Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/3130332e3133302e372e302f32342d3234203d3e20313338303933.roa
File:                     3130332e3133302e372e302f32342d3234203d3e20313338303933.roa (raw, json)
Hash identifier:          g5hlJx5VxwLWFsZdGKqn9r2RuteLPSgtrh1sr6LNmhM=
Subject key identifier:   5C:08:12:BA:5D:50:26:1C:AD:FC:3F:5C:0D:AF:DB:B6:4F:6D:78:63
Certificate issuer:       /CN=55C7A5D56CEC1316CFE660C79C02C16FCE38102A
Certificate serial:       782FC1AC0AB04DD9CDC39876566BF74B8D4E3969
Authority key identifier: 55:C7:A5:D5:6C:EC:13:16:CF:E6:60:C7:9C:02:C1:6F:CE:38:10:2A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/3130332e3133302e372e302f32342d3234203d3e20313338303933.roa
Signing time:             Fri 20 Jun 2025 14:00:02 +0000
ROA not before:           Fri 20 Jun 2025 13:55:02 +0000
ROA not after:            Fri 19 Jun 2026 14:00:02 +0000
asID:                     138093
IP address blocks:        103.130.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.crl
                          rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Jul 2025 07:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:2f:c1:ac:0a:b0:4d:d9:cd:c3:98:76:56:6b:f7:4b:8d:4e:39:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55C7A5D56CEC1316CFE660C79C02C16FCE38102A
        Validity
            Not Before: Jun 20 13:55:02 2025 GMT
            Not After : Jun 19 14:00:02 2026 GMT
        Subject: CN=5C0812BA5D50261CADFC3F5C0DAFDBB64F6D7863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:64:6f:13:3e:4e:d5:01:65:fe:00:54:cc:33:
                    a4:40:1d:ff:28:64:e2:8e:8c:e1:88:2c:4f:3e:c2:
                    f1:82:7f:ef:e1:f8:47:96:c0:da:de:ea:c5:3e:56:
                    9c:5c:3f:b3:62:9e:7f:a3:e8:af:26:17:b9:c7:48:
                    6d:6b:b4:1f:eb:5d:c5:7f:f6:f0:25:ee:58:af:17:
                    b7:af:2b:d6:e2:8d:ff:69:16:5c:51:5f:8c:a9:9c:
                    7e:c6:93:c9:c2:0d:bc:f4:a0:65:05:90:22:7d:ae:
                    b3:4e:78:cd:53:00:35:e1:5f:05:d8:a2:34:4d:37:
                    3c:11:a0:a1:85:26:af:a0:68:fb:05:fc:98:0b:91:
                    78:b1:3e:5b:b6:55:6d:47:4e:fd:ad:14:91:81:98:
                    00:60:ff:d8:9e:00:d5:d1:82:4f:e9:c3:ab:45:7e:
                    3f:37:51:05:70:97:75:06:36:3d:ab:b7:78:08:56:
                    e0:5a:71:a3:a9:8c:3e:53:60:62:8a:a0:c7:1b:a5:
                    54:63:f1:6c:ef:5b:76:73:5f:72:62:ed:5e:ce:56:
                    3b:70:ed:92:e1:a8:6e:9f:de:70:53:53:2c:37:e2:
                    1e:c8:48:68:1e:e1:7a:2c:e1:a5:fc:3d:1f:56:06:
                    e0:b8:a7:2a:81:7a:df:a7:94:56:28:35:73:d9:7c:
                    a0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:08:12:BA:5D:50:26:1C:AD:FC:3F:5C:0D:AF:DB:B6:4F:6D:78:63
            X509v3 Authority Key Identifier:
                keyid:55:C7:A5:D5:6C:EC:13:16:CF:E6:60:C7:9C:02:C1:6F:CE:38:10:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/3130332e3133302e372e302f32342d3234203d3e20313338303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:2f:bb:1a:87:f3:11:a2:30:65:99:dd:9e:c0:24:b3:38:af:
         4d:c8:c3:43:1f:50:8a:be:f0:19:54:f5:bb:a9:55:d6:da:a5:
         46:21:9b:55:ee:d4:39:35:b7:0a:a5:e5:e6:f5:17:a8:a9:46:
         76:d6:de:bf:dd:ac:1f:bd:81:23:82:21:50:fc:4c:9b:d3:86:
         96:74:29:7c:67:36:54:18:e1:97:f3:20:48:c1:7f:03:21:ad:
         79:00:5c:a5:87:a6:eb:5e:da:dd:02:37:a3:06:94:4b:5c:40:
         86:99:03:56:88:c2:95:7c:a0:41:f6:58:e7:45:2b:99:85:4c:
         6a:6e:2d:40:93:63:79:f0:69:91:d9:e9:fd:a3:2d:a4:49:4c:
         81:86:a4:f5:77:ce:94:3d:4c:3b:ac:12:2b:7e:9a:34:50:06:
         92:fe:65:c1:64:9b:e5:59:b7:f2:cc:b8:22:87:b6:c6:c3:ce:
         db:f5:7f:58:94:09:d4:f1:61:5f:8b:4f:9a:68:8c:76:9d:b2:
         a0:4b:fd:57:3c:b2:ba:ba:2d:29:38:01:9f:59:be:14:96:89:
         d6:04:90:b9:3c:74:0a:21:65:63:96:b6:fd:8b:66:e5:24:f0:
         93:a7:cb:47:79:c9:a6:0d:9f:0c:9c:93:06:05:b5:d1:b3:a3:
         4d:6a:d7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 04:07:12 2025 by rpki-client