Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/3130332e3233352e36362e302f32332d3234203d3e203633343930.roa
File:                     3130332e3233352e36362e302f32332d3234203d3e203633343930.roa (raw, json)
Hash identifier:          cRRAppEwNWUZNxFFrqVntnb4uz3yNuZo0Z65i1BCFzs=
Subject key identifier:   CC:D6:7A:1D:15:1C:95:F2:49:45:39:2E:44:16:AF:EB:81:BF:1B:95
Certificate issuer:       /CN=1D996206B24E67937CEF2CE40882DBFAD893F1FB
Certificate serial:       01BC526E766BF209EE569CEEDAFF4BA6A686654D
Authority key identifier: 1D:99:62:06:B2:4E:67:93:7C:EF:2C:E4:08:82:DB:FA:D8:93:F1:FB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/3130332e3233352e36362e302f32332d3234203d3e203633343930.roa
Signing time:             Sun 22 Jun 2025 20:00:01 +0000
ROA not before:           Sun 22 Jun 2025 19:55:01 +0000
ROA not after:            Sun 21 Jun 2026 20:00:01 +0000
asID:                     63490
IP address blocks:        103.235.66.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl
                          rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Jul 2025 00:03:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:bc:52:6e:76:6b:f2:09:ee:56:9c:ee:da:ff:4b:a6:a6:86:65:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D996206B24E67937CEF2CE40882DBFAD893F1FB
        Validity
            Not Before: Jun 22 19:55:01 2025 GMT
            Not After : Jun 21 20:00:01 2026 GMT
        Subject: CN=CCD67A1D151C95F24945392E4416AFEB81BF1B95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fb:b4:c2:83:b1:46:90:2d:c6:9c:de:cb:e5:
                    7a:ff:52:b3:63:e7:1f:ea:70:77:43:9f:e4:a2:19:
                    a8:63:74:3e:49:32:4e:5d:e4:d5:c7:02:6e:f7:46:
                    a2:8d:b3:6b:cb:1f:d3:82:56:fb:6c:7a:24:82:c3:
                    2a:18:dc:0e:9d:3c:5f:45:bb:c5:5e:44:12:7c:07:
                    66:cb:3c:e3:12:f1:b5:66:d0:1c:d4:a9:0f:e5:f7:
                    23:1e:59:20:5e:c2:dd:43:ee:ba:b9:9a:ea:8c:ad:
                    6b:96:32:82:ea:6c:3a:98:2a:1a:cd:68:8a:47:9a:
                    65:60:82:98:98:1c:06:44:81:7d:5c:88:57:cf:a6:
                    37:c5:d0:db:7d:ba:5f:1c:c7:89:ea:08:d2:d2:d8:
                    b7:b2:8a:d7:6a:ab:bf:aa:87:09:d9:29:86:1b:f1:
                    c5:e4:22:da:c1:0f:8c:f6:b9:c3:f2:9e:da:9c:d7:
                    04:c8:39:00:94:68:72:1e:5f:39:52:a0:6a:2e:c0:
                    3c:8c:3e:13:d2:f2:77:b3:c2:0f:1c:ac:8f:eb:fc:
                    9d:64:af:da:9b:c7:f0:26:d0:1e:67:9c:93:cf:91:
                    b7:3a:34:54:58:85:21:61:ff:51:ee:62:29:26:73:
                    26:94:52:cf:bc:15:34:c0:ea:b7:95:66:1f:2d:10:
                    05:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:D6:7A:1D:15:1C:95:F2:49:45:39:2E:44:16:AF:EB:81:BF:1B:95
            X509v3 Authority Key Identifier:
                keyid:1D:99:62:06:B2:4E:67:93:7C:EF:2C:E4:08:82:DB:FA:D8:93:F1:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/3130332e3233352e36362e302f32332d3234203d3e203633343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.235.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:1d:b2:10:6f:94:8f:b0:ee:7a:07:04:0f:14:55:e1:f0:39:
         81:bd:a6:e8:2f:c1:93:fb:b2:5b:b1:f7:c8:68:33:ee:3a:af:
         01:97:29:ae:3d:15:26:bb:32:2b:76:2e:42:40:de:70:f6:b9:
         4f:25:82:ed:ac:82:a2:16:31:0d:aa:6d:0a:fe:05:f3:05:2c:
         73:01:f1:cf:10:36:60:70:76:58:49:76:f0:42:1c:c6:2d:a2:
         f6:24:d9:8b:99:72:27:a9:88:63:54:69:47:02:c3:c7:fb:a0:
         85:eb:8f:e1:d1:ed:80:f8:8f:e6:43:e6:17:0a:74:54:ae:5e:
         f0:e4:5b:6c:a1:72:77:b9:a9:97:de:be:6b:90:a5:73:c9:5f:
         f0:78:46:1d:b2:09:59:ad:d1:ea:2f:b4:b5:5c:1f:50:6e:63:
         41:7f:c6:88:74:f7:78:bc:0e:26:31:73:72:d6:3b:ec:98:df:
         a6:1c:9d:54:07:f0:73:6a:16:0e:08:5a:90:66:96:39:28:1f:
         51:52:ab:3e:4a:b6:37:6b:ea:fd:25:f5:7e:36:68:51:9d:82:
         fc:b0:61:10:c5:4b:b5:fa:3a:74:75:c8:f3:c9:23:8c:c1:84:
         30:f4:55:ec:a1:b1:a3:5d:3e:ab:07:7f:9f:f9:09:75:a4:39:
         16:6e:72:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 08:58:16 2025 by rpki-client