Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3130332e38352e3134382e302f32322d3234203d3e203137393935.roa
File:                     3130332e38352e3134382e302f32322d3234203d3e203137393935.roa (raw, json)
Hash identifier:          /Wu0u/CMc+T4gs0PJO0n7WC2osLR58ve83c3OfRxI5E=
Subject key identifier:   0D:B2:6F:48:8E:87:09:6C:13:0E:A7:19:A0:73:81:0B:DB:82:32:1B
Certificate issuer:       /CN=3EDBB7844714C545CED724120ED0E5A34EFB45EE
Certificate serial:       7E42C83A2A6CBAF0874BD3B00689E2E4C41BB99E
Authority key identifier: 3E:DB:B7:84:47:14:C5:45:CE:D7:24:12:0E:D0:E5:A3:4E:FB:45:EE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3130332e38352e3134382e302f32322d3234203d3e203137393935.roa
Signing time:             Mon 02 Jun 2025 02:04:32 +0000
ROA not before:           Mon 02 Jun 2025 01:59:32 +0000
ROA not after:            Mon 01 Jun 2026 02:04:32 +0000
asID:                     17995
IP address blocks:        103.85.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl
                          rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 21:14:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:42:c8:3a:2a:6c:ba:f0:87:4b:d3:b0:06:89:e2:e4:c4:1b:b9:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EDBB7844714C545CED724120ED0E5A34EFB45EE
        Validity
            Not Before: Jun  2 01:59:32 2025 GMT
            Not After : Jun  1 02:04:32 2026 GMT
        Subject: CN=0DB26F488E87096C130EA719A073810BDB82321B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c1:87:ca:58:af:ef:60:d1:ec:c3:6e:aa:aa:
                    ab:00:32:90:56:b1:ac:72:d0:96:ea:00:af:95:0d:
                    2f:f2:56:4e:df:1e:a3:15:2f:c3:d1:00:93:32:28:
                    8c:52:ee:4e:62:73:b1:ed:83:41:37:37:0e:c4:57:
                    8b:fa:04:41:de:57:b0:a2:40:5f:73:8c:73:a5:ef:
                    1f:d9:7f:d9:3c:88:23:27:c2:ea:b9:b7:e2:89:e5:
                    08:12:fc:c6:a9:90:a9:bd:3a:91:96:c2:41:d4:15:
                    80:dc:fc:7d:b6:44:47:0a:4b:74:3d:79:c7:a5:91:
                    ee:ac:94:dd:8b:9d:24:fa:c6:b6:12:96:6c:97:42:
                    17:d4:6a:7d:c4:67:b1:42:e9:9d:5d:3c:84:68:0e:
                    f3:9f:fd:30:7d:7b:0e:80:fc:b9:aa:91:0e:a9:5c:
                    64:8b:1d:45:1c:be:f8:f1:e8:78:b3:e6:a9:68:ec:
                    86:1c:fa:f9:69:ef:c7:5f:84:6b:a0:6f:1a:92:df:
                    30:cf:17:57:7d:0f:cd:e0:9f:72:b4:9c:76:fe:49:
                    c5:8c:c7:62:8d:91:ff:21:93:5f:87:a8:3f:50:83:
                    c3:d8:90:d7:8a:71:3b:bd:cc:51:f0:5d:06:62:49:
                    fd:ea:b8:d2:28:b8:02:8f:bc:d1:38:cb:95:a3:83:
                    3b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B2:6F:48:8E:87:09:6C:13:0E:A7:19:A0:73:81:0B:DB:82:32:1B
            X509v3 Authority Key Identifier:
                keyid:3E:DB:B7:84:47:14:C5:45:CE:D7:24:12:0E:D0:E5:A3:4E:FB:45:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3130332e38352e3134382e302f32322d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:88:f3:90:b6:4a:cf:34:72:c4:72:b6:46:20:ab:e7:d9:40:
         b2:91:2a:f8:4f:f2:de:45:40:ff:af:76:e5:0f:e0:9f:b5:13:
         14:f0:f2:50:da:de:7f:97:8b:bb:37:14:d7:a2:74:96:2a:a7:
         ee:03:3e:92:ac:89:44:f0:97:37:cb:c8:dc:5a:7b:5e:f4:61:
         7d:54:79:30:ac:cf:f6:d9:17:3f:f0:38:b0:ee:a8:4c:ce:f0:
         28:19:33:7f:1f:3b:ea:3a:b4:b2:13:2c:58:21:58:34:59:48:
         db:41:32:37:80:e2:5f:58:4f:8b:5b:a8:0b:e6:dc:dd:d8:7e:
         ba:e0:73:82:9b:08:35:56:c7:65:1d:8d:a0:e1:68:78:75:b8:
         a0:dd:dc:f8:a3:55:ca:b7:0f:c9:0d:3d:6e:3d:d4:f6:69:02:
         2a:a1:9a:64:75:53:c1:bb:32:38:92:5c:ce:a3:23:68:2a:e9:
         c4:7f:09:d0:dd:0b:5c:b4:9f:3f:f7:aa:61:a0:59:e3:dd:5a:
         1b:63:6f:25:ba:a1:a9:97:bc:17:d0:12:70:a6:62:f1:a2:03:
         9b:e4:a1:17:98:85:66:ec:48:de:a2:d7:93:e4:a8:99:89:73:
         f5:b8:24:05:49:a1:6f:48:a6:1b:17:34:d1:65:8f:1d:66:a4:
         b2:2e:4f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:47:13 2025 by rpki-client