Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/3130332e3132362e3232362e302f32342d3234203d3e20313338313135.roa
File:                     3130332e3132362e3232362e302f32342d3234203d3e20313338313135.roa (raw, json)
Hash identifier:          5HPmnH87KI1FMg8JnGalALCpcbOZusq5GP+rz9eFFOc=
Subject key identifier:   F7:AF:F4:43:BA:3B:2D:A5:26:AC:5A:E4:FD:DE:1C:00:08:1A:DB:0B
Certificate issuer:       /CN=9DEEEB0CB9492DADDE47B31629ACDA7241728768
Certificate serial:       6EAE241E524F8E0F662469D72AF27C6C36F2307D
Authority key identifier: 9D:EE:EB:0C:B9:49:2D:AD:DE:47:B3:16:29:AC:DA:72:41:72:87:68
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/3130332e3132362e3232362e302f32342d3234203d3e20313338313135.roa
Signing time:             Mon 02 Jun 2025 01:02:43 +0000
ROA not before:           Mon 02 Jun 2025 00:57:43 +0000
ROA not after:            Mon 01 Jun 2026 01:02:43 +0000
asID:                     138115
IP address blocks:        103.126.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl
                          rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Jul 2025 02:31:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ae:24:1e:52:4f:8e:0f:66:24:69:d7:2a:f2:7c:6c:36:f2:30:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DEEEB0CB9492DADDE47B31629ACDA7241728768
        Validity
            Not Before: Jun  2 00:57:43 2025 GMT
            Not After : Jun  1 01:02:43 2026 GMT
        Subject: CN=F7AFF443BA3B2DA526AC5AE4FDDE1C00081ADB0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:63:44:44:94:48:f0:eb:88:45:84:86:a3:c7:
                    98:11:6e:88:2c:4e:e4:1c:ac:04:39:59:76:3b:c7:
                    83:4e:25:25:76:31:ce:ff:79:75:d5:a1:8b:e0:7c:
                    43:44:8e:8b:0d:ee:06:7a:34:ad:22:10:19:8f:d7:
                    58:bc:b4:fc:d2:2c:85:3e:c1:2a:32:1f:ca:f3:c2:
                    d5:25:c1:45:e7:9a:07:24:8f:85:5b:45:31:69:8a:
                    4c:16:58:04:f9:67:5a:f4:31:76:d4:1c:df:7c:56:
                    02:a9:33:39:99:08:09:78:2e:67:5a:16:d6:19:ac:
                    10:44:ae:79:2a:c5:c3:2f:60:07:56:96:98:74:eb:
                    14:29:e5:02:aa:e7:d1:61:f1:78:81:32:9c:59:fa:
                    68:e4:59:fe:16:04:df:c4:c7:b6:74:36:e4:e1:62:
                    e5:cc:3e:55:b3:f1:8e:9d:71:d5:14:0c:52:6b:a8:
                    6b:ac:de:74:b1:8a:20:57:0a:4b:39:bf:cf:e2:d5:
                    4d:be:c0:11:62:58:cf:ec:34:3c:d3:92:2b:92:67:
                    3b:88:b3:e2:13:8f:35:5a:af:fd:38:e5:3d:1d:13:
                    36:f5:2f:68:8d:d7:30:05:d4:04:56:a0:bf:ce:f6:
                    c2:15:b6:88:84:c3:da:78:cf:b2:f3:91:1c:b3:6c:
                    48:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:AF:F4:43:BA:3B:2D:A5:26:AC:5A:E4:FD:DE:1C:00:08:1A:DB:0B
            X509v3 Authority Key Identifier:
                keyid:9D:EE:EB:0C:B9:49:2D:AD:DE:47:B3:16:29:AC:DA:72:41:72:87:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/9DEEEB0CB9492DADDE47B31629ACDA7241728768.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9DEEEB0CB9492DADDE47B31629ACDA7241728768.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64cf632d-d61a-4826-b572-9f1948ae580c/0/3130332e3132362e3232362e302f32342d3234203d3e20313338313135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:e7:18:f4:af:2a:dc:3d:c3:b2:d9:39:5d:bc:7b:d9:56:4a:
         b9:f5:a6:6a:20:5e:fb:5d:f1:73:a3:9e:52:27:32:fc:74:a4:
         5d:a7:f4:27:75:ce:89:74:7c:ce:31:5d:a7:98:51:3a:13:e7:
         c9:ea:f8:57:3b:4f:02:e7:54:52:53:6b:92:f9:4f:92:ed:a7:
         29:c8:80:24:9b:5f:e6:b6:d3:11:9a:65:c6:a7:b7:ee:d8:aa:
         ef:5f:68:7d:d4:2f:05:2f:95:90:f2:2e:7b:07:03:f0:4f:68:
         c8:bd:fe:50:df:78:62:c4:ec:f8:ac:88:63:cb:52:ae:4b:dc:
         7e:07:cd:e1:d0:16:2b:fd:d8:d8:c7:ff:e9:91:6f:9e:0d:ff:
         f7:27:43:f1:8a:ba:66:e7:28:0d:32:47:c3:48:5f:b8:fd:d5:
         fb:ac:9b:1b:60:35:23:49:d9:3c:aa:ee:d5:c5:d8:ce:d5:5f:
         f9:0a:03:35:e7:1b:32:58:e7:8e:e5:51:a9:f3:c6:6c:85:ea:
         c5:31:eb:d2:10:f7:e9:81:92:40:d7:6f:3e:a9:69:fd:6d:23:
         11:cc:9f:a6:ef:59:14:fb:92:f1:de:50:dc:13:2b:fa:2f:da:
         cb:8b:a7:44:97:52:f5:2d:96:99:5f:9d:8e:22:ae:a6:f4:94:
         96:db:19:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:21:38 2025 by rpki-client