Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/3130332e3134302e3138392e302f32342d3234203d3e20313338383831.roa
File:                     3130332e3134302e3138392e302f32342d3234203d3e20313338383831.roa (raw, json)
Hash identifier:          o2Fqju9m16OPUHuFcH3wb0i9qMLN8qQR+7Sxr2BaVt4=
Subject key identifier:   72:04:1F:83:D9:24:BC:37:21:01:25:DD:15:BA:74:1A:48:69:F6:B4
Certificate issuer:       /CN=02AC8DC3B003059A7040EDCFC881D9C93B064C18
Certificate serial:       5342740B24A346A85E50CDD48E19574555CFAEF9
Authority key identifier: 02:AC:8D:C3:B0:03:05:9A:70:40:ED:CF:C8:81:D9:C9:3B:06:4C:18
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/3130332e3134302e3138392e302f32342d3234203d3e20313338383831.roa
Signing time:             Sun 08 Jun 2025 05:00:02 +0000
ROA not before:           Sun 08 Jun 2025 04:55:02 +0000
ROA not after:            Sun 07 Jun 2026 05:00:02 +0000
asID:                     138881
IP address blocks:        103.140.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl
                          rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 11:28:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:42:74:0b:24:a3:46:a8:5e:50:cd:d4:8e:19:57:45:55:cf:ae:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02AC8DC3B003059A7040EDCFC881D9C93B064C18
        Validity
            Not Before: Jun  8 04:55:02 2025 GMT
            Not After : Jun  7 05:00:02 2026 GMT
        Subject: CN=72041F83D924BC37210125DD15BA741A4869F6B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:15:cc:a3:af:b8:23:6d:10:56:3f:d0:d6:bc:
                    76:9b:b4:23:a4:b2:dc:91:6d:8e:0e:ef:68:05:95:
                    fb:3b:3b:e0:95:b9:e0:d0:24:b2:5f:80:b8:38:23:
                    a5:e9:7b:8d:a8:eb:74:e9:0a:4f:e7:ea:de:96:01:
                    eb:70:48:15:0a:a8:d0:8c:60:34:22:89:69:fc:be:
                    90:3d:c9:c1:da:af:db:da:5c:f8:61:43:e4:d9:50:
                    4b:c7:57:dc:3d:de:4e:a1:fd:99:fe:fa:51:13:0e:
                    57:44:a4:ca:df:77:72:a7:42:1c:8f:7c:10:0f:17:
                    45:4e:81:78:f3:7d:e2:40:9a:8c:09:79:26:75:26:
                    3d:57:33:48:e2:a6:74:eb:96:00:b1:75:bb:87:1a:
                    e1:2d:fc:a2:71:46:8f:fb:48:fc:cf:2e:4d:23:aa:
                    c6:65:94:38:1b:c7:f4:4a:09:7c:b2:d6:db:fd:0e:
                    dc:c1:d1:db:69:be:2e:68:af:28:3e:9a:4d:f0:be:
                    a6:33:10:a8:62:e4:7d:49:11:42:eb:7f:9e:52:74:
                    19:ba:32:a0:38:f9:0e:a4:c0:b1:71:69:5e:c2:78:
                    3b:46:6f:26:8e:b4:0e:72:b1:2f:0a:83:83:f0:cf:
                    2e:27:4b:28:d8:16:af:9e:1c:8b:7f:fb:05:eb:41:
                    ab:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:04:1F:83:D9:24:BC:37:21:01:25:DD:15:BA:74:1A:48:69:F6:B4
            X509v3 Authority Key Identifier:
                keyid:02:AC:8D:C3:B0:03:05:9A:70:40:ED:CF:C8:81:D9:C9:3B:06:4C:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/3130332e3134302e3138392e302f32342d3234203d3e20313338383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:4d:08:7c:3a:4e:08:4c:28:b8:41:b3:f0:ee:6f:d0:9c:9e:
         64:75:0e:96:4f:34:8b:c8:fb:c2:c6:87:9b:2f:3e:23:0c:28:
         bc:0b:44:21:97:9a:ea:db:6e:d4:4a:f5:b4:84:3b:4f:3d:56:
         7e:d0:5b:90:a2:01:3d:f0:2e:67:0d:c3:3c:59:88:2c:be:d7:
         19:15:66:76:8d:1f:90:97:bf:fe:75:b9:7f:20:4f:c8:af:8d:
         84:a9:e3:3f:35:f2:68:1c:d8:1a:f8:77:38:66:ba:b5:f2:7c:
         02:15:56:1d:52:f8:d1:d7:fc:ca:86:b8:d8:5a:76:b6:51:5b:
         62:4e:58:71:18:b5:d1:28:c2:38:bb:ba:f8:77:b3:4f:a8:7c:
         32:cf:89:8d:e2:88:26:36:a7:bd:fd:6c:b7:60:62:4f:86:8e:
         fe:4d:b6:43:9f:c1:98:79:62:51:b6:fa:49:69:21:6a:30:13:
         87:36:be:8d:7a:5f:00:ec:0a:a9:a6:66:c4:85:0f:c2:44:98:
         d5:ac:34:48:75:68:ef:9d:60:f4:8e:70:bc:35:8e:18:4f:f7:
         ed:d7:ee:3a:a8:9c:47:b1:1c:0c:68:74:81:cb:5c:d9:e5:94:
         f2:17:e5:dc:6a:ed:95:e7:22:2b:f5:f5:ec:3d:3c:1a:69:c5:
         fd:96:9d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:40:22 2025 by rpki-client