Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3130332e38332e3134302e302f32342d3234203d3e203338313635.roa
File:                     3130332e38332e3134302e302f32342d3234203d3e203338313635.roa (raw, json)
Hash identifier:          ATeN3tNkqgfoyAa1waxGjpYBcZombZoSMq6eVLBD1QM=
Subject key identifier:   85:08:93:0B:76:0C:1E:FA:88:C3:2A:4B:FF:41:D6:2C:EC:1E:37:BA
Certificate issuer:       /CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
Certificate serial:       18DD218A85328F8430E9DB5841F741475D9FC853
Authority key identifier: F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3130332e38332e3134302e302f32342d3234203d3e203338313635.roa
Signing time:             Mon 02 Jun 2025 01:03:26 +0000
ROA not before:           Mon 02 Jun 2025 00:58:26 +0000
ROA not after:            Mon 01 Jun 2026 01:03:26 +0000
asID:                     38165
IP address blocks:        103.83.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl
                          rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 14:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:dd:21:8a:85:32:8f:84:30:e9:db:58:41:f7:41:47:5d:9f:c8:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
        Validity
            Not Before: Jun  2 00:58:26 2025 GMT
            Not After : Jun  1 01:03:26 2026 GMT
        Subject: CN=8508930B760C1EFA88C32A4BFF41D62CEC1E37BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:35:e6:e1:c2:93:bf:94:15:e1:9b:46:54:aa:
                    6b:db:c2:66:7a:af:88:cc:90:32:d6:c5:68:74:00:
                    c6:e9:a8:d5:3f:a9:39:83:17:99:92:5c:d2:8d:c8:
                    f3:5a:6d:b9:9f:dc:51:d4:1d:48:c8:f9:88:fb:f2:
                    12:07:ba:ca:62:c6:7c:15:ad:7e:e0:8b:26:e2:af:
                    9c:ba:ca:de:53:a6:c8:d8:20:05:55:9c:f1:7b:3d:
                    59:41:6a:32:f3:b5:00:02:c9:3c:a2:98:3e:ac:69:
                    e6:76:dd:08:03:0f:49:88:44:e0:e8:8a:f9:22:c4:
                    5b:bb:dd:16:ef:38:e9:2d:0e:38:25:fe:92:ff:f7:
                    fc:c2:6d:69:27:dc:93:ed:6d:ad:58:7b:d0:31:4b:
                    a6:c0:23:b3:30:1b:24:0b:ba:b9:e1:ba:59:44:af:
                    d3:e7:21:23:8e:e5:3d:69:84:0d:9c:ba:3d:06:d0:
                    c3:f6:9c:8d:a2:19:92:d7:34:b8:0e:15:f4:3e:e3:
                    e6:aa:d9:3f:d3:2a:a3:c2:f2:df:57:b1:8a:e8:20:
                    3f:93:c6:c4:6b:f3:da:99:28:97:91:72:d6:73:e4:
                    64:df:83:ff:09:30:59:35:c4:37:85:8a:26:ab:50:
                    ed:71:99:62:9e:0d:79:76:32:70:a2:ab:7e:28:89:
                    d5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:08:93:0B:76:0C:1E:FA:88:C3:2A:4B:FF:41:D6:2C:EC:1E:37:BA
            X509v3 Authority Key Identifier:
                keyid:F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3130332e38332e3134302e302f32342d3234203d3e203338313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:7a:08:46:0c:51:be:f4:b6:31:aa:b6:fb:9a:09:90:2e:fb:
         1f:ff:a3:5f:d1:0b:52:1f:82:23:b9:ad:72:25:54:71:fb:17:
         74:50:5f:62:2f:8e:9f:28:dc:d4:82:5e:99:66:97:f9:8c:56:
         12:56:69:53:2c:d1:9d:e0:5f:6c:82:f2:53:4b:62:38:8d:9f:
         cb:ce:ac:bc:ac:8e:f4:39:7b:bf:e4:93:79:59:9c:25:12:71:
         38:b7:18:79:18:78:b6:7a:fb:54:62:f0:77:52:d5:50:2a:67:
         c9:90:4f:6d:3f:90:3f:15:47:3e:6a:9a:9a:24:83:4b:d2:41:
         20:41:ec:55:b9:0f:13:4e:4b:12:93:bf:85:c0:73:13:fd:d4:
         61:ff:c1:4e:26:a6:e1:31:d9:0b:aa:49:4b:82:97:41:00:7e:
         bb:39:aa:af:33:7c:28:a0:c0:3c:64:06:93:d7:04:0d:9b:8a:
         3c:33:2f:3c:24:40:d1:82:c0:c7:36:fb:6d:5b:b2:64:29:20:
         7a:ff:88:c6:e7:6c:96:be:94:66:cb:7c:d9:a8:f7:2d:a0:35:
         51:5b:5d:6a:16:67:74:4d:bb:27:5a:e7:22:da:75:f9:c0:fb:
         26:06:16:3d:49:b8:5f:04:1d:d7:1b:de:32:36:c2:2a:a1:e0:
         ea:8c:d8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:48:16 2025 by rpki-client