Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/3130332e39382e3132302e302f32342d3234203d3e20313336383238.roa
File:                     3130332e39382e3132302e302f32342d3234203d3e20313336383238.roa (raw, json)
Hash identifier:          otrTvPdXJ2c7XawCgl4uHz6MNarL+/Mepjzl/48ej8I=
Subject key identifier:   95:0B:3E:21:86:50:78:1A:98:98:EA:9A:B8:8A:6D:29:9D:1B:8D:3D
Certificate issuer:       /CN=D9DFDED2F525C1E82251BA90ED838157F0B6FB19
Certificate serial:       0E4E53CE8C8D4F3DB921D324383917212E460B23
Authority key identifier: D9:DF:DE:D2:F5:25:C1:E8:22:51:BA:90:ED:83:81:57:F0:B6:FB:19
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/3130332e39382e3132302e302f32342d3234203d3e20313336383238.roa
Signing time:             Fri 09 May 2025 12:00:01 +0000
ROA not before:           Fri 09 May 2025 11:55:01 +0000
ROA not after:            Fri 08 May 2026 12:00:01 +0000
asID:                     136828
IP address blocks:        103.98.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.crl
                          rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 May 2025 12:45:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:4e:53:ce:8c:8d:4f:3d:b9:21:d3:24:38:39:17:21:2e:46:0b:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9DFDED2F525C1E82251BA90ED838157F0B6FB19
        Validity
            Not Before: May  9 11:55:01 2025 GMT
            Not After : May  8 12:00:01 2026 GMT
        Subject: CN=950B3E218650781A9898EA9AB88A6D299D1B8D3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b4:38:c9:26:5e:7f:c0:67:7d:cf:4f:71:40:
                    30:11:4a:16:f4:24:6d:6c:85:3f:68:b7:d1:db:fe:
                    a7:67:8d:87:23:3f:68:63:9d:65:5d:ad:59:14:77:
                    17:3e:1f:23:8e:72:74:93:cb:df:d5:80:48:f4:6b:
                    f9:7c:b5:f4:9d:54:05:23:da:04:e2:e4:8d:9c:32:
                    7d:75:f6:71:4f:fa:d9:ee:92:b6:b5:4a:fc:69:9e:
                    4b:8e:e6:e4:0a:28:3c:e9:38:0e:ee:1a:98:ca:b5:
                    ab:61:da:8d:36:0f:fd:18:41:fe:c5:e7:41:8c:d8:
                    20:74:40:6d:78:c0:de:fa:1e:0d:11:3e:a5:f4:15:
                    35:7d:9d:18:27:d2:ac:0d:9e:4b:a6:72:82:1e:9d:
                    bc:bf:3b:a4:2c:69:cf:3f:be:fa:ff:a9:60:e8:92:
                    ea:82:6b:1c:a5:f2:b2:f9:d2:2d:82:4a:39:4a:91:
                    2d:1e:01:72:f6:65:ae:70:c0:7d:89:77:67:91:d1:
                    d7:4b:d1:97:6a:cd:52:3a:25:e9:00:df:43:0d:bc:
                    ed:25:fc:54:13:a3:9b:27:70:bb:eb:22:55:53:27:
                    a5:81:7e:3e:1a:64:9f:d3:60:a1:9c:84:59:25:31:
                    cf:a2:39:f8:59:cd:c5:b6:0a:0c:31:8e:2b:0b:c4:
                    b5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:0B:3E:21:86:50:78:1A:98:98:EA:9A:B8:8A:6D:29:9D:1B:8D:3D
            X509v3 Authority Key Identifier:
                keyid:D9:DF:DE:D2:F5:25:C1:E8:22:51:BA:90:ED:83:81:57:F0:B6:FB:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9DFDED2F525C1E82251BA90ED838157F0B6FB19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/510be353-4ab8-4b77-988d-739f82b9f641/0/3130332e39382e3132302e302f32342d3234203d3e20313336383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:a1:ee:4b:12:2d:91:42:91:28:60:4a:01:05:19:bd:ae:8a:
         16:9f:3c:3e:cb:4c:37:f2:8b:a0:14:1b:80:47:58:4d:a5:04:
         f4:2b:e4:e1:a7:32:8b:19:f8:23:aa:ee:c2:37:59:e7:eb:67:
         e8:ce:f8:c5:e7:a2:b8:91:2a:cb:2d:57:42:9b:29:16:7c:db:
         a5:a7:f6:ee:38:67:83:fb:01:0e:9c:00:93:af:4d:bc:68:dd:
         15:35:0c:db:3c:87:3d:eb:77:00:2a:a5:66:88:e6:4e:8d:f3:
         df:82:f7:45:58:aa:22:04:18:7e:87:6d:bf:96:b9:9e:b9:80:
         d0:71:b4:cc:b0:0d:8d:41:9c:39:6e:a8:99:54:ab:b2:f4:b4:
         a7:8f:c7:38:20:d6:e9:06:92:68:e2:14:59:95:4e:ea:51:d7:
         89:ba:c0:10:45:40:f6:af:96:88:de:88:45:09:b9:bf:33:54:
         60:13:49:76:df:de:dc:f8:a3:22:2b:58:10:2c:3f:c2:3f:47:
         9c:c4:46:e0:d1:1c:da:ed:a7:85:17:7c:4a:84:2f:da:18:5d:
         8d:5e:94:da:8b:6a:43:f5:cb:3f:cc:97:b4:03:35:d1:74:02:
         bc:4f:f1:68:9a:b2:cb:e3:9b:db:08:f2:0f:33:2c:04:82:5e:
         34:65:e3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:38:26 2025 by rpki-client