Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3130332e3139332e3131362e302f32322d3232203d3e203535363939.roa
File:                     3130332e3139332e3131362e302f32322d3232203d3e203535363939.roa (raw, json)
Hash identifier:          QRbMpzKdAfgfaj6wVJQ8tKGh3zUVZXKDZTbjWChNsSM=
Subject key identifier:   7E:62:BD:BF:A5:70:9A:F7:95:6D:CC:5D:68:2A:39:13:D0:4E:45:9F
Certificate issuer:       /CN=1976DD7D4FBDFBEB355F0B96690613959E106872
Certificate serial:       070253E37781ED507A49DE91482252EC2DE75B4A
Authority key identifier: 19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3130332e3139332e3131362e302f32322d3232203d3e203535363939.roa
Signing time:             Mon 02 Jun 2025 02:03:06 +0000
ROA not before:           Mon 02 Jun 2025 01:58:06 +0000
ROA not after:            Mon 01 Jun 2026 02:03:06 +0000
asID:                     55699
IP address blocks:        103.193.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl
                          rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 00:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:02:53:e3:77:81:ed:50:7a:49:de:91:48:22:52:ec:2d:e7:5b:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1976DD7D4FBDFBEB355F0B96690613959E106872
        Validity
            Not Before: Jun  2 01:58:06 2025 GMT
            Not After : Jun  1 02:03:06 2026 GMT
        Subject: CN=7E62BDBFA5709AF7956DCC5D682A3913D04E459F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:60:c4:4a:e5:f5:95:71:5b:29:72:55:f0:12:
                    62:35:1a:29:36:4b:ca:3f:39:12:f5:6e:fd:69:61:
                    c2:00:cf:52:24:09:41:c5:eb:ec:f8:fd:90:6c:c2:
                    61:32:c3:79:29:5b:2e:63:a3:c5:64:5b:07:40:01:
                    5c:47:bf:43:5b:6c:73:01:c0:0f:ae:79:89:e4:75:
                    3f:2e:4f:e3:e1:96:40:6c:15:61:55:67:49:8e:4c:
                    f5:08:a2:ee:ae:00:0a:3a:37:dd:de:20:16:c4:8e:
                    e7:3a:f0:17:50:25:d9:fe:06:4b:bc:43:2a:e4:93:
                    6b:25:06:5d:5c:c2:9a:c5:7c:ea:03:1b:8d:99:3e:
                    90:2e:37:ad:85:b7:99:b0:61:e0:1e:7d:b5:89:91:
                    6e:de:91:a8:51:7a:93:35:bc:c8:ab:fc:34:80:0f:
                    ed:33:ea:00:9d:91:99:db:e8:21:f3:20:af:66:0f:
                    19:29:90:7e:08:98:43:1a:4a:b3:d7:0f:33:df:2c:
                    d0:ae:cf:36:26:e7:a4:7b:e2:46:80:4f:5b:90:65:
                    6a:72:90:6b:51:d2:e4:9e:0c:73:94:66:f8:24:88:
                    69:d4:b1:27:cf:93:1a:f2:e9:f5:af:30:43:d4:84:
                    a6:e6:25:42:fd:de:c1:5c:9e:81:3e:46:5d:9b:73:
                    99:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:62:BD:BF:A5:70:9A:F7:95:6D:CC:5D:68:2A:39:13:D0:4E:45:9F
            X509v3 Authority Key Identifier:
                keyid:19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3130332e3139332e3131362e302f32322d3232203d3e203535363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.193.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:72:e7:c9:60:de:cd:bc:6c:31:3a:73:81:22:b1:ed:d6:b7:
         64:9f:70:9c:e0:7d:80:b3:c5:4c:04:38:22:ac:51:b4:32:59:
         cc:ce:59:d3:f7:70:35:df:03:ed:28:18:06:19:c3:fb:17:7f:
         0b:91:f8:e9:e5:4e:85:89:90:16:58:b2:b0:84:71:f9:ff:06:
         1a:c8:dc:29:ff:97:13:d1:30:28:85:49:68:54:45:ea:6d:f0:
         bc:5d:99:3c:d4:36:fe:ef:88:e8:8e:ba:5c:ba:dc:bc:13:05:
         3a:0a:4b:95:8c:84:bc:95:de:4a:b5:93:e0:c1:fc:a0:9c:9a:
         12:e8:1a:80:e2:ee:16:1d:a4:b2:b0:c0:c0:22:93:aa:2b:af:
         2c:9f:96:45:3f:9c:ed:e2:17:d4:d5:bc:45:8f:6e:7f:10:47:
         47:1f:13:90:6c:00:d6:d4:61:84:0b:d1:49:2d:86:c9:03:bd:
         52:74:6f:94:61:4d:42:01:22:a8:a0:8c:bb:d7:f3:f2:e3:a2:
         4f:14:01:ad:1f:8e:ed:75:59:ae:ff:d0:62:ad:ce:ca:15:e3:
         8f:90:4c:4f:a9:d7:4b:81:2a:83:60:8f:cd:d6:21:f6:b9:e1:
         46:25:ce:1b:5c:27:bf:bc:f6:cb:7c:1a:cf:6d:16:de:67:ac:
         c0:9b:b9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:46:41 2025 by rpki-client