Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/3130332e3134382e3131302e302f32332d3233203d3e203436303332.roa
File:                     3130332e3134382e3131302e302f32332d3233203d3e203436303332.roa (raw, json)
Hash identifier:          RZtqlNtv9j/zdsR3rna/ubvTnfhlTuFaDhbJ7496Ge0=
Subject key identifier:   30:E3:97:9F:AE:5A:78:09:54:AF:A1:36:42:BA:01:B0:FE:7C:95:42
Certificate issuer:       /CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4
Certificate serial:       338FDBFAB9282B21C094CF0B4F98335EA2CB63
Authority key identifier: 5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/3130332e3134382e3131302e302f32332d3233203d3e203436303332.roa
Signing time:             Mon 02 Jun 2025 01:03:00 +0000
ROA not before:           Mon 02 Jun 2025 00:58:00 +0000
ROA not after:            Mon 01 Jun 2026 01:03:00 +0000
asID:                     46032
IP address blocks:        103.148.110.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl
                          rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 16:04:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:8f:db:fa:b9:28:2b:21:c0:94:cf:0b:4f:98:33:5e:a2:cb:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4
        Validity
            Not Before: Jun  2 00:58:00 2025 GMT
            Not After : Jun  1 01:03:00 2026 GMT
        Subject: CN=30E3979FAE5A780954AFA13642BA01B0FE7C9542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ae:2c:82:99:f0:02:2b:19:a6:90:25:79:f2:
                    17:c4:7b:0e:c5:f7:0f:aa:d1:d8:43:fb:64:66:91:
                    d4:1c:da:f0:1f:c6:ed:d0:40:4e:f3:67:8a:c0:01:
                    27:c4:b0:46:1f:e6:68:a1:59:9c:1a:5e:46:6d:f7:
                    6a:70:e2:37:56:c5:d7:1a:4c:ee:98:11:ca:41:74:
                    41:10:5f:b9:2c:c1:03:81:78:62:08:a4:d6:24:b7:
                    de:30:95:2f:9a:58:d7:88:bd:a9:3f:d4:3f:08:21:
                    32:12:ef:0b:53:7e:d7:63:62:48:69:5f:50:12:cc:
                    96:e5:5b:ae:52:a2:f0:21:2f:e6:e1:78:ce:b2:6d:
                    42:ce:ae:9c:e3:18:44:0b:ed:f5:1b:ed:e3:1f:34:
                    e8:b6:84:b8:7b:53:7e:0a:26:dc:a5:79:6f:84:6b:
                    26:43:fa:33:6b:fb:b9:22:61:8c:c9:40:ee:df:e3:
                    4d:f5:31:f1:00:d2:d3:5e:b1:75:67:3b:df:35:a5:
                    aa:56:c5:ea:f4:69:8a:b2:9e:e9:4f:69:79:9b:76:
                    7d:af:1b:f3:c1:99:18:9f:0e:11:7c:40:7a:b9:4a:
                    69:c9:44:b5:6f:ea:cb:a5:d4:f1:81:14:15:1a:c6:
                    68:1d:12:71:0e:0c:b3:a3:be:6a:8e:6a:c4:71:f4:
                    53:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E3:97:9F:AE:5A:78:09:54:AF:A1:36:42:BA:01:B0:FE:7C:95:42
            X509v3 Authority Key Identifier:
                keyid:5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/3130332e3134382e3131302e302f32332d3233203d3e203436303332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:41:14:57:b3:68:00:af:2a:99:2a:ac:a7:a9:24:63:ca:5b:
         db:06:a2:31:d8:2a:e2:38:95:8d:dd:21:5e:bd:87:96:2b:8a:
         ef:7f:1f:17:6a:3d:18:f5:b1:55:8c:9a:3d:2f:35:40:ee:25:
         9d:fd:c9:fb:47:2a:09:2a:3c:82:54:d4:4f:2e:87:d2:06:bd:
         9b:a0:c5:d6:f7:cd:4c:99:0c:65:e8:ca:87:8d:d1:69:a6:06:
         7e:7b:da:1b:dd:f5:ad:e7:65:b8:9d:da:41:18:b4:a8:cc:2a:
         4e:f7:9d:df:a5:da:9b:a6:a4:59:8c:b7:6e:6f:38:1d:8e:3d:
         84:d0:a1:eb:fe:15:e3:1d:89:4c:8b:07:d3:17:01:31:8a:a6:
         99:90:4d:a6:7f:c2:d2:d4:f8:cf:e4:27:bd:a8:b3:36:39:51:
         be:aa:c9:ae:94:e8:95:cc:81:b9:d1:04:3b:08:89:17:1f:b3:
         29:a5:a5:e0:36:81:94:d3:2c:d0:72:b1:7b:f3:93:67:b3:33:
         97:bf:e9:35:e2:6f:68:0b:32:f8:71:b1:b3:b3:ba:6a:34:51:
         22:dc:e2:b6:6b:59:c9:be:4c:72:18:52:12:9a:96:6b:30:cc:
         44:bc:23:26:68:97:53:84:2c:b4:5b:f1:e1:c1:e3:36:0a:34:
         20:39:02:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:20:40 2025 by rpki-client