Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/3130332e3133342e3130342e302f32342d3234203d3e203633343937.roa
File:                     3130332e3133342e3130342e302f32342d3234203d3e203633343937.roa (raw, json)
Hash identifier:          z8oVsj820WikG58Kg7XuHuFP7zjS3wrrsGJ5kGPWB6k=
Subject key identifier:   7D:5F:31:36:FC:F3:2E:EC:4E:0A:C4:06:60:E6:86:75:09:87:E1:FC
Certificate issuer:       /CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D
Certificate serial:       4CF762147BE4DCE19B6ED202CF18CE93FC5AC022
Authority key identifier: 95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/3130332e3133342e3130342e302f32342d3234203d3e203633343937.roa
Signing time:             Mon 02 Jun 2025 02:04:35 +0000
ROA not before:           Mon 02 Jun 2025 01:59:35 +0000
ROA not after:            Mon 01 Jun 2026 02:04:35 +0000
asID:                     63497
IP address blocks:        103.134.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl
                          rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 21:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f7:62:14:7b:e4:dc:e1:9b:6e:d2:02:cf:18:ce:93:fc:5a:c0:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D
        Validity
            Not Before: Jun  2 01:59:35 2025 GMT
            Not After : Jun  1 02:04:35 2026 GMT
        Subject: CN=7D5F3136FCF32EEC4E0AC40660E686750987E1FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c5:71:4c:ff:9c:fa:12:e2:b7:29:97:8f:69:
                    32:ee:0d:b5:ee:1c:9a:89:ca:94:09:9c:69:e0:94:
                    c7:5c:98:05:60:60:b2:24:59:fa:77:58:05:af:de:
                    f9:86:0c:8d:07:67:74:5b:13:5c:b7:77:c5:2d:65:
                    37:e0:08:5e:25:e4:e0:9d:ff:a7:89:5a:e1:71:98:
                    cb:3c:16:cb:bf:e3:80:8e:9e:e1:5d:05:3d:38:c2:
                    f5:20:e5:5e:e3:00:6c:35:54:0c:fe:eb:21:12:5a:
                    04:65:c5:4a:66:f8:15:7c:32:22:dd:26:db:b3:80:
                    59:04:cc:62:0a:c7:4e:b2:16:67:22:57:63:a9:da:
                    4c:3e:69:44:d9:99:a2:02:66:de:ca:4f:69:b6:88:
                    97:82:5b:1c:e3:b0:25:42:b8:db:d6:7a:36:1d:53:
                    da:3b:97:8c:82:85:50:86:b3:c0:f5:83:4e:63:a3:
                    72:4a:bf:cc:8e:41:63:5a:9b:03:ae:5c:ba:37:9c:
                    f6:d3:92:91:0a:a8:6a:ed:cd:94:1a:57:1a:be:3a:
                    61:5a:0c:10:ab:f5:4b:ca:6c:a2:58:b8:78:36:1f:
                    a3:68:cf:47:18:a2:60:b8:67:35:17:69:1a:4c:30:
                    cb:b9:f6:6c:5f:ff:c3:ea:6a:af:bf:46:17:69:d8:
                    f8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:5F:31:36:FC:F3:2E:EC:4E:0A:C4:06:60:E6:86:75:09:87:E1:FC
            X509v3 Authority Key Identifier:
                keyid:95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/3130332e3133342e3130342e302f32342d3234203d3e203633343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:04:a8:3f:e0:05:18:b9:5a:1f:c8:72:82:81:31:4e:0d:c1:
         29:2e:34:f1:df:04:58:4d:3f:76:58:83:fa:bc:02:80:2a:f7:
         7b:01:08:5e:e3:bb:3b:32:49:b6:4e:9c:53:71:34:d8:7c:6f:
         aa:aa:e6:64:d7:60:f2:dd:0f:95:1f:eb:89:bd:3d:51:b8:88:
         d7:8a:da:c8:14:40:8e:30:32:84:f9:1b:e7:de:dc:a3:61:bb:
         5c:83:30:e7:54:5f:05:15:a1:98:aa:29:33:fe:28:46:66:48:
         3e:32:db:ac:e9:ad:59:d0:0b:e4:28:ab:bb:3f:1d:e4:bc:f4:
         1a:f9:ce:48:8c:d4:75:a6:6f:d0:e5:c2:a9:74:82:24:e0:e5:
         c5:29:30:af:3e:3c:b2:f4:a0:61:26:2b:8b:a8:8a:22:ef:72:
         4a:08:5c:24:ce:dc:3e:c3:76:f5:5c:f3:22:72:d0:62:7d:ec:
         5f:7d:45:ff:8f:ce:d7:85:6e:05:8c:89:a5:97:6c:fa:48:df:
         86:9e:65:e2:13:ba:42:9b:b1:4d:2c:cc:83:68:69:c9:45:a8:
         74:2e:f5:b0:fb:83:a9:18:3c:d6:6f:43:28:8b:c2:bb:7e:4b:
         0e:6b:93:99:83:d2:1b:93:47:c5:ee:3a:da:13:ef:ba:be:25:
         cd:28:be:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:12:27 2025 by rpki-client