Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/3130332e3135332e3139302e302f32342d3234203d3e20313430343639.roa
File:                     3130332e3135332e3139302e302f32342d3234203d3e20313430343639.roa (raw, json)
Hash identifier:          j21itrf8qD4AmUrxncy40ymX8U/GV6CW8szjNUym4g4=
Subject key identifier:   1E:E5:48:4E:EE:0C:74:78:8E:5A:AB:36:3F:0F:37:31:A4:62:E4:26
Certificate issuer:       /CN=10C3E17639C8B193629F97DCBD1EF4332CC9A8AD
Certificate serial:       1C7234D75C6337F28BC9F359C0C3635B85DACC07
Authority key identifier: 10:C3:E1:76:39:C8:B1:93:62:9F:97:DC:BD:1E:F4:33:2C:C9:A8:AD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/3130332e3135332e3139302e302f32342d3234203d3e20313430343639.roa
Signing time:             Mon 02 Jun 2025 02:04:15 +0000
ROA not before:           Mon 02 Jun 2025 01:59:15 +0000
ROA not after:            Mon 01 Jun 2026 02:04:15 +0000
asID:                     140469
IP address blocks:        103.153.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.crl
                          rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Jul 2025 03:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:72:34:d7:5c:63:37:f2:8b:c9:f3:59:c0:c3:63:5b:85:da:cc:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10C3E17639C8B193629F97DCBD1EF4332CC9A8AD
        Validity
            Not Before: Jun  2 01:59:15 2025 GMT
            Not After : Jun  1 02:04:15 2026 GMT
        Subject: CN=1EE5484EEE0C74788E5AAB363F0F3731A462E426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b9:19:72:b8:46:24:ed:51:f3:f9:d1:c4:08:
                    90:57:52:7c:d1:dc:f1:dc:38:7c:a8:81:c5:9f:d5:
                    a8:91:8f:06:bb:a1:c5:80:f3:6f:ba:7e:8d:63:93:
                    44:21:b2:2d:3a:3c:cd:b6:64:33:df:90:d4:ca:31:
                    bd:ec:e6:13:c9:fa:d6:40:dd:3d:75:b2:03:a7:0a:
                    78:4c:a5:b5:ee:05:db:96:53:e9:2c:1e:91:5b:9f:
                    6d:67:63:4f:2c:7e:70:53:7b:f3:8a:28:b4:9f:a7:
                    d9:aa:4b:2b:47:1a:8d:5e:24:82:45:1e:cc:66:aa:
                    6d:a1:d8:78:79:69:2c:dd:b8:fb:6c:4c:3d:86:cb:
                    59:2e:0a:7a:bf:b0:45:02:91:de:cc:36:c0:2a:d5:
                    da:17:82:60:48:d7:75:ef:21:cc:2a:44:8c:1d:6c:
                    e2:1a:12:54:9f:59:f4:2c:7f:d3:44:a0:2d:45:b3:
                    45:97:dd:89:08:e0:c1:ce:17:8d:dc:5f:d6:df:1d:
                    89:52:ef:49:7c:d9:da:04:74:65:cc:41:c7:a7:56:
                    88:03:e0:3f:6a:23:4e:ae:48:e8:ce:86:b6:35:98:
                    fb:71:6f:6f:f8:9a:8a:3a:2d:63:7f:28:c3:da:4e:
                    7b:8c:1f:6d:06:53:df:e6:fa:55:9c:f0:4d:92:ca:
                    4f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E5:48:4E:EE:0C:74:78:8E:5A:AB:36:3F:0F:37:31:A4:62:E4:26
            X509v3 Authority Key Identifier:
                keyid:10:C3:E1:76:39:C8:B1:93:62:9F:97:DC:BD:1E:F4:33:2C:C9:A8:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/3130332e3135332e3139302e302f32342d3234203d3e20313430343639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:d2:ee:a7:b9:df:64:4d:e9:3b:4c:68:ee:b5:e2:58:dc:e9:
         1b:14:b8:d3:96:d3:8d:8f:f7:3e:8c:b1:79:aa:ad:58:58:ca:
         17:18:41:84:7e:41:35:8d:8e:0d:72:ca:33:2b:a2:95:75:08:
         c3:10:18:44:81:44:59:ce:38:e6:43:d4:2d:32:e9:02:ae:e2:
         00:a7:8c:6f:7b:31:ad:dc:e5:4c:39:c6:ce:17:15:14:91:64:
         d3:52:fd:12:8c:07:47:86:e0:2e:cd:93:0e:5d:b3:24:4a:73:
         42:9a:8c:f0:f1:a0:56:08:f4:c4:0b:af:cd:55:d9:a2:00:72:
         a5:f3:0a:bf:36:24:0c:a8:05:6f:39:fc:e8:de:48:ed:36:77:
         c4:3d:a9:9f:14:09:e8:3c:3b:6b:a3:d1:94:ba:c2:7b:41:c6:
         bc:f6:ba:16:c6:19:87:7f:ed:4e:5e:72:d2:34:55:32:0c:41:
         41:b2:6a:aa:e3:d1:37:5b:67:f2:62:fa:ef:27:12:80:ca:13:
         ad:f2:16:5c:96:38:3c:f9:a4:ab:69:fc:e6:87:29:bc:8d:b0:
         98:85:f4:2b:8f:08:e8:52:4d:e3:7c:4b:1c:5d:35:8e:81:7c:
         83:2e:8a:b8:b0:da:85:f2:45:d9:5e:fc:7e:34:48:3d:d3:22:
         3c:e8:89:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:34:29 2025 by rpki-client