Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/3130332e3133342e3130342e302f32332d3233203d3e203633343937.roa
File:                     3130332e3133342e3130342e302f32332d3233203d3e203633343937.roa (raw, json)
Hash identifier:          MowxodGXifPkFbwcnbxmYI86u52XQ+RqEsK4tBHU6Kc=
Subject key identifier:   F8:3E:A2:79:8A:E4:98:89:2E:F8:A0:99:3D:4F:A2:66:F0:35:82:01
Certificate issuer:       /CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D
Certificate serial:       382F7B8F7E3BB99579F9FF27F421FC79DCF98E8C
Authority key identifier: 95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/3130332e3133342e3130342e302f32332d3233203d3e203633343937.roa
Signing time:             Mon 02 Jun 2025 02:04:35 +0000
ROA not before:           Mon 02 Jun 2025 01:59:35 +0000
ROA not after:            Mon 01 Jun 2026 02:04:35 +0000
asID:                     63497
IP address blocks:        103.134.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl
                          rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 21:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:2f:7b:8f:7e:3b:b9:95:79:f9:ff:27:f4:21:fc:79:dc:f9:8e:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D
        Validity
            Not Before: Jun  2 01:59:35 2025 GMT
            Not After : Jun  1 02:04:35 2026 GMT
        Subject: CN=F83EA2798AE498892EF8A0993D4FA266F0358201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:73:0e:82:70:90:75:c7:f9:a2:29:73:9b:c8:
                    46:bc:33:6e:ba:c1:ab:2a:0f:30:25:06:68:e9:c1:
                    d3:9d:07:4f:f0:6f:88:9f:f5:d4:b3:5b:76:d2:13:
                    db:9a:29:87:21:ad:a0:4f:4c:ed:13:c7:7c:86:2f:
                    96:65:ff:b0:8b:2d:f7:8e:d0:fd:4d:e4:a9:99:cd:
                    c4:39:c3:52:20:75:ec:23:ca:fd:99:22:11:54:c2:
                    ac:f1:46:5c:28:ca:6e:20:d1:e1:1a:e1:95:f5:ae:
                    8e:78:5d:c1:8f:f4:2f:a4:70:10:84:e2:20:c2:30:
                    ab:3b:19:83:5a:af:45:dd:b8:23:bf:3b:c6:47:07:
                    e7:c3:a3:83:df:4d:d5:64:92:e9:87:8d:e6:f9:9c:
                    1f:39:25:3e:6a:b1:8c:a6:bf:1d:28:f7:ef:77:85:
                    a1:2a:27:ad:c9:e3:8a:af:5b:3b:03:ce:74:94:a9:
                    96:b6:4a:f9:ee:2f:f1:0e:60:4c:2f:ab:3d:ca:11:
                    e3:15:88:35:64:b4:27:d9:f7:12:9e:4d:05:51:44:
                    ca:7b:08:39:25:68:50:5c:df:d7:5e:b4:dc:ce:d6:
                    c3:29:26:0e:3d:e6:7f:c6:01:dc:4c:0d:dd:4a:ea:
                    03:2e:c2:7c:91:41:8a:7b:5c:5b:94:96:c8:69:c3:
                    85:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:3E:A2:79:8A:E4:98:89:2E:F8:A0:99:3D:4F:A2:66:F0:35:82:01
            X509v3 Authority Key Identifier:
                keyid:95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/3130332e3133342e3130342e302f32332d3233203d3e203633343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:a6:57:90:07:4b:96:40:f8:10:5c:bc:90:5b:ac:df:df:8e:
         a7:4f:c7:56:49:8f:1b:6d:d8:27:97:45:f3:ed:74:2a:12:52:
         4f:a8:16:05:5a:c4:25:8f:9d:17:92:30:d7:8f:fa:17:91:cc:
         94:1d:ec:51:67:fc:cf:51:fe:82:b5:a3:da:e3:ee:bc:30:6c:
         bd:22:fe:2b:48:42:5e:3e:38:06:56:a0:87:42:5f:b7:6a:d6:
         ad:6c:01:b1:b6:d8:77:b3:c7:04:bd:54:08:73:85:fb:0f:90:
         6b:64:82:ec:fa:32:33:0c:47:e1:fa:4d:38:4f:62:61:b4:57:
         0b:f9:aa:4e:08:ea:f4:33:2b:4a:33:18:fe:e3:18:8c:cb:56:
         73:56:72:53:c8:93:3f:8f:d9:f4:f1:2e:d2:28:bc:f8:a7:5e:
         35:8a:48:7a:40:28:2d:82:f0:85:b1:52:25:6b:35:f0:57:24:
         63:5f:56:d1:8c:c0:19:2e:1f:94:49:be:66:3d:b5:ae:d0:53:
         3b:61:43:cf:cf:a7:36:e4:22:2c:8a:2a:6d:70:0b:12:91:7a:
         06:e7:12:49:1f:2e:d0:1c:94:25:7e:f8:3e:69:1f:6e:11:51:
         76:8d:3c:07:0e:66:65:78:9e:41:ac:b1:34:e8:bb:fc:e9:33:
         9d:2f:5b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:52:43 2025 by rpki-client