Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3130332e3133382e302f32342d3234203d3e20313338383138.roa
File:                     3130332e3130332e3133382e302f32342d3234203d3e20313338383138.roa (raw, json)
Hash identifier:          VgDUrmnqScAuLKPWIBCNW2XKtjbn0edxx7HC7UhTNi4=
Subject key identifier:   E0:1F:48:45:00:6D:A9:38:51:4E:D2:2C:E4:17:0B:52:50:11:A1:D0
Certificate issuer:       /CN=084550E9619FF5ABD20864D9A6383053B59BF91E
Certificate serial:       14CC62E663921025B1EFEAF8E08C473B47C258AB
Authority key identifier: 08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3130332e3133382e302f32342d3234203d3e20313338383138.roa
Signing time:             Fri 16 May 2025 06:00:01 +0000
ROA not before:           Fri 16 May 2025 05:55:01 +0000
ROA not after:            Fri 15 May 2026 06:00:01 +0000
asID:                     138818
IP address blocks:        103.103.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl
                          rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 11:14:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:cc:62:e6:63:92:10:25:b1:ef:ea:f8:e0:8c:47:3b:47:c2:58:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084550E9619FF5ABD20864D9A6383053B59BF91E
        Validity
            Not Before: May 16 05:55:01 2025 GMT
            Not After : May 15 06:00:01 2026 GMT
        Subject: CN=E01F4845006DA938514ED22CE4170B525011A1D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:be:84:89:5e:13:f4:23:e7:68:c7:a7:8f:d5:
                    73:97:5a:91:08:cc:0f:a3:4c:5d:f4:2e:b6:cb:71:
                    6a:76:68:64:1b:fd:3d:eb:70:8e:50:d0:8f:0c:60:
                    8d:7d:fc:5e:ab:2d:dd:67:bf:e5:23:a3:b7:d4:ca:
                    62:c4:46:95:26:75:00:cf:be:c1:7d:9d:fa:53:60:
                    ce:1d:96:1c:35:a3:03:76:05:fe:b3:8c:9b:c5:07:
                    3d:f3:ef:7e:4a:6f:4c:c0:81:5b:c5:9a:08:85:1e:
                    70:d1:af:86:7b:c6:d6:68:81:47:94:cc:7f:48:0c:
                    24:0d:04:95:97:74:a6:83:8f:a8:a7:4c:2d:1f:f1:
                    d5:4b:16:db:f0:b1:d8:32:cf:14:e2:cc:9d:9b:f2:
                    4e:72:32:4f:72:dd:b6:49:38:4d:05:6a:c9:71:ea:
                    40:d2:5a:29:e8:da:8f:e0:8a:02:5c:cd:16:79:23:
                    17:47:53:98:30:1c:e4:ca:8f:72:a8:6a:7d:67:97:
                    a3:8c:46:8a:a4:b1:24:39:df:c2:93:1b:ae:9b:b9:
                    d6:42:ec:05:b2:6b:70:15:b4:72:b5:3d:15:3e:ea:
                    d0:f1:22:ee:e2:d8:12:83:eb:b2:9b:62:95:a9:c0:
                    fd:9c:89:1b:37:dd:73:81:8c:38:4b:4d:07:38:1a:
                    0e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:1F:48:45:00:6D:A9:38:51:4E:D2:2C:E4:17:0B:52:50:11:A1:D0
            X509v3 Authority Key Identifier:
                keyid:08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3130332e3133382e302f32342d3234203d3e20313338383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:d1:ff:ca:d5:6b:34:41:8a:3d:cb:3e:2a:54:d1:b8:80:9e:
         de:24:e9:87:55:d7:70:13:5c:1e:69:02:0c:ba:55:20:13:8e:
         00:ac:6e:80:39:35:23:72:8a:e0:b6:eb:85:01:72:35:06:2e:
         1b:b9:72:95:27:bf:8d:f6:2a:6b:a7:7f:97:7b:9f:68:bf:0f:
         08:bd:a2:16:46:55:d4:b3:9f:0d:66:0a:ae:79:a7:e8:12:2a:
         17:5b:24:15:72:67:72:a3:e0:21:d3:73:6d:06:9d:45:33:29:
         c0:f5:71:a5:49:e6:97:8c:1d:fa:26:65:53:2e:22:f4:9e:3a:
         8e:e4:cf:5b:fa:a6:d6:4a:1a:87:ed:1f:89:d9:78:f7:5b:04:
         0e:72:52:8e:e6:f8:9a:c5:18:ec:ea:dd:c3:75:d0:20:e8:3a:
         66:c0:e1:68:b8:86:c3:dd:54:cc:0c:91:46:ad:7f:6c:13:fa:
         21:b8:dc:18:e7:f7:f0:16:56:af:ff:60:0a:a1:d3:ff:d2:a6:
         aa:e8:a0:45:92:7b:0c:73:07:a9:64:68:6f:7d:73:a7:67:b5:
         1e:03:9a:eb:c4:e8:ba:f9:9e:c6:e3:ee:c4:eb:d3:f7:bd:db:
         55:e0:f0:3c:93:e5:20:42:74:08:d0:93:ba:b4:d2:0a:b3:0e:
         a2:08:53:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:35:39 2025 by rpki-client