Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/3130332e39372e3131312e302f32342d3234203d3e203538383230.roa
File:                     3130332e39372e3131312e302f32342d3234203d3e203538383230.roa (raw, json)
Hash identifier:          LVzLvHlGvkclluFVEiY44EndzlPbN92fYYJEvFwmUZU=
Subject key identifier:   DA:7F:1D:2E:E0:0A:69:03:D1:D7:63:02:56:20:33:A1:56:24:7D:A9
Certificate issuer:       /CN=F318D15D68E63CEBE4BFA026A5269F3877BE13C1
Certificate serial:       6DB00047FF97DB4ACDC8BC4AC55D39292AA2FAD6
Authority key identifier: F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/3130332e39372e3131312e302f32342d3234203d3e203538383230.roa
Signing time:             Mon 02 Jun 2025 02:04:59 +0000
ROA not before:           Mon 02 Jun 2025 01:59:59 +0000
ROA not after:            Mon 01 Jun 2026 02:04:59 +0000
asID:                     58820
IP address blocks:        103.97.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl
                          rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 11:20:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:b0:00:47:ff:97:db:4a:cd:c8:bc:4a:c5:5d:39:29:2a:a2:fa:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F318D15D68E63CEBE4BFA026A5269F3877BE13C1
        Validity
            Not Before: Jun  2 01:59:59 2025 GMT
            Not After : Jun  1 02:04:59 2026 GMT
        Subject: CN=DA7F1D2EE00A6903D1D76302562033A156247DA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:7b:4b:48:24:62:8b:e3:c4:3e:8b:c3:f5:f8:
                    c3:15:c5:93:4b:7b:b2:1a:b7:7b:f3:05:f0:09:e8:
                    30:90:dc:62:06:1d:93:3d:25:4a:05:89:7e:bb:f1:
                    03:20:b0:c8:6d:8f:22:7f:40:30:8b:b6:e8:6c:86:
                    9a:5c:c4:20:bf:a8:34:a6:ba:6f:29:58:70:75:d2:
                    c4:2f:d5:bc:7f:98:08:30:ac:d1:e5:22:10:de:2c:
                    ba:38:b7:2e:58:cb:cd:c3:c2:41:07:f8:06:c2:37:
                    1a:55:d5:33:8a:52:a2:84:f7:31:89:d5:37:55:68:
                    60:3c:d1:81:87:fa:54:50:e7:4e:7b:6b:5e:8a:f6:
                    d8:16:a2:13:4c:4a:b2:a6:62:65:a2:2f:4d:e5:38:
                    e4:ae:fe:0d:dc:33:57:6e:a5:83:4e:f7:0a:06:91:
                    ab:10:01:73:00:63:8c:01:9a:69:b1:71:2d:79:63:
                    e8:5c:60:81:0a:d4:6f:98:f1:37:14:84:e3:45:15:
                    2c:e5:49:c3:57:c9:c4:7f:19:18:2d:5c:0d:67:68:
                    d1:94:40:15:14:ee:9b:e6:c3:90:50:d2:07:31:ea:
                    29:b1:9f:63:19:68:b3:16:ac:6b:e1:27:91:f1:bd:
                    a9:ed:9a:01:31:e6:05:b9:20:9d:d3:50:fb:ac:e8:
                    e4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:7F:1D:2E:E0:0A:69:03:D1:D7:63:02:56:20:33:A1:56:24:7D:A9
            X509v3 Authority Key Identifier:
                keyid:F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/3130332e39372e3131312e302f32342d3234203d3e203538383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:06:2c:00:a3:1a:ee:1a:5a:de:be:00:25:31:d2:b6:4d:54:
         0f:ab:06:8d:c9:cb:f9:00:cb:2c:2e:e2:89:fb:8f:1b:df:35:
         d6:d0:53:b3:7d:9a:6a:b9:a6:69:ba:e0:ee:c3:f7:8e:84:d4:
         69:8a:2b:68:57:8a:07:fc:b0:d0:4c:8e:cf:2c:64:66:37:88:
         30:4b:fc:33:11:8a:c2:2a:dc:3d:59:f7:7e:90:63:09:89:ba:
         db:c5:ff:77:4d:02:1f:7c:a6:0d:39:58:f2:3a:43:6d:ea:bf:
         0a:3f:37:e3:7f:17:02:35:24:60:82:ad:14:13:e6:21:71:84:
         cb:1e:24:09:61:b8:a0:8e:b7:f9:db:7f:fb:fd:50:61:0b:86:
         a6:9e:c3:d1:71:6a:a2:b3:ed:da:b8:76:c6:93:74:5e:f7:48:
         33:ff:fb:67:45:4c:f9:e5:3b:31:49:5d:04:db:0c:51:f7:c7:
         8a:c0:8a:94:60:c3:cd:87:69:d6:ce:d6:97:64:2f:35:10:57:
         d7:91:7d:f3:28:a7:c9:f0:82:7e:63:c9:3b:e9:88:9c:4a:a4:
         1b:58:f5:49:71:64:42:f6:04:f4:e7:e4:5b:db:6c:14:71:dc:
         15:a6:d8:c8:70:45:3d:b8:29:99:5f:67:78:1e:5c:d1:24:2f:
         2e:3f:80:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:44:25 2025 by rpki-client