Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/3130332e3130372e38352e302f32342d3234203d3e20313336383739.roa
File:                     3130332e3130372e38352e302f32342d3234203d3e20313336383739.roa (raw, json)
Hash identifier:          2H5831uY9aR1OjDn1Uun2zJ8vaTAjB4BokOjcc3Moq4=
Subject key identifier:   DF:59:02:EA:6B:01:AE:B5:6A:6C:D4:6D:D7:89:B6:BD:BC:91:12:D4
Certificate issuer:       /CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1
Certificate serial:       198A533E69F4E08F265CD6742AC30551EADF43C8
Authority key identifier: 22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/3130332e3130372e38352e302f32342d3234203d3e20313336383739.roa
Signing time:             Mon 02 Jun 2025 02:04:07 +0000
ROA not before:           Mon 02 Jun 2025 01:59:07 +0000
ROA not after:            Mon 01 Jun 2026 02:04:07 +0000
asID:                     136879
IP address blocks:        103.107.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl
                          rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Jul 2025 04:12:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:8a:53:3e:69:f4:e0:8f:26:5c:d6:74:2a:c3:05:51:ea:df:43:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1
        Validity
            Not Before: Jun  2 01:59:07 2025 GMT
            Not After : Jun  1 02:04:07 2026 GMT
        Subject: CN=DF5902EA6B01AEB56A6CD46DD789B6BDBC9112D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:49:0c:bd:67:1c:29:2d:44:da:8d:1d:6a:fc:
                    37:a6:e9:0f:58:47:80:82:85:a7:e9:1d:14:36:8d:
                    1b:de:74:1a:e7:92:c4:e7:e4:9f:37:7e:32:51:0c:
                    3e:12:02:cf:e7:50:98:b1:67:6e:09:42:90:60:fd:
                    a5:98:dd:01:48:37:cf:b5:d8:72:3b:2d:26:8b:dc:
                    cd:44:32:10:5b:16:41:c3:c8:f8:12:54:33:17:66:
                    5d:a0:d3:65:7d:b6:d0:7b:74:df:06:70:b4:31:2c:
                    35:57:2f:37:97:7e:14:36:be:ff:7e:63:6a:33:9d:
                    17:25:da:a8:3a:32:08:bc:fc:7e:cd:b7:a8:f9:82:
                    bc:9a:21:5a:fe:26:09:0c:2c:eb:cd:57:d7:15:94:
                    38:22:59:f7:e1:b2:fc:fa:8b:25:43:be:40:99:b4:
                    89:c9:ed:23:6a:35:f3:4a:2a:ce:05:90:8c:f5:7a:
                    f9:c6:12:3c:ae:88:9f:f1:f7:6c:44:24:6e:f2:e2:
                    09:db:2a:cb:b3:e9:ee:d7:b8:5e:1a:d2:12:9d:ec:
                    69:1b:ff:48:8e:d9:4a:78:ec:51:72:4c:bc:b1:43:
                    8c:40:eb:d4:18:9f:b1:c5:08:90:2d:dd:b2:bb:05:
                    be:33:cb:45:d0:71:ff:91:da:ff:3c:63:47:50:ea:
                    05:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:59:02:EA:6B:01:AE:B5:6A:6C:D4:6D:D7:89:B6:BD:BC:91:12:D4
            X509v3 Authority Key Identifier:
                keyid:22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/3130332e3130372e38352e302f32342d3234203d3e20313336383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.107.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:fe:e9:db:b5:48:df:b5:f6:09:8c:59:af:be:73:59:cb:dd:
         23:92:73:1a:9a:65:91:49:3d:55:e0:5d:21:ee:7a:aa:17:29:
         4e:10:21:c2:66:ea:29:30:15:de:6b:ba:c5:13:84:8c:cc:7e:
         c3:83:a3:af:b9:b1:0a:d5:fc:89:9a:a5:0a:4b:6b:3e:63:2a:
         af:f6:92:2a:e8:1a:d9:e9:21:26:4d:8b:c1:7b:82:48:33:37:
         6e:f1:b3:a7:60:44:33:19:b8:e2:97:9c:8a:31:1c:65:ec:44:
         5a:05:f7:a1:f3:cd:1e:fd:8f:02:05:da:8e:4f:af:8c:31:f4:
         e1:a0:bd:50:b2:85:d2:93:7e:87:91:4f:c1:ed:9f:89:fb:f8:
         8f:d0:da:0e:5a:52:ff:06:d1:ff:9b:3a:66:77:68:39:99:db:
         bc:4c:21:4e:38:71:65:07:30:c7:39:21:d3:42:8e:5e:60:05:
         61:3d:8f:f9:af:48:0a:c1:68:b7:2f:c3:3f:fc:db:9d:57:3f:
         35:84:33:92:11:cc:fd:8b:db:41:e3:55:c9:39:4d:53:48:02:
         02:a8:8e:66:bf:84:44:b6:25:d1:93:d2:aa:9f:15:a0:fa:f6:
         a3:dd:18:5e:1c:40:e6:18:6b:23:af:a3:f4:a3:e4:09:14:2d:
         af:af:75:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 07:45:38 2025 by rpki-client