Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36312e302f32342d3234203d3e20313338303739.roa
File:                     3130332e3133302e36312e302f32342d3234203d3e20313338303739.roa (raw, json)
Hash identifier:          VmKn4H92OZlUtnRAAPlH3DAWvPgKEL7aXZz1kY1YrQ0=
Subject key identifier:   B7:10:22:2F:1E:10:47:9D:17:DA:87:54:46:04:E5:B9:F5:E7:30:30
Certificate issuer:       /CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52
Certificate serial:       688EB436CED660213867B1B9833A892EF421387F
Authority key identifier: E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36312e302f32342d3234203d3e20313338303739.roa
Signing time:             Mon 02 Jun 2025 02:03:29 +0000
ROA not before:           Mon 02 Jun 2025 01:58:29 +0000
ROA not after:            Mon 01 Jun 2026 02:03:29 +0000
asID:                     138079
IP address blocks:        103.130.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl
                          rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 22:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:8e:b4:36:ce:d6:60:21:38:67:b1:b9:83:3a:89:2e:f4:21:38:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52
        Validity
            Not Before: Jun  2 01:58:29 2025 GMT
            Not After : Jun  1 02:03:29 2026 GMT
        Subject: CN=B710222F1E10479D17DA87544604E5B9F5E73030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b1:c9:1b:f6:a9:78:bd:ea:fc:7a:eb:79:0a:
                    ed:6b:64:9e:4b:60:ef:b0:bc:42:5b:0c:a5:77:4f:
                    e5:db:bc:49:31:31:43:92:fb:4f:04:e5:24:60:28:
                    96:1a:27:ba:b8:93:14:15:16:8c:a0:59:9d:58:8b:
                    e3:1e:98:27:c4:b7:3e:a7:2f:6a:46:a5:e1:e9:39:
                    e1:80:33:2c:93:1b:84:54:40:19:fe:c0:ec:22:29:
                    2c:2f:ed:bd:21:17:0f:ab:44:a6:d7:52:1e:96:b8:
                    ef:c1:2d:7b:5f:12:7b:2e:b9:69:7c:ea:69:96:5b:
                    cd:01:5c:07:a6:a3:7f:a8:1a:b2:e2:17:36:95:9f:
                    3d:a9:f0:66:0f:5d:04:89:72:e2:7d:62:3c:d9:e5:
                    02:a9:01:8a:e7:2c:8e:6d:eb:fa:42:e7:1d:b1:ef:
                    55:60:8b:a6:85:28:a5:17:74:01:9f:ff:d8:99:94:
                    94:03:0c:49:de:be:96:d9:3c:92:84:77:39:71:1f:
                    ef:c5:56:a0:b1:28:11:bb:15:d3:29:b2:59:de:ef:
                    13:af:14:b0:fb:9e:85:9f:b6:60:2b:a7:92:6f:ae:
                    f1:15:42:58:e9:35:5a:c0:eb:7c:92:a3:3a:3c:78:
                    b1:78:46:89:e7:be:6e:fe:f3:df:13:86:6d:bf:ad:
                    25:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:10:22:2F:1E:10:47:9D:17:DA:87:54:46:04:E5:B9:F5:E7:30:30
            X509v3 Authority Key Identifier:
                keyid:E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36312e302f32342d3234203d3e20313338303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:d3:30:1e:e1:79:ba:36:b6:03:2a:43:2e:d7:bf:88:a4:51:
         eb:d9:51:01:6d:84:01:f1:98:0e:5f:4e:23:be:b9:c4:27:f0:
         94:69:04:91:4e:78:2e:b7:ac:b5:b8:03:ec:17:5a:c0:75:b2:
         63:6d:91:61:5b:da:16:4f:f6:eb:89:ac:a3:44:65:b6:a4:cc:
         a4:9a:ba:2c:72:1c:ba:96:35:16:42:7d:1b:22:41:64:46:07:
         fa:48:57:63:43:f1:e4:cc:cb:6b:5b:03:e0:64:fb:58:60:a0:
         f8:4b:1a:a3:53:d0:33:31:bb:d2:8f:8d:2e:a7:ce:ce:ea:24:
         e8:70:63:66:27:ef:ed:59:99:1e:63:92:d2:5e:a8:26:8c:38:
         69:92:5b:97:19:f4:fc:24:9f:41:7f:35:a0:a4:b6:0e:23:75:
         2c:26:50:20:e7:67:27:47:c9:6b:07:d1:60:b3:28:1c:2e:e7:
         0b:4d:aa:8e:3c:e9:f2:76:fe:58:fb:44:4c:7e:93:ef:6a:b6:
         5f:fb:1e:b1:57:5e:27:10:94:ad:88:a3:fa:d7:95:0b:f0:da:
         eb:9d:9b:21:db:59:f0:38:ee:dc:f5:c1:91:c3:6d:b1:6b:30:
         77:5e:03:56:ca:38:16:63:4e:44:9a:e8:aa:71:9c:e8:ad:5f:
         c8:32:3a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:48:00 2025 by rpki-client