Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/3130332e31342e32302e302f32342d3234203d3e20313331373137.roa
File:                     3130332e31342e32302e302f32342d3234203d3e20313331373137.roa (raw, json)
Hash identifier:          4YSDNpw3vRi1ZpYELRMW9RHjucU5y6DLjYnJw7lk5Lw=
Subject key identifier:   6E:EF:A6:C4:C7:BC:00:06:03:18:2C:CF:F1:A7:C8:42:67:3B:AA:CC
Certificate issuer:       /CN=882209E37356E0512FBE4E81B00E4F2481865087
Certificate serial:       0948D79EEED7888F932E51119609B1ECC3E08104
Authority key identifier: 88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/3130332e31342e32302e302f32342d3234203d3e20313331373137.roa
Signing time:             Mon 02 Jun 2025 01:02:51 +0000
ROA not before:           Mon 02 Jun 2025 00:57:51 +0000
ROA not after:            Mon 01 Jun 2026 01:02:51 +0000
asID:                     131717
IP address blocks:        103.14.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl
                          rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 18:29:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:48:d7:9e:ee:d7:88:8f:93:2e:51:11:96:09:b1:ec:c3:e0:81:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882209E37356E0512FBE4E81B00E4F2481865087
        Validity
            Not Before: Jun  2 00:57:51 2025 GMT
            Not After : Jun  1 01:02:51 2026 GMT
        Subject: CN=6EEFA6C4C7BC000603182CCFF1A7C842673BAACC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a0:c2:d9:d6:c6:68:56:cf:69:a5:ec:50:f9:
                    0e:2a:01:08:9d:61:0a:f4:28:e3:7a:ba:90:e8:89:
                    4f:c2:8e:82:f1:b8:b6:63:4d:82:f4:da:aa:ee:3a:
                    52:0c:3f:ba:77:37:3f:c7:56:48:e2:3d:e1:93:43:
                    f4:c2:ee:ea:db:ec:2a:94:8e:ea:71:2e:fd:47:29:
                    4c:25:18:c5:27:cd:d8:66:b0:42:3c:ba:85:70:76:
                    fb:68:66:9d:ce:3f:97:86:a6:cc:fb:15:fa:91:8f:
                    6a:d4:8d:4c:1a:80:c1:9c:7a:0a:02:f4:f5:d9:d9:
                    5e:c0:f2:31:04:41:23:2a:c9:d1:04:2b:24:a9:66:
                    27:38:4e:b6:44:59:16:fc:72:a1:9e:1b:7d:76:93:
                    fd:58:9e:ee:00:72:ce:93:38:5e:e7:e6:af:3e:33:
                    91:6f:23:3e:29:2e:07:8d:e1:b5:53:1c:a2:2f:30:
                    e6:7b:61:19:7a:40:e3:68:25:7a:85:3b:bd:87:6d:
                    fb:d9:2b:5a:d8:56:9e:eb:46:41:04:4a:3f:d9:74:
                    3d:29:81:8f:6a:92:20:6b:c5:71:56:76:2d:54:0e:
                    f6:39:8e:57:7d:04:0c:3a:e5:47:75:1e:4a:bd:6a:
                    76:85:81:e9:f2:ea:b3:ff:ec:c2:ac:6b:17:c7:3c:
                    7f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:EF:A6:C4:C7:BC:00:06:03:18:2C:CF:F1:A7:C8:42:67:3B:AA:CC
            X509v3 Authority Key Identifier:
                keyid:88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/3130332e31342e32302e302f32342d3234203d3e20313331373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.14.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:f8:a8:fa:60:77:f7:84:f8:6e:79:44:e5:e9:35:97:ab:0b:
         c8:95:58:7d:07:b1:89:74:23:d2:a3:6a:31:ff:97:7c:a5:b0:
         52:b2:40:e8:39:69:fd:d9:6c:12:70:a7:de:d3:35:99:bf:36:
         82:49:3c:4c:8d:6a:23:31:f8:46:8b:d9:d8:11:54:1f:32:c0:
         19:dc:9f:8c:2d:f2:17:fa:e7:65:c5:52:2a:d2:42:c4:41:85:
         4f:d1:fd:a6:2d:2e:54:eb:ae:93:0a:e7:00:39:fe:6e:00:5d:
         1c:83:19:fa:ab:df:fb:4e:7e:8c:67:c2:73:e6:d4:0d:a6:1f:
         3b:3a:0f:01:38:e1:64:27:63:30:53:d0:ea:ed:64:0f:fe:8f:
         4c:f4:22:3d:6a:58:ba:16:ec:e0:0f:42:2c:a6:7c:65:8a:1e:
         82:e6:b9:3a:56:89:71:01:3b:61:60:22:d6:fa:f0:a6:f5:3b:
         4a:d0:7e:03:9a:0c:48:e0:7d:e4:ad:46:4e:cb:2d:35:14:86:
         d5:aa:7e:c2:e7:3d:6f:84:70:c3:19:ef:f1:01:2c:60:8d:7b:
         f7:3a:23:b5:c6:59:64:6b:49:74:2f:c3:23:4b:b3:26:a6:f4:
         c2:e7:d6:5a:34:3d:27:3c:b3:e0:80:fa:78:9f:08:bb:e8:58:
         3f:a8:77:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:45:46 2025 by rpki-client