Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/3130332e34322e3132322e302f32342d3234203d3e203234353334.roa
File:                     3130332e34322e3132322e302f32342d3234203d3e203234353334.roa (raw, json)
Hash identifier:          XqcXXJVRLAigakZzITIJ9WqM9shB4JwPgUNXZenmspo=
Subject key identifier:   6B:A7:78:F6:32:CE:05:0C:AC:59:AE:22:D5:79:EF:2A:25:23:6B:C8
Certificate issuer:       /CN=DD29F5E4CE561760A0212F0448987AFBE75263D7
Certificate serial:       3846648A84F22F58ECA2B5B12CBCE802423CE998
Authority key identifier: DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/3130332e34322e3132322e302f32342d3234203d3e203234353334.roa
Signing time:             Wed 30 Jul 2025 08:00:00 +0000
ROA not before:           Wed 30 Jul 2025 07:55:00 +0000
ROA not after:            Wed 29 Jul 2026 08:00:00 +0000
asID:                     24534
IP address blocks:        103.42.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl
                          rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 02:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:46:64:8a:84:f2:2f:58:ec:a2:b5:b1:2c:bc:e8:02:42:3c:e9:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD29F5E4CE561760A0212F0448987AFBE75263D7
        Validity
            Not Before: Jul 30 07:55:00 2025 GMT
            Not After : Jul 29 08:00:00 2026 GMT
        Subject: CN=6BA778F632CE050CAC59AE22D579EF2A25236BC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0c:8b:c9:73:c0:17:4c:fa:b4:68:7a:ca:83:
                    aa:da:c6:bf:9f:16:c6:7d:74:43:d2:a8:58:cd:b6:
                    e1:52:ba:1d:c5:6a:9c:ed:9f:ec:cf:9c:7b:af:24:
                    b5:9c:7e:74:28:e7:82:87:30:9a:30:2b:44:a6:ca:
                    ee:15:f0:d0:72:90:8b:bb:84:91:75:d9:15:62:41:
                    3b:7e:d8:1d:c7:86:40:47:58:ec:15:e9:c7:8b:6a:
                    e9:5c:84:ec:41:14:70:87:c7:b0:35:e3:4b:f7:fb:
                    6a:c6:d8:c6:81:62:31:35:6b:79:9a:8a:7b:e9:96:
                    8b:74:e5:f7:03:e8:3c:c2:d0:d9:42:00:7f:6d:59:
                    48:a1:29:bf:f9:e4:c6:6e:3d:b7:ac:19:d0:69:f2:
                    05:d0:7a:d7:ca:42:8b:74:53:fc:94:c3:14:be:d6:
                    fb:7d:24:fe:56:57:e4:0b:a6:f4:3c:a2:00:07:ee:
                    de:4e:77:db:17:d6:62:79:b2:16:a7:df:31:87:4f:
                    5d:51:d5:4d:a2:85:64:9a:5e:cd:6d:be:c8:1c:72:
                    ad:16:5c:31:cc:14:e8:f4:cb:a5:b4:38:ed:21:38:
                    fa:de:60:84:b7:ed:de:f2:83:fc:61:ca:f3:ad:d6:
                    5f:4f:ad:86:1c:6c:84:e7:39:44:ec:b0:90:2f:b0:
                    10:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A7:78:F6:32:CE:05:0C:AC:59:AE:22:D5:79:EF:2A:25:23:6B:C8
            X509v3 Authority Key Identifier:
                keyid:DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/3130332e34322e3132322e302f32342d3234203d3e203234353334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:ef:bc:4f:64:19:be:8e:97:42:10:53:ad:0b:e1:b9:4f:ec:
         bf:ed:28:ee:bb:f8:9b:a6:61:cd:96:36:36:4b:4b:97:01:c5:
         2f:85:e6:8c:6f:cf:d1:aa:0c:fa:f8:ac:fd:f9:90:89:b0:15:
         ce:b8:32:7c:6c:22:1d:03:f1:8f:c2:a0:f8:06:db:7d:3f:40:
         e2:cb:be:38:a4:19:2b:dd:7a:7f:d6:26:02:95:1b:b8:55:a4:
         3a:7a:a6:d3:6d:ee:1a:63:30:65:d2:d9:8c:31:54:58:5d:48:
         d9:70:f5:cb:a4:71:1f:8c:9c:02:c7:cf:12:b5:3e:57:66:d6:
         5c:f5:6c:1e:a9:77:cc:c0:2c:d3:79:57:a7:ae:95:64:f8:be:
         9a:32:4c:6c:aa:8b:8a:26:cd:96:37:7a:75:b7:70:b6:66:a2:
         8b:19:35:46:5e:1f:27:e8:d4:2b:03:20:c5:c3:83:c3:e0:72:
         f3:6b:eb:9f:94:f0:da:26:20:33:61:52:57:81:47:71:83:dc:
         ae:93:30:13:87:f7:0b:41:fd:af:a2:8d:36:12:61:06:23:5b:
         38:58:5d:17:20:9a:b0:8b:a7:a2:2e:d8:b5:ca:05:48:5a:09:
         8a:f0:d1:5c:7b:97:af:34:e8:2e:5a:8b:01:45:b4:42:b3:31:
         a9:3a:3e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:05:25 2025 by rpki-client