Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/3130332e3134382e3131302e302f32332d3234203d3e2039333236.roa
File:                     3130332e3134382e3131302e302f32332d3234203d3e2039333236.roa (raw, json)
Hash identifier:          Ckdihridi5YgkHAHnE1gWSgdRJtPymHKAE3vS9CEVM0=
Subject key identifier:   59:95:5C:EC:51:86:3A:F3:91:D5:44:5E:0A:B4:CC:FD:DF:42:38:8D
Certificate issuer:       /CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4
Certificate serial:       2677B08DC67FD488BC82AD935FD50C3E780CBF42
Authority key identifier: 5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/3130332e3134382e3131302e302f32332d3234203d3e2039333236.roa
Signing time:             Fri 02 May 2025 04:00:00 +0000
ROA not before:           Fri 02 May 2025 03:55:00 +0000
ROA not after:            Fri 01 May 2026 04:00:00 +0000
asID:                     9326
IP address blocks:        103.148.110.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl
                          rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 15:06:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:77:b0:8d:c6:7f:d4:88:bc:82:ad:93:5f:d5:0c:3e:78:0c:bf:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4
        Validity
            Not Before: May  2 03:55:00 2025 GMT
            Not After : May  1 04:00:00 2026 GMT
        Subject: CN=59955CEC51863AF391D5445E0AB4CCFDDF42388D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:52:fe:76:ea:31:90:7c:6e:47:17:2e:f9:4f:
                    3b:e5:76:7c:b7:99:4f:b3:b5:07:ce:9c:03:51:36:
                    2b:63:92:03:60:4d:86:19:5c:79:9d:8a:ed:22:f2:
                    b8:0a:9d:0d:4d:30:9c:90:2a:4a:bc:67:ac:53:66:
                    d9:7f:53:5e:b8:f7:f3:a0:89:02:5e:c7:6d:20:23:
                    52:23:c8:ca:8a:b5:05:8f:f0:03:4a:c6:b1:c0:1d:
                    7f:24:10:59:19:7e:88:f5:3a:8a:25:83:42:83:fb:
                    b3:7a:9f:bb:77:03:e2:bd:40:be:ee:a3:d8:ef:e5:
                    6a:e1:89:e5:c4:d4:45:47:1a:ea:ed:0b:fa:b8:f3:
                    2b:98:01:f2:c2:22:87:a8:1d:fe:92:40:05:81:c2:
                    04:c1:0a:80:10:57:9d:35:4a:40:ec:a3:a6:52:da:
                    dd:8a:9b:d7:16:4f:99:c5:b8:71:72:df:c9:6c:2d:
                    ff:23:0b:86:ee:a6:87:d5:e8:fc:89:a8:3c:b9:83:
                    40:7d:10:5a:f2:2f:b1:e9:97:8e:5c:e9:7a:70:07:
                    64:b4:ff:4c:f8:27:b8:bd:89:ee:7b:2b:98:e5:d6:
                    f0:83:b5:fb:9c:77:1e:0c:f5:06:0f:43:3c:b9:44:
                    e3:5c:79:a4:3d:4d:6a:0e:c7:04:fc:fa:40:32:7f:
                    7b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:95:5C:EC:51:86:3A:F3:91:D5:44:5E:0A:B4:CC:FD:DF:42:38:8D
            X509v3 Authority Key Identifier:
                keyid:5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/3130332e3134382e3131302e302f32332d3234203d3e2039333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:8d:a0:8e:cf:8e:a3:82:46:e8:e6:f0:50:79:df:4e:c2:aa:
         9e:ef:01:15:84:2c:0b:f8:ba:b9:a6:88:9d:e7:b8:69:27:71:
         84:c1:00:88:ee:e3:88:22:4e:81:26:88:b4:39:50:5f:b5:34:
         28:da:da:55:05:a0:e7:46:ed:3b:e7:c4:a1:0d:55:43:e1:12:
         cd:c2:af:0a:d5:cb:6f:2b:dc:48:f2:f9:6d:97:70:60:e7:00:
         0f:06:c6:45:6e:24:b1:30:dd:bc:5d:90:6c:ce:b8:0f:2a:ca:
         32:7d:40:f4:8c:be:fc:9b:26:47:c6:e1:a3:a4:ee:c8:d4:2b:
         04:be:b2:59:c1:e7:31:81:64:71:5a:5f:24:fa:3e:db:ca:89:
         b0:ca:a9:4f:7a:f0:3b:b4:cc:d4:34:01:db:85:a5:43:fe:20:
         9f:67:03:d4:1a:e5:1d:ec:04:6a:c4:65:5a:9b:2c:b5:b6:4b:
         3f:ed:bc:75:f1:03:48:d3:0a:15:f0:c0:1c:f8:ab:c2:c9:48:
         06:0f:9d:1d:bf:4a:7b:44:b8:4f:ca:31:a6:09:8c:02:73:1e:
         4b:60:1c:03:85:29:37:4e:96:46:2d:ff:a1:63:af:b2:2f:63:
         11:3f:92:bb:b9:5a:b5:c5:97:40:cc:1c:cf:f1:4e:bb:3e:e3:
         b7:b7:09:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:27:40 2025 by rpki-client