Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e34382e302f32322d3232203d3e203633353031.roa
File:                     3130332e33392e34382e302f32322d3232203d3e203633353031.roa (raw, json)
Hash identifier:          fZDt9a5Bml3i+qD7LkBtRpcDmAleju+dsbR1q4FSMw4=
Subject key identifier:   D3:AB:8B:FD:C0:E4:2A:07:54:73:8D:2F:2B:15:45:2B:A5:7B:60:09
Certificate issuer:       /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial:       48E27060A3020B927AEF1B03F97CD3D67977668E
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e34382e302f32322d3232203d3e203633353031.roa
Signing time:             Sun 25 May 2025 17:00:02 +0000
ROA not before:           Sun 25 May 2025 16:55:02 +0000
ROA not after:            Sun 24 May 2026 17:00:02 +0000
asID:                     63501
IP address blocks:        103.39.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
                          rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 10:41:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:e2:70:60:a3:02:0b:92:7a:ef:1b:03:f9:7c:d3:d6:79:77:66:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
        Validity
            Not Before: May 25 16:55:02 2025 GMT
            Not After : May 24 17:00:02 2026 GMT
        Subject: CN=D3AB8BFDC0E42A0754738D2F2B15452BA57B6009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:22:29:87:ad:a7:5c:e1:67:65:a1:57:eb:9b:
                    3a:70:61:d5:b8:cf:fd:0e:86:85:a5:91:62:80:16:
                    c7:9e:42:44:50:e2:b9:37:ea:4d:46:f7:63:3f:73:
                    c2:95:3b:8d:ed:18:c0:d5:00:36:66:a3:58:b5:92:
                    7c:2f:dc:15:b4:68:e7:0e:2c:c2:7c:44:cd:6e:75:
                    92:fc:8a:d0:1e:16:6f:9f:07:a9:3c:22:c3:3c:b0:
                    c0:d6:ed:f1:68:59:b0:46:d1:a1:77:ba:27:9f:cb:
                    af:76:8c:8f:93:94:bc:7e:9a:3c:19:be:23:79:3f:
                    24:fa:c2:a2:d3:17:60:ab:75:93:4e:c8:f8:ba:57:
                    84:33:c7:09:7f:c2:9f:bf:85:5b:a7:9a:e7:d6:48:
                    ba:24:0c:98:db:27:43:a8:e4:2f:ec:4d:9c:3f:64:
                    21:06:fc:76:68:a0:dd:15:4e:b2:a8:2f:f9:37:50:
                    68:0d:48:09:18:4d:72:61:1e:cb:80:62:dc:70:e6:
                    13:d3:80:53:72:b9:55:b0:04:e0:95:57:3c:42:50:
                    44:f6:b7:7a:b1:eb:fa:1e:73:6d:b6:de:67:a5:5f:
                    ea:7e:dd:c4:8a:36:8e:7a:a5:42:f3:f6:48:09:e4:
                    6c:c0:ec:1b:56:cf:df:87:73:e5:11:40:5b:ff:45:
                    e1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:AB:8B:FD:C0:E4:2A:07:54:73:8D:2F:2B:15:45:2B:A5:7B:60:09
            X509v3 Authority Key Identifier:
                keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e34382e302f32322d3232203d3e203633353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bf:19:c3:69:fc:41:83:57:b8:12:73:60:90:b0:78:40:dc:bf:
         65:fe:d1:8c:07:1e:34:cc:07:a6:7c:9b:25:7a:1c:c9:a6:38:
         a8:39:74:62:15:f3:ab:92:fc:55:b2:6c:64:43:8d:f6:8c:c2:
         d4:96:ab:9e:f3:fe:fc:c8:e9:01:55:8a:da:ae:80:51:05:fe:
         8a:b1:6d:67:5a:2b:80:a4:7b:d9:62:a2:b4:ab:f2:53:62:59:
         a7:05:03:08:d3:73:cd:9d:87:32:2f:85:60:7c:0e:11:6d:45:
         4a:f3:b3:75:92:6b:07:1c:04:68:56:3e:0c:b7:48:3a:dc:4d:
         2d:fd:0a:f8:d5:e9:19:2b:ba:ab:e9:0b:06:78:1d:41:0a:31:
         d6:d7:7d:24:4d:60:d1:58:81:9b:58:e1:ff:95:d1:71:86:7a:
         3a:16:03:22:eb:39:e6:c0:61:ce:6d:c0:96:60:e4:56:8c:4a:
         69:d8:cc:3e:ad:08:a5:58:40:71:c9:7d:9f:0e:12:4a:b3:55:
         7e:9d:66:cf:31:19:3e:39:38:cc:3e:15:d9:0d:5f:a6:0d:d4:
         9d:95:b1:74:cc:e5:fb:28:70:55:55:5a:8b:98:d9:f2:92:aa:
         04:34:1f:4a:c7:d3:fa:ee:d2:e3:25:45:7e:a9:78:17:d7:da:
         09:7a:08:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:00:02 2025 by rpki-client