Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e34322e34302e302f32322d3234203d3e2039333431.roa
File:                     3130332e34322e34302e302f32322d3234203d3e2039333431.roa (raw, json)
Hash identifier:          dZNurUzGE71plLJUDinb53MDUZZdY41qxJNfWk+b3XQ=
Subject key identifier:   F0:39:3C:A6:FA:39:60:23:05:2E:09:F8:65:15:1D:E6:64:13:43:4C
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       03ADAF5503599970752481551EC9C881583F33C8
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e34322e34302e302f32322d3234203d3e2039333431.roa
Signing time:             Fri 27 Jun 2025 15:00:01 +0000
ROA not before:           Fri 27 Jun 2025 14:55:01 +0000
ROA not after:            Fri 26 Jun 2026 15:00:01 +0000
asID:                     9341
IP address blocks:        103.42.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Jul 2025 07:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ad:af:55:03:59:99:70:75:24:81:55:1e:c9:c8:81:58:3f:33:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Jun 27 14:55:01 2025 GMT
            Not After : Jun 26 15:00:01 2026 GMT
        Subject: CN=F0393CA6FA396023052E09F865151DE66413434C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:42:43:96:bd:2a:e5:60:30:4a:b6:b1:b9:53:
                    29:e4:b4:86:63:72:b7:e6:02:c3:99:bd:d3:88:93:
                    81:3c:80:5f:a5:7d:33:33:b5:d3:14:29:28:95:4e:
                    01:e6:3b:eb:63:ae:f9:47:2a:11:00:7e:d9:21:1f:
                    91:88:b5:f8:7d:fa:b5:54:20:5e:2f:9c:98:15:1f:
                    fe:3b:eb:ad:0d:7d:2f:ca:12:7b:51:cf:5c:3e:6c:
                    3e:aa:93:3d:ce:ef:00:f5:64:0c:5e:45:23:73:73:
                    14:b7:f0:67:0e:66:44:4f:fd:8d:b2:3d:ca:37:30:
                    c3:9a:b2:59:a5:93:a2:0b:c7:0e:20:3f:72:53:42:
                    c5:8b:f2:dc:10:c6:d5:05:01:79:77:a2:fc:7a:26:
                    13:17:2f:51:58:2f:63:33:94:d9:86:3e:57:cf:4b:
                    42:8b:d8:c5:08:a0:77:5a:1c:25:2c:74:ba:47:7f:
                    df:87:3a:c3:11:39:28:38:a8:df:e5:b0:5b:f7:6f:
                    e0:67:58:e1:27:1c:02:0d:b8:38:76:e3:c2:dd:45:
                    19:53:b0:53:e7:77:77:c4:5b:a6:a3:40:9f:51:8d:
                    44:72:53:13:b8:17:65:c5:18:15:2c:29:61:de:b2:
                    9c:b4:f1:f7:2f:ea:3d:d3:53:cf:a6:e2:31:27:53:
                    d7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:39:3C:A6:FA:39:60:23:05:2E:09:F8:65:15:1D:E6:64:13:43:4C
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e34322e34302e302f32322d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:74:10:7e:5a:b7:c0:14:16:05:40:b4:0e:3a:fa:d6:cf:6c:
         ce:18:80:f9:87:66:65:db:8d:07:7e:fb:cf:e1:d5:9f:ab:18:
         22:4f:51:74:dc:f0:31:dd:28:9d:cf:1a:87:8d:a7:16:71:1d:
         a5:e6:dc:24:d9:08:f3:e5:98:3e:a7:37:d4:d2:17:d2:07:13:
         b0:22:a0:74:26:af:ca:fd:11:b2:67:81:c3:f8:65:0c:9d:a2:
         ab:f9:3e:cb:af:57:3a:59:08:91:90:80:e9:7b:1c:67:c8:f8:
         36:b3:74:d2:cc:cd:2a:56:a4:6c:17:13:44:8b:70:5b:f8:aa:
         19:09:1e:00:5c:8e:bb:31:4a:24:21:1a:af:12:89:fe:f2:43:
         56:8d:3b:7e:ab:e2:30:9a:3c:f4:5d:ca:1e:62:ba:6b:c7:f6:
         10:46:33:fd:a4:bb:68:f5:d9:cf:2f:30:c2:6d:e9:a1:ee:01:
         79:9c:ef:dd:c5:5a:d0:4f:5a:f1:41:94:bf:ec:7d:a2:1c:b8:
         16:c6:08:89:bc:96:15:70:97:70:bf:04:c4:30:c2:66:56:96:
         08:6c:fb:2f:ef:f0:66:c3:41:1f:54:31:ab:7c:ab:ee:3f:ec:
         6f:7b:a5:e6:86:34:3f:33:31:bc:88:9b:6b:68:73:4e:86:32:
         eb:e1:86:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 02:49:03 2025 by rpki-client