Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/3130332e3133342e3130352e302f32342d3234203d3e203633343937.roa
File:                     3130332e3133342e3130352e302f32342d3234203d3e203633343937.roa (raw, json)
Hash identifier:          pnePfPpninK+12GFjtU9XZZuD9qIupgPZ4/SoFot86c=
Subject key identifier:   8C:B9:F9:15:F6:EF:75:8F:8C:DD:6F:5A:42:AE:8B:C0:A4:D2:93:63
Certificate issuer:       /CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D
Certificate serial:       763F4AEF3FBFFD038A9D3D1213A803C3C96F52EB
Authority key identifier: 95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/3130332e3133342e3130352e302f32342d3234203d3e203633343937.roa
Signing time:             Mon 02 Jun 2025 02:04:35 +0000
ROA not before:           Mon 02 Jun 2025 01:59:35 +0000
ROA not after:            Mon 01 Jun 2026 02:04:35 +0000
asID:                     63497
IP address blocks:        103.134.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl
                          rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 21:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:3f:4a:ef:3f:bf:fd:03:8a:9d:3d:12:13:a8:03:c3:c9:6f:52:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D
        Validity
            Not Before: Jun  2 01:59:35 2025 GMT
            Not After : Jun  1 02:04:35 2026 GMT
        Subject: CN=8CB9F915F6EF758F8CDD6F5A42AE8BC0A4D29363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e4:4f:00:9a:b1:a6:1f:1e:c0:a5:50:a2:35:
                    77:62:29:d7:d9:0b:d4:2a:73:86:48:47:92:e6:be:
                    f8:e5:24:69:8f:0b:20:f0:18:dd:72:87:80:4e:e3:
                    c5:73:4e:8b:c8:8c:e5:74:25:f0:18:2c:2b:c8:4b:
                    93:c3:6c:f9:b7:22:93:bc:62:97:e5:cf:5b:6d:84:
                    46:45:a5:48:24:2b:e0:6b:82:7e:34:15:1e:c8:80:
                    41:1a:15:a2:28:0c:b2:6a:69:74:67:27:6d:fe:41:
                    00:31:bf:83:2a:ac:6f:5e:cd:23:0e:54:c8:46:48:
                    5a:ea:04:14:1b:02:ec:f0:ce:12:d3:4a:dc:cd:8d:
                    98:ab:8c:bb:df:d7:ed:2b:11:6e:25:29:e3:4f:35:
                    df:c3:f9:d4:fa:d2:90:16:d7:42:84:ec:e4:0b:cb:
                    67:6a:72:54:6e:2c:70:ec:37:f0:24:12:6e:99:26:
                    2b:b0:7c:f5:2a:36:23:15:93:a5:78:89:6c:b0:3f:
                    02:4b:b2:e9:52:30:70:40:e0:a7:32:7a:4b:a9:39:
                    3c:ca:2e:49:ee:23:d5:2c:4f:7b:66:82:e1:f3:cd:
                    34:94:cd:46:61:56:c6:1c:ba:a9:b5:56:a3:5d:dd:
                    81:a1:f2:7f:b7:64:d2:f2:cf:05:d5:67:72:3c:c5:
                    74:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B9:F9:15:F6:EF:75:8F:8C:DD:6F:5A:42:AE:8B:C0:A4:D2:93:63
            X509v3 Authority Key Identifier:
                keyid:95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/3130332e3133342e3130352e302f32342d3234203d3e203633343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:07:a0:26:7c:c2:a8:03:4d:07:c5:8f:0a:cc:90:9f:65:14:
         77:bf:9d:6d:9f:28:74:fe:ba:90:50:98:b6:04:a1:74:82:8e:
         67:9b:af:c7:0c:86:0e:22:b0:53:e7:d6:33:ef:77:60:2a:69:
         60:21:31:0e:df:80:7a:0b:a7:58:cf:93:25:ea:a8:c6:5f:ba:
         f7:12:5d:ba:61:c4:99:55:d4:98:7d:a8:59:14:e4:42:92:f7:
         82:b8:14:03:04:89:07:3b:22:e0:d4:f8:9f:16:ff:25:e7:15:
         4b:52:9c:9d:7e:da:20:77:2a:3b:7f:52:2b:4a:43:4b:e4:d6:
         ba:10:fd:ae:75:70:c0:58:6d:00:60:54:cf:b4:cc:7f:55:82:
         e9:ba:b5:6a:12:89:e4:22:25:93:cf:15:2d:98:ae:69:c8:c0:
         69:ce:9d:4c:63:45:98:27:28:9f:82:8a:80:07:84:aa:12:8e:
         a0:65:ab:ba:05:dc:5d:e2:94:00:bb:8c:b4:4e:8c:f9:ec:ff:
         44:41:a6:32:ea:d8:f6:e4:64:10:e8:48:7c:d7:25:d0:da:37:
         b6:f0:46:c1:0e:24:6d:a2:f8:92:50:87:15:e4:57:f7:7d:39:
         b7:27:95:a4:6a:1c:7c:36:ab:16:a2:2a:24:23:b2:e3:b1:8d:
         de:39:c2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:02:53 2025 by rpki-client