Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/3130332e39312e34342e302f32322d3234203d3e20313336313035.roa
File:                     3130332e39312e34342e302f32322d3234203d3e20313336313035.roa (raw, json)
Hash identifier:          UZgKbBst9wwCtuqtFZDworFQOUindj4psWspzIH8An8=
Subject key identifier:   31:F6:5C:45:0E:D3:E4:84:73:F6:C9:4B:55:C5:69:00:93:32:8C:DC
Certificate issuer:       /CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189
Certificate serial:       03935DB674BE4E0DB98C7ED5B914134A12F9305F
Authority key identifier: CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/3130332e39312e34342e302f32322d3234203d3e20313336313035.roa
Signing time:             Mon 02 Jun 2025 02:03:19 +0000
ROA not before:           Mon 02 Jun 2025 01:58:19 +0000
ROA not after:            Mon 01 Jun 2026 02:03:19 +0000
asID:                     136105
IP address blocks:        103.91.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl
                          rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 15:41:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:93:5d:b6:74:be:4e:0d:b9:8c:7e:d5:b9:14:13:4a:12:f9:30:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189
        Validity
            Not Before: Jun  2 01:58:19 2025 GMT
            Not After : Jun  1 02:03:19 2026 GMT
        Subject: CN=31F65C450ED3E48473F6C94B55C5690093328CDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:18:70:92:70:11:9d:04:d3:48:cd:07:ff:2b:
                    7e:c9:20:be:4c:f3:e6:98:d4:91:7a:72:f0:b5:e4:
                    59:8d:6a:b9:43:2b:7d:b0:20:43:15:e3:fa:5d:34:
                    07:d5:65:27:8a:67:55:f8:a4:59:c1:d4:6f:38:23:
                    cc:1d:37:cc:f1:a9:bc:0c:2f:cb:cc:84:66:2d:e3:
                    03:6e:f9:c0:8a:3c:b8:2b:30:02:f2:eb:a9:a6:55:
                    2a:6b:e3:f8:d4:52:bd:a1:f9:f3:98:1b:19:17:9f:
                    3f:c3:f3:bd:87:c1:b9:6c:70:1b:ee:93:e8:87:90:
                    31:6a:4d:94:7c:f8:eb:97:f1:c4:09:ca:31:3e:ae:
                    ec:a4:b5:17:65:36:c9:46:26:54:d3:e2:61:23:8c:
                    a6:49:e8:d7:7e:7f:76:5d:61:0c:45:31:86:be:43:
                    96:35:45:b0:6c:4b:3d:8e:2f:e7:95:bb:9d:84:a8:
                    94:4a:e6:23:04:e1:2f:8a:b9:52:82:55:78:e5:de:
                    7e:48:84:f7:fe:13:ea:83:bc:e0:2a:71:cf:d5:eb:
                    53:f6:2a:fa:be:ef:b8:e7:86:25:c8:bc:11:a7:a6:
                    a6:c6:62:02:ef:b6:f0:78:28:ee:5a:ae:bc:fa:22:
                    92:fb:c6:d4:76:61:20:26:e1:a9:68:6a:cd:c3:b6:
                    f3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F6:5C:45:0E:D3:E4:84:73:F6:C9:4B:55:C5:69:00:93:32:8C:DC
            X509v3 Authority Key Identifier:
                keyid:CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/3130332e39312e34342e302f32322d3234203d3e20313336313035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.91.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:7c:89:d6:7b:6a:6c:9b:78:f4:bf:ff:35:aa:45:12:31:be:
         9b:da:71:74:45:1b:dc:dc:2c:17:9a:8d:e6:b8:b6:30:4a:01:
         29:8e:6b:56:c2:19:97:69:d1:5e:21:58:01:2c:dc:11:fa:a2:
         39:54:a1:5f:98:db:97:0b:05:5e:f6:6a:8a:8f:a1:05:7e:79:
         73:e1:44:4e:03:64:87:8b:22:ca:27:fe:69:26:10:69:28:41:
         07:58:ab:a4:42:0d:48:fb:9a:09:46:d5:f3:94:16:d5:a5:a8:
         e6:b6:b9:d9:96:46:29:46:5f:fe:10:77:c5:17:d4:38:06:05:
         60:c0:0e:17:1b:29:21:5d:09:7c:69:4d:74:be:ec:bc:1f:db:
         e4:a7:c6:ea:b8:93:ec:70:0b:83:66:cb:2c:7b:41:35:04:09:
         aa:bd:b3:eb:6a:88:eb:7a:4d:7b:bd:ef:bd:13:d3:28:48:ef:
         45:79:c9:94:b1:8e:4a:d7:32:72:58:5f:a9:b6:6c:a8:ea:4b:
         ba:10:c0:59:a4:88:65:69:31:27:da:7c:35:48:7a:32:bb:83:
         3e:2f:74:94:0e:31:e3:c5:c4:49:11:c9:fd:aa:2f:ef:bf:2e:
         a4:e4:48:b3:20:05:91:bc:7b:ca:e4:b6:fa:cc:19:28:de:44:
         c5:b1:a2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:41:11 2025 by rpki-client