Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/3130332e3132372e3134342e302f32342d3234203d3e203633383732.roa
File:                     3130332e3132372e3134342e302f32342d3234203d3e203633383732.roa (raw, json)
Hash identifier:          dT1Ez91RELEcb3/us3FXp8X3LrIGPlHAyCw3ou4h/Pw=
Subject key identifier:   A0:44:C3:46:EE:9E:EA:C3:C5:2D:4A:BA:7B:82:E2:05:C7:20:95:D1
Certificate issuer:       /CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19
Certificate serial:       2EE82092A946ED8B0C44A3A48CC2A284A3DA5E6D
Authority key identifier: 6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/3130332e3132372e3134342e302f32342d3234203d3e203633383732.roa
Signing time:             Mon 02 Jun 2025 02:04:50 +0000
ROA not before:           Mon 02 Jun 2025 01:59:50 +0000
ROA not after:            Mon 01 Jun 2026 02:04:50 +0000
asID:                     63872
IP address blocks:        103.127.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl
                          rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 13:58:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:e8:20:92:a9:46:ed:8b:0c:44:a3:a4:8c:c2:a2:84:a3:da:5e:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19
        Validity
            Not Before: Jun  2 01:59:50 2025 GMT
            Not After : Jun  1 02:04:50 2026 GMT
        Subject: CN=A044C346EE9EEAC3C52D4ABA7B82E205C72095D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5c:0d:c7:9d:36:d5:51:5a:1b:09:21:e1:1b:
                    fe:8f:b7:0f:32:d2:02:e1:4c:35:26:51:f3:79:37:
                    24:d4:c3:dd:40:b0:d6:f4:0e:c0:88:00:e5:16:44:
                    e5:74:0d:bf:5b:43:c7:16:e8:f1:9c:43:50:44:5b:
                    54:a9:13:ff:56:7a:3b:39:e6:d9:9a:83:79:42:94:
                    03:85:f0:a2:9a:32:0b:2a:a5:e8:d8:70:ff:8f:0f:
                    04:18:d6:ab:a3:83:51:9e:36:02:fd:bd:6c:a8:3f:
                    3f:dd:be:7c:a9:73:22:d1:ec:11:69:09:4f:3d:2c:
                    19:80:0e:ed:e3:ca:a1:39:65:bb:66:25:27:79:32:
                    39:c4:28:db:3c:bf:6a:1c:0a:df:64:6b:d6:79:88:
                    51:7d:e2:5d:41:3f:39:87:bc:4e:ce:3a:9b:8c:6a:
                    66:21:dc:60:61:7c:5a:6b:a0:07:29:ae:e9:81:3d:
                    55:fe:ca:81:e5:e7:4a:e6:7f:af:2a:35:cf:d7:f9:
                    24:32:48:83:a8:be:d0:8b:8a:3a:4d:37:da:42:6c:
                    58:6f:fc:7a:99:49:d3:71:03:4f:23:e4:00:52:62:
                    d7:1e:70:8d:79:94:87:cb:f3:62:43:52:15:c6:4f:
                    f1:0a:53:59:ac:5a:1a:fa:a5:b9:42:4f:48:b1:2b:
                    93:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:44:C3:46:EE:9E:EA:C3:C5:2D:4A:BA:7B:82:E2:05:C7:20:95:D1
            X509v3 Authority Key Identifier:
                keyid:6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/3130332e3132372e3134342e302f32342d3234203d3e203633383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:97:d7:9e:70:12:2c:e9:19:ec:8f:4a:4b:11:02:c1:7c:f8:
         55:c3:f3:1e:43:da:39:f8:44:2d:14:40:76:99:9b:ce:3f:bb:
         24:28:b9:fb:45:71:c2:f0:23:21:82:13:16:da:4f:04:bb:fb:
         e2:ed:ec:12:82:ff:06:65:ac:bc:80:d5:6b:91:8e:7c:03:60:
         8c:fb:c0:e5:03:14:40:f4:2f:ce:78:8c:8b:60:1f:05:4f:2f:
         e3:5e:71:b5:dc:6d:41:48:50:71:76:c0:fe:5a:3e:39:aa:90:
         10:72:58:6c:b8:87:e2:36:33:a3:8f:16:eb:15:01:50:de:dd:
         12:fb:e3:2c:0a:fa:97:d5:e7:fd:e7:0c:df:45:ae:a4:c6:6c:
         b8:c7:e8:05:57:9e:5f:86:e8:20:3d:e7:db:58:f4:df:77:15:
         a3:13:44:0b:e8:9f:b5:76:0e:1b:9e:2a:77:ba:70:b6:d7:6d:
         f4:81:c9:08:0d:72:34:b2:b1:77:cd:7c:a1:08:45:41:e2:92:
         84:02:cb:2d:7c:21:ee:80:b1:56:75:20:7c:b2:83:69:dc:3f:
         a9:36:48:6a:c9:ba:7b:cf:20:32:f7:28:88:a1:63:e1:95:1d:
         3b:90:63:06:c5:b0:71:86:f0:af:9e:22:6c:a2:50:dc:9e:cd:
         16:52:43:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:02:24 2025 by rpki-client