Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/3130332e3136302e36392e302f32342d3234203d3e203438343635.roa
File:                     3130332e3136302e36392e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier:          K+vQljm+ExeOXd+J7K26cCdQKnYakCROUmRDg3WOiF4=
Subject key identifier:   58:64:FF:94:5E:E1:51:91:FA:BF:85:DE:E2:66:5B:F7:92:71:E0:15
Certificate issuer:       /CN=401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD
Certificate serial:       6E7F8EE60AD35252898C32D7A40AE7EDFE5289EF
Authority key identifier: 40:1A:A5:6A:F5:99:CC:A2:CD:71:A6:84:FF:CF:53:FF:F9:DD:E3:DD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/3130332e3136302e36392e302f32342d3234203d3e203438343635.roa
Signing time:             Mon 16 Jun 2025 00:00:01 +0000
ROA not before:           Sun 15 Jun 2025 23:55:01 +0000
ROA not after:            Mon 15 Jun 2026 00:00:01 +0000
asID:                     48465
IP address blocks:        103.160.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl
                          rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Jul 2025 09:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:7f:8e:e6:0a:d3:52:52:89:8c:32:d7:a4:0a:e7:ed:fe:52:89:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD
        Validity
            Not Before: Jun 15 23:55:01 2025 GMT
            Not After : Jun 15 00:00:01 2026 GMT
        Subject: CN=5864FF945EE15191FABF85DEE2665BF79271E015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9b:54:ec:f4:44:2d:6a:06:00:1e:bd:97:af:
                    34:e7:74:7f:16:98:3a:4b:0e:d0:20:e5:52:5a:55:
                    70:d5:74:37:20:7d:dd:cc:b8:4a:93:6d:01:8e:1d:
                    c3:96:33:64:89:79:96:c6:3e:d6:52:d5:46:8a:07:
                    79:7c:90:6e:81:a8:7b:40:23:bb:b3:d5:f8:91:e5:
                    02:ea:93:8f:b5:ce:c8:32:c8:6f:d6:91:aa:a2:78:
                    06:4c:04:4a:d3:3f:21:d5:26:57:ef:bd:24:ff:36:
                    b1:25:2b:69:7b:45:55:c8:31:f8:42:9d:58:58:23:
                    e5:b4:79:0f:26:23:0e:38:4e:b7:a9:a6:5b:06:36:
                    3c:f3:f9:c0:b3:ce:13:eb:de:42:e5:64:8f:54:3a:
                    ce:55:19:a9:91:b9:29:69:48:d2:19:ae:39:55:96:
                    66:cb:83:4e:b9:5e:83:21:d5:c2:d3:cd:b2:ec:1b:
                    2e:fc:8b:64:38:3e:de:45:5e:22:d3:44:d4:b6:4e:
                    c4:5c:a9:31:e6:4a:ff:e9:f3:e1:e8:40:a0:89:93:
                    6a:26:a2:f7:95:7c:e4:79:bc:79:8d:49:b6:a6:40:
                    d4:26:90:1d:72:48:e5:47:2b:9e:a9:f3:e6:51:e6:
                    47:40:bf:90:08:c3:cb:52:c3:9b:91:05:c9:fd:25:
                    b7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:64:FF:94:5E:E1:51:91:FA:BF:85:DE:E2:66:5B:F7:92:71:E0:15
            X509v3 Authority Key Identifier:
                keyid:40:1A:A5:6A:F5:99:CC:A2:CD:71:A6:84:FF:CF:53:FF:F9:DD:E3:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/3130332e3136302e36392e302f32342d3234203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:b3:48:8c:2d:6f:b5:5c:65:79:c0:27:cc:d1:e0:91:c8:cc:
         ad:93:83:01:94:9e:92:8d:8c:1a:f5:d5:78:c2:7d:fb:a9:37:
         61:1f:f0:30:c9:08:4a:a2:a5:00:c0:7f:0b:e0:f7:87:d8:7b:
         00:7e:c6:69:7f:fe:9c:87:49:14:3b:27:b8:b1:3e:48:1a:1d:
         1c:80:32:02:d1:38:f3:9a:d6:f0:e2:a8:87:de:4a:32:0f:ec:
         bc:c4:1b:ac:89:5e:93:97:52:84:3b:18:87:9f:b8:58:9f:91:
         70:d7:08:53:c4:5a:31:21:32:0f:82:9f:f3:8f:72:be:01:5d:
         40:09:7b:fd:e8:7b:38:0c:25:23:81:19:01:c4:57:1d:89:17:
         78:bb:ef:61:81:1f:e0:41:a5:7e:71:4f:ec:4a:a0:e4:0c:58:
         6f:3b:aa:c5:e4:92:91:2e:db:2f:84:96:7e:e1:c9:ed:31:70:
         80:de:f0:57:d8:3f:f0:53:d9:f8:3f:90:17:bf:4c:f5:bd:4c:
         d5:ef:50:1b:fe:60:0f:5a:4c:c6:fc:b7:c8:0c:ed:19:ab:a5:
         07:92:bd:42:db:70:5b:fd:13:b2:f2:34:a0:09:45:50:d4:82:
         7b:ee:2a:a0:11:54:89:e1:49:7f:5f:ec:22:bf:54:8f:6b:95:
         86:48:7f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:31:33 2025 by rpki-client