Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/3130332e3133322e34302e302f32342d3234203d3e20313530393730.roa
File:                     3130332e3133322e34302e302f32342d3234203d3e20313530393730.roa (raw, json)
Hash identifier:          zG4bUujzmzqdwkICkCb1gdMUqEbOsnXYVfCYSY0KH6c=
Subject key identifier:   87:F4:04:FC:0E:BD:F0:FB:11:D3:5B:93:87:39:AC:F8:1B:B2:19:1E
Certificate issuer:       /CN=CB9662733153C02E4C411B7D2F2B9E22D2F0EB85
Certificate serial:       1280A815B4DFEF763BBBE2B737A2EC70F41E422E
Authority key identifier: CB:96:62:73:31:53:C0:2E:4C:41:1B:7D:2F:2B:9E:22:D2:F0:EB:85
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/3130332e3133322e34302e302f32342d3234203d3e20313530393730.roa
Signing time:             Thu 05 Jun 2025 18:00:00 +0000
ROA not before:           Thu 05 Jun 2025 17:55:00 +0000
ROA not after:            Thu 04 Jun 2026 18:00:00 +0000
asID:                     150970
IP address blocks:        103.132.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.crl
                          rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 04:15:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:80:a8:15:b4:df:ef:76:3b:bb:e2:b7:37:a2:ec:70:f4:1e:42:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB9662733153C02E4C411B7D2F2B9E22D2F0EB85
        Validity
            Not Before: Jun  5 17:55:00 2025 GMT
            Not After : Jun  4 18:00:00 2026 GMT
        Subject: CN=87F404FC0EBDF0FB11D35B938739ACF81BB2191E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:14:f9:c6:d1:2c:79:6b:70:3c:d9:34:b1:d0:
                    12:be:11:c1:c4:ce:f6:4e:65:d2:b9:f6:7d:75:83:
                    2d:01:67:ab:21:2d:df:c5:7d:aa:da:a1:0f:71:06:
                    72:54:33:f2:9a:03:70:21:fc:d4:22:01:b4:16:2e:
                    21:05:48:f1:d5:98:cb:34:27:8d:26:1c:55:e4:6d:
                    b1:39:9e:db:c9:7e:f5:0b:b5:0d:3f:03:e3:0f:19:
                    1d:1e:89:b2:1d:a3:7b:f7:47:62:f4:91:7c:fc:d5:
                    01:48:4c:6b:c0:5f:c3:e1:38:7d:53:10:0a:bb:a7:
                    36:5e:97:f5:a5:25:1a:9f:94:8b:5a:17:a2:4d:cf:
                    b5:6b:06:c0:22:f8:46:17:4b:4e:b1:47:3f:cd:bb:
                    e7:f0:74:be:e0:c0:2b:6b:e2:ed:dc:15:9e:b3:8b:
                    97:9c:b0:83:d3:7b:92:b4:8a:1a:e6:d5:23:2a:6f:
                    23:87:d1:4e:99:2b:1f:ff:e7:60:db:2e:f0:20:97:
                    64:a8:dc:a5:3a:b0:03:4c:c1:cb:36:6c:3a:cf:0a:
                    b5:0f:b9:09:9f:b9:59:9e:a7:14:bd:6b:5b:ae:c8:
                    94:e4:38:c5:b7:61:b8:ee:8c:08:55:95:71:f5:99:
                    b5:e4:b1:1b:32:9e:bb:87:f4:8a:88:72:2c:73:03:
                    db:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F4:04:FC:0E:BD:F0:FB:11:D3:5B:93:87:39:AC:F8:1B:B2:19:1E
            X509v3 Authority Key Identifier:
                keyid:CB:96:62:73:31:53:C0:2E:4C:41:1B:7D:2F:2B:9E:22:D2:F0:EB:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/3130332e3133322e34302e302f32342d3234203d3e20313530393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:66:a3:8d:14:e6:71:df:ae:e0:4b:5d:be:8d:43:a0:02:2f:
         44:a7:4f:bc:79:30:cf:a3:37:49:f1:9f:38:a5:61:d1:7c:26:
         7f:aa:91:3c:8e:55:35:c3:b6:a0:1a:f1:d6:4f:7c:12:df:c3:
         b8:5e:01:09:12:27:e3:a5:86:5e:f0:82:f5:c5:c3:e5:c2:02:
         f5:00:9e:52:46:2b:f5:fa:99:bf:5b:fa:3e:e1:59:ad:cb:b2:
         3f:8a:97:3d:7c:64:ea:5f:52:60:49:11:0f:9a:7a:d7:44:99:
         1a:a6:21:eb:51:31:c1:e6:05:f2:8a:34:85:78:d7:0b:84:ff:
         42:cb:0a:01:0e:46:18:56:35:ef:80:62:d8:f0:64:ec:4d:7e:
         cc:89:26:60:df:c4:97:bf:1a:a4:84:67:df:8e:ce:05:79:6f:
         8b:63:16:71:b5:d4:86:c6:86:33:f8:df:3d:be:49:33:24:39:
         d9:24:70:5a:7a:1d:1c:0d:64:c1:78:2a:98:a2:c4:41:20:87:
         ae:ae:c9:d1:1c:6c:eb:a1:b1:df:2a:0b:36:af:13:ae:f7:bc:
         99:be:76:4c:d3:bc:03:ff:64:40:c1:58:e2:11:f4:54:3c:52:
         6a:c0:a2:9c:e7:a7:bb:50:02:72:e4:ee:c3:33:de:10:98:52:
         4b:b1:b1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:12:07 2025 by rpki-client