Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/3130332e3134342e32322e302f32342d3234203d3e20313333383339.roa
File:                     3130332e3134342e32322e302f32342d3234203d3e20313333383339.roa (raw, json)
Hash identifier:          llGSDUYqSL3OD7TtVsp6ArCR8mqRzLPhfJs1tW9L5wg=
Subject key identifier:   16:15:A3:C2:31:49:E1:2B:50:D9:82:3A:CD:35:C6:F0:C5:6A:82:A3
Certificate issuer:       /CN=C7D4D30314160FDACB9582CF972E90EC10AE206F
Certificate serial:       6256EBE29E07752B0379D85DECE8D33603114A95
Authority key identifier: C7:D4:D3:03:14:16:0F:DA:CB:95:82:CF:97:2E:90:EC:10:AE:20:6F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7D4D30314160FDACB9582CF972E90EC10AE206F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/3130332e3134342e32322e302f32342d3234203d3e20313333383339.roa
Signing time:             Mon 02 Jun 2025 02:03:58 +0000
ROA not before:           Mon 02 Jun 2025 01:58:58 +0000
ROA not after:            Mon 01 Jun 2026 02:03:58 +0000
asID:                     133839
IP address blocks:        103.144.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.crl
                          rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7D4D30314160FDACB9582CF972E90EC10AE206F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 18:14:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:56:eb:e2:9e:07:75:2b:03:79:d8:5d:ec:e8:d3:36:03:11:4a:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7D4D30314160FDACB9582CF972E90EC10AE206F
        Validity
            Not Before: Jun  2 01:58:58 2025 GMT
            Not After : Jun  1 02:03:58 2026 GMT
        Subject: CN=1615A3C23149E12B50D9823ACD35C6F0C56A82A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:af:8e:74:de:87:49:a0:1f:00:9a:32:ac:c3:
                    d3:f4:f5:15:e4:10:9d:3d:0e:b2:78:4e:5c:ff:4c:
                    e4:4c:6b:3f:c0:5e:d4:a0:41:9e:e5:cc:49:fd:0b:
                    c2:c4:bb:7e:3d:22:38:e6:db:1c:6e:07:c7:76:1f:
                    77:af:30:cb:77:5b:3f:50:ea:55:16:b4:7f:51:a5:
                    76:66:2e:67:7d:d0:c1:28:3d:1e:63:a4:00:81:00:
                    f8:30:6e:4f:69:e2:14:2b:44:39:e7:ad:54:03:0e:
                    40:8f:23:a4:5b:09:c4:60:6f:9e:bb:2a:03:80:36:
                    b0:b4:cd:96:6c:15:af:97:dc:ff:22:c5:43:e7:8c:
                    0e:a5:76:9b:88:7d:0e:d7:9a:cf:73:6d:bf:2a:2e:
                    dc:b8:4a:dd:06:6f:4c:80:db:91:ee:5c:b3:9b:fb:
                    77:f5:4e:62:a1:62:82:69:29:d8:16:45:f2:11:ae:
                    f9:dc:1f:a7:4b:29:a7:59:5e:4c:20:1f:b9:d3:a0:
                    74:38:c3:40:9b:bc:0b:af:09:13:9a:2c:8e:03:be:
                    b4:aa:b7:78:a2:5a:80:ed:af:6c:6a:b4:c9:f7:ed:
                    d3:90:4d:04:84:0d:1c:70:f7:99:b6:5f:25:27:9e:
                    1b:49:bc:de:31:b5:e6:98:3f:a8:05:5e:18:01:91:
                    d0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:15:A3:C2:31:49:E1:2B:50:D9:82:3A:CD:35:C6:F0:C5:6A:82:A3
            X509v3 Authority Key Identifier:
                keyid:C7:D4:D3:03:14:16:0F:DA:CB:95:82:CF:97:2E:90:EC:10:AE:20:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7D4D30314160FDACB9582CF972E90EC10AE206F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/3130332e3134342e32322e302f32342d3234203d3e20313333383339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:22:a5:37:90:1a:7f:5c:a0:29:86:f9:97:fa:72:ff:98:ff:
         3a:58:0b:60:46:fd:2b:cc:58:48:49:46:52:c4:6e:52:95:95:
         56:a4:3f:92:06:63:8c:76:c0:54:12:01:57:e7:aa:22:5c:4f:
         56:96:2b:63:70:1a:0f:ca:4d:d2:15:aa:a3:25:a1:1c:74:e0:
         75:2f:2c:6e:97:6f:06:c2:3f:8a:4f:28:5a:04:f2:31:fc:02:
         4d:12:f7:68:bf:fd:83:c0:79:dc:97:51:ce:cb:f9:cf:a3:70:
         4d:f6:8e:fa:78:8c:64:bc:00:9c:81:0a:85:19:e8:e7:49:84:
         d8:f3:68:5f:8b:f4:87:2c:de:49:1b:ed:37:18:f8:78:c8:60:
         3c:53:ff:3d:5a:53:9c:3e:6b:c9:b2:f9:11:7f:f8:9d:e4:29:
         b5:98:f5:08:cd:41:2c:59:1a:a4:c6:a9:8e:ab:6b:5c:23:c5:
         80:e1:0d:cf:38:df:23:7d:82:05:03:e5:b5:26:cb:80:ae:2e:
         c7:b6:f1:67:61:b6:60:5c:16:da:a0:05:e4:88:fc:88:ee:2c:
         61:e7:fc:e2:8a:68:c5:b4:4f:8a:8d:c8:63:42:79:79:28:39:
         c3:05:08:2e:80:d7:72:24:68:ba:b6:bb:5d:af:d4:89:13:d6:
         08:15:92:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:06:24 2025 by rpki-client