Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/3130332e3134322e3138332e302f32342d3234203d3e20313339343031.roa
File:                     3130332e3134322e3138332e302f32342d3234203d3e20313339343031.roa (raw, json)
Hash identifier:          BnRp094CwKD0wwlckS4UWOO+QLVyTBF/UCeVs1CPJ7o=
Subject key identifier:   1E:01:66:BC:E6:79:D9:C3:8E:E0:50:6F:52:97:EE:D7:2A:E7:41:FF
Certificate issuer:       /CN=B65D1460ACFC8D91183381DC64E52D2E282D14B0
Certificate serial:       34099695FEECCC0D04F1E69A9C2935973B5EA349
Authority key identifier: B6:5D:14:60:AC:FC:8D:91:18:33:81:DC:64:E5:2D:2E:28:2D:14:B0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/3130332e3134322e3138332e302f32342d3234203d3e20313339343031.roa
Signing time:             Mon 02 Jun 2025 02:04:27 +0000
ROA not before:           Mon 02 Jun 2025 01:59:27 +0000
ROA not after:            Mon 01 Jun 2026 02:04:27 +0000
asID:                     139401
IP address blocks:        103.142.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl
                          rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 03:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:09:96:95:fe:ec:cc:0d:04:f1:e6:9a:9c:29:35:97:3b:5e:a3:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B65D1460ACFC8D91183381DC64E52D2E282D14B0
        Validity
            Not Before: Jun  2 01:59:27 2025 GMT
            Not After : Jun  1 02:04:27 2026 GMT
        Subject: CN=1E0166BCE679D9C38EE0506F5297EED72AE741FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:50:b2:09:de:97:87:41:d0:14:c5:3b:fc:ea:
                    4f:48:9c:a6:0d:7a:4e:47:98:56:88:ab:a1:fd:10:
                    5e:3a:f3:bd:a6:b5:8c:77:dd:2a:b6:3a:8b:5e:f9:
                    7c:0b:fa:51:42:a7:4e:25:d5:96:f1:3a:6a:10:69:
                    ef:95:1a:83:74:bc:b2:cb:8f:be:0e:b5:2c:f5:f9:
                    11:5a:d7:50:05:44:52:84:d5:52:bb:2b:28:2a:ae:
                    8d:fa:fa:1f:10:a6:c0:fd:e6:05:9e:79:65:e0:5c:
                    75:29:21:6f:b4:f0:aa:2e:0a:bf:16:9b:13:de:24:
                    81:ee:58:26:85:e6:49:56:a4:3d:bb:89:23:19:2f:
                    0f:43:38:83:91:44:a0:91:5e:21:72:1a:06:8d:4c:
                    61:53:3a:2d:ae:50:c1:58:8b:28:4a:06:a5:b9:18:
                    f6:45:da:6f:8b:65:a9:c2:3c:ec:47:5f:75:1c:9a:
                    14:bd:6c:3e:ff:6c:40:34:06:13:42:d9:e9:fe:f3:
                    fc:b9:09:de:e4:1b:b5:91:ba:39:c7:5b:b3:0c:94:
                    53:b4:33:c6:48:2b:96:b1:59:f9:5e:89:89:4a:9c:
                    ce:61:65:07:ab:1f:78:64:57:ea:56:53:c5:91:cc:
                    42:25:1a:7a:c7:4c:86:d6:69:e0:28:a1:46:e8:29:
                    a0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:01:66:BC:E6:79:D9:C3:8E:E0:50:6F:52:97:EE:D7:2A:E7:41:FF
            X509v3 Authority Key Identifier:
                keyid:B6:5D:14:60:AC:FC:8D:91:18:33:81:DC:64:E5:2D:2E:28:2D:14:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/3130332e3134322e3138332e302f32342d3234203d3e20313339343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         db:44:5c:75:99:83:d9:07:9f:54:ba:93:f7:20:21:2d:41:17:
         ab:68:0b:f4:5c:c6:c4:b1:88:00:28:67:99:08:55:f3:13:cc:
         27:ef:d3:73:74:c3:b6:81:71:2e:75:33:85:38:91:8b:5d:c9:
         11:58:3a:b3:54:20:e5:db:5b:b5:9b:61:6e:ab:5d:32:45:3d:
         05:4f:0d:30:a6:62:55:cf:ea:79:58:a2:5d:e3:7c:1e:f8:c8:
         85:f5:1e:51:d5:b7:b0:29:ff:49:68:58:5b:0b:65:d8:9e:e7:
         8c:a8:e7:85:4e:4b:31:bf:de:5e:9a:03:82:32:0d:5a:17:a4:
         bc:72:32:d3:43:e1:3a:4f:9f:3e:e1:3a:f4:d6:a9:e2:9d:da:
         9d:89:9d:b3:c8:73:23:12:c3:61:5b:33:09:95:41:80:fc:02:
         11:98:8c:f6:0a:58:6c:5c:ea:8d:a1:6b:e3:ad:49:2f:92:ee:
         3f:8b:56:9a:b8:61:f5:50:b5:48:57:f4:34:cc:86:7a:48:45:
         ba:23:4e:28:1b:fa:7c:78:22:cf:8f:58:16:33:71:36:99:7a:
         78:f9:62:bb:89:02:ff:91:ea:8a:13:95:2b:68:3e:fd:40:3a:
         47:71:80:09:93:e3:cd:dc:1e:9d:f4:d7:0c:7f:c5:e6:1e:2a:
         7a:b1:74:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 22:31:23 2025 by rpki-client