Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/3130332e3134312e32312e302f32342d3234203d3e20313338383837.roa
File:                     3130332e3134312e32312e302f32342d3234203d3e20313338383837.roa (raw, json)
Hash identifier:          r2sMVBIlcCozBKFBq0diWRJjeE6cRdUNaq5HifiiwWA=
Subject key identifier:   34:E9:50:CC:5A:74:89:38:1B:60:17:10:BC:10:C7:26:00:36:74:AC
Certificate issuer:       /CN=80F9ED59290AD77DE2856ECFD8340E28FF858E3D
Certificate serial:       666AD015F5320A1A6C4CBC86519B10CF8A7B6DF3
Authority key identifier: 80:F9:ED:59:29:0A:D7:7D:E2:85:6E:CF:D8:34:0E:28:FF:85:8E:3D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/3130332e3134312e32312e302f32342d3234203d3e20313338383837.roa
Signing time:             Mon 02 Jun 2025 02:02:42 +0000
ROA not before:           Mon 02 Jun 2025 01:57:42 +0000
ROA not after:            Mon 01 Jun 2026 02:02:42 +0000
asID:                     138887
IP address blocks:        103.141.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.crl
                          rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Jun 2025 02:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:6a:d0:15:f5:32:0a:1a:6c:4c:bc:86:51:9b:10:cf:8a:7b:6d:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80F9ED59290AD77DE2856ECFD8340E28FF858E3D
        Validity
            Not Before: Jun  2 01:57:42 2025 GMT
            Not After : Jun  1 02:02:42 2026 GMT
        Subject: CN=34E950CC5A7489381B601710BC10C726003674AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:28:97:e5:7d:c5:47:0b:19:19:1d:f3:e7:1c:
                    ff:48:1a:d9:cb:28:18:6c:1e:da:7a:19:63:09:78:
                    e6:4f:12:f9:67:1b:2f:e9:5f:c6:da:8d:c2:29:16:
                    81:10:a9:7a:a7:63:ec:08:6a:c1:c8:45:e2:3a:64:
                    3a:60:66:ac:1f:2a:49:f1:16:a3:c0:95:ce:3e:1e:
                    35:17:1a:43:b8:4a:65:cb:29:27:ac:24:67:39:da:
                    c9:c5:d3:31:85:ed:67:72:9e:15:39:8f:1b:a4:a5:
                    ce:8d:34:ba:b5:21:e7:ab:df:83:6c:d1:74:a6:c5:
                    bf:33:43:3b:94:89:a4:79:66:72:25:ca:6b:a5:bc:
                    0b:94:df:ad:e7:44:2a:75:15:81:6f:1b:74:c9:71:
                    a4:de:2d:eb:8b:53:e3:65:84:91:ac:15:64:09:65:
                    10:9c:e2:50:e9:22:70:d6:f1:9a:d2:df:e3:ca:39:
                    f8:ae:cb:35:e5:67:ff:ae:59:8c:2b:a9:68:80:30:
                    00:fe:4e:69:be:84:3a:c2:16:38:62:3f:26:92:e1:
                    eb:12:b9:84:5d:fe:f0:8d:8c:b2:c4:12:4f:bd:82:
                    07:41:ec:49:b3:dc:60:ee:67:0f:8e:ad:d5:d1:60:
                    09:d4:e4:a5:36:28:ba:fb:aa:f5:85:65:c6:fd:9a:
                    79:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E9:50:CC:5A:74:89:38:1B:60:17:10:BC:10:C7:26:00:36:74:AC
            X509v3 Authority Key Identifier:
                keyid:80:F9:ED:59:29:0A:D7:7D:E2:85:6E:CF:D8:34:0E:28:FF:85:8E:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80F9ED59290AD77DE2856ECFD8340E28FF858E3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c07c88da-2b56-487e-9efe-571170b10286/0/3130332e3134312e32312e302f32342d3234203d3e20313338383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:28:01:38:16:f7:7c:27:9a:5e:be:e6:af:75:1b:6c:ca:26:
         3b:54:2b:03:87:c2:f3:ca:06:ae:97:b6:0a:08:68:97:eb:23:
         e9:e6:93:b6:68:b9:80:1f:8b:fd:ea:2b:bc:27:ef:5f:62:09:
         56:b2:78:f6:f2:fc:29:c2:40:eb:46:b7:d5:a2:20:24:3c:4a:
         af:25:d4:9e:1d:8b:e2:a2:60:52:63:e8:07:c5:8b:1a:89:5f:
         a8:06:6e:7a:93:f3:be:bc:0d:81:bf:63:c7:73:6d:99:cf:03:
         29:82:a9:36:c9:ff:86:1f:d0:01:97:48:64:da:f8:c5:bf:3f:
         f8:ad:63:31:69:f6:6f:7f:0a:c0:d7:b3:12:9a:4a:89:a7:e2:
         56:2c:2e:5e:f8:9c:ac:cf:89:53:80:c8:b5:4c:fe:e2:b1:ab:
         8c:d0:cb:2c:29:22:c0:0a:41:3b:a9:15:e9:16:1c:15:f8:28:
         08:b5:b8:6f:8a:cc:ef:56:8c:32:80:9b:85:e8:d8:82:26:72:
         7c:ea:71:cf:a9:99:83:a2:77:34:53:6d:47:a8:9b:87:9e:8a:
         22:ca:68:dd:62:1b:f9:d1:c3:a3:99:73:65:6e:fd:22:d0:00:
         5c:8f:74:8e:10:da:6b:8a:9e:51:b2:8d:ee:27:33:00:7f:92:
         22:03:d2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:33:53 2025 by rpki-client