Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/3130332e31342e32302e302f32332d3233203d3e20313331373137.roa
File:                     3130332e31342e32302e302f32332d3233203d3e20313331373137.roa (raw, json)
Hash identifier:          RohtMVPp7ZjWT76AR25hywvAjC+yVkxy154FLnUsdBk=
Subject key identifier:   BE:7D:B3:C2:97:35:F2:4F:25:5C:84:86:3A:BC:4F:AF:06:2C:42:E9
Certificate issuer:       /CN=882209E37356E0512FBE4E81B00E4F2481865087
Certificate serial:       0EDFF35AB05DEEE7C331A8DCDC8A838330EB97DB
Authority key identifier: 88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/3130332e31342e32302e302f32332d3233203d3e20313331373137.roa
Signing time:             Mon 02 Jun 2025 01:02:50 +0000
ROA not before:           Mon 02 Jun 2025 00:57:50 +0000
ROA not after:            Mon 01 Jun 2026 01:02:50 +0000
asID:                     131717
IP address blocks:        103.14.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl
                          rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 18:29:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:df:f3:5a:b0:5d:ee:e7:c3:31:a8:dc:dc:8a:83:83:30:eb:97:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882209E37356E0512FBE4E81B00E4F2481865087
        Validity
            Not Before: Jun  2 00:57:50 2025 GMT
            Not After : Jun  1 01:02:50 2026 GMT
        Subject: CN=BE7DB3C29735F24F255C84863ABC4FAF062C42E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bc:cc:28:d6:59:48:f8:d1:25:58:fe:43:5e:
                    47:55:0c:29:7e:36:12:d3:b5:77:32:f8:38:3a:90:
                    63:b1:29:99:7b:49:74:97:4e:11:31:cd:b5:50:c3:
                    0f:38:c0:79:13:2f:86:99:21:2b:a6:28:8a:49:9e:
                    23:df:7e:61:d8:69:72:6b:14:6e:ad:ac:6e:48:38:
                    d4:7e:c1:c8:d8:02:3f:f9:7b:61:ce:d4:01:5b:ab:
                    a1:23:99:17:f4:46:36:76:52:4b:70:43:52:90:f2:
                    f8:e8:c3:0c:95:9d:6c:7e:d6:5e:fd:9d:80:1a:71:
                    58:35:a9:63:0d:7e:00:6c:cb:2e:40:7b:9e:91:85:
                    14:b3:37:00:3e:56:72:e2:03:8d:eb:72:d2:62:b6:
                    88:24:4d:31:85:5d:8d:06:b5:5e:30:b9:fa:09:b3:
                    af:bc:ca:8f:23:f7:46:fe:b9:8d:80:4d:7a:be:a1:
                    f3:15:be:3d:32:76:04:5c:2d:c9:ba:aa:a7:e9:a1:
                    b4:ab:38:fd:cc:ea:da:bb:ea:c2:b6:3d:b8:7a:53:
                    9b:98:c4:1e:e9:14:86:ac:fd:6d:e5:4b:1f:86:56:
                    07:d1:7b:bf:1c:0b:3d:50:2a:34:49:da:9c:2d:91:
                    68:8e:c2:19:ff:b6:c4:78:7e:3d:30:62:11:ec:ad:
                    f0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:7D:B3:C2:97:35:F2:4F:25:5C:84:86:3A:BC:4F:AF:06:2C:42:E9
            X509v3 Authority Key Identifier:
                keyid:88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/3130332e31342e32302e302f32332d3233203d3e20313331373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.14.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:b9:b3:22:f3:81:f1:85:d2:39:56:71:ac:fa:25:bd:f2:1b:
         92:f5:c1:d5:b9:eb:0b:d5:3b:09:2c:8e:cb:e8:e4:ff:56:30:
         56:d0:24:81:e7:c1:1d:72:67:8c:66:e9:04:a9:1d:60:96:e7:
         66:0a:b1:6d:03:55:01:00:c4:7d:40:6d:f1:2b:2f:1b:01:b9:
         af:53:f7:f4:52:33:da:62:03:c9:ad:2c:eb:ea:6d:0e:65:92:
         5b:0e:11:a5:ba:c6:10:e6:54:fe:75:90:80:87:86:0c:68:c0:
         95:d6:3a:f1:9b:bb:36:8e:c5:da:81:89:0b:10:a3:e6:6e:7b:
         9c:06:da:85:dc:62:49:ba:05:84:87:20:4d:a5:c1:69:cc:e1:
         98:77:c8:44:b3:d8:1c:6f:20:8c:b1:48:44:b1:72:25:62:08:
         b4:17:f0:12:7a:0e:f4:cf:18:b8:65:8b:53:a3:2f:5e:d4:0c:
         1a:91:22:e0:31:de:d2:19:88:da:b4:4f:12:3d:8a:0e:29:4d:
         f2:0e:16:0d:0a:90:ac:ed:07:0b:90:82:ad:6a:e2:54:52:74:
         e0:5a:af:80:06:9b:a2:e6:89:96:45:4a:66:34:03:6a:4f:3c:
         5f:26:15:e8:40:7c:6b:6c:69:7e:85:ea:7b:f7:7b:c9:07:e2:
         0c:a4:7a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:47:39 2025 by rpki-client