:35:c7:2c:f9:d4:e6:02:f9:f5:75:
                    75:4e:83:a9:f1:c0:3d:63:ed:f0:95:ec:41:33:60:
                    b7:c6:07:64:65:2b:db:aa:57:74:c4:49:60:9d:5a:
                    72:31:26:e4:e5:1d:ed:00:10:ac:35:26:79:13:88:
                    ba:64:61:45:36:cd:04:bf:70:b9:8c:87:c7:84:16:
                    0a:29:0e:a9:75:c1:29:3e:77:e5:52:d9:52:c7:c1:
                    15:95:0e:8d:cb:31:e4:64:db:bd:0e:3d:87:29:7b:
                    31:dd:f8:dc:17:ab:2d:9b:9a:01:dc:c1:45:79:dc:
                    7b:a2:5c:ed:3f:58:f0:95:a1:5b:c0:da:8e:d0:d6:
                    39:c3:72:d8:41:64:2c:94:33:fd:86:78:2a:a5:de:
                    75:58:84:83:dc:89:0e:03:a2:d5:f2:9b:7d:5a:a8:
                    c8:c7:c1:b0:cb:cb:9b:56:cf:a7:13:1c:b6:24:5b:
                    4a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B6:EF:3A:C7:45:21:AE:6A:6A:08:9E:C1:55:48:37:79:16:D7:5E
            X509v3 Authority Key Identifier:
                keyid:8C:FA:88:06:3D:5C:0A:51:C1:D7:37:A5:17:03:38:86:5A:24:53:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/3130332e3132362e3230322e302f32332d3233203d3e20313338313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:cd:f6:92:48:50:1d:53:6e:4e:02:19:33:6c:83:d1:a8:30:
         8c:6e:24:48:f9:62:73:7e:db:f0:4d:9b:cc:b8:25:64:60:bc:
         fc:ac:26:65:c4:bf:86:c6:99:72:f0:32:2a:25:ed:4d:45:59:
         b8:79:e0:c8:f3:da:d1:d6:ea:11:02:5e:28:5f:5d:d8:52:1e:
         3d:84:95:80:af:d7:a9:30:d8:ed:76:ba:42:97:c5:86:1d:6a:
         fc:82:ea:dd:c5:c1:dd:4a:7b:98:e3:ca:0b:c9:80:d9:9e:f8:
         80:28:f0:90:06:b9:f2:f6:f0:fb:1b:12:3f:14:c8:52:88:ab:
         61:bc:b4:b1:b6:01:e9:92:2a:17:6a:17:c8:f8:c7:ee:82:9e:
         7c:ca:0e:48:56:73:49:40:3e:49:0c:48:46:6f:ff:fe:1e:ed:
         65:74:59:8f:47:81:79:29:01:d9:9e:1d:f8:f0:e1:cc:d6:2f:
         c2:15:c6:6a:19:14:e5:b9:57:76:88:c5:13:ae:3c:66:60:69:
         31:41:9b:e1:2a:bb:fd:89:f6:f4:69:16:e4:03:0b:0d:ec:75:
         6b:f3:31:1b:ed:ab:e4:dd:c0:b8:87:c7:68:47:28:ad:77:9e:
         0e:63:2f:69:64:72:77:6c:1d:52:cb:79:92:d9:9f:55:3b:cf:
         18:78:32:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:14:53 2025 by rpki-client