Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/3130332e31332e3136342e302f32332d3234203d3e2034383030.roa
File:                     3130332e31332e3136342e302f32332d3234203d3e2034383030.roa (raw, json)
Hash identifier:          OqpnIfufFkUk9uEkoqYiBI5WHl9fDVigbax5pOSdLxE=
Subject key identifier:   95:B0:63:69:9A:93:FA:8C:7F:2B:DA:26:2D:FB:A6:49:FE:14:2A:18
Certificate issuer:       /CN=0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99
Certificate serial:       36B1390E344E60E9437951FE6ADD6328BC34E0E6
Authority key identifier: 0A:84:F9:18:C6:DC:C0:E4:A9:89:AE:30:55:3E:8D:7F:B1:3A:CC:99
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/3130332e31332e3136342e302f32332d3234203d3e2034383030.roa
Signing time:             Thu 03 Jul 2025 08:00:01 +0000
ROA not before:           Thu 03 Jul 2025 07:55:01 +0000
ROA not after:            Thu 02 Jul 2026 08:00:01 +0000
asID:                     4800
IP address blocks:        103.13.164.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.crl
                          rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 08:18:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:b1:39:0e:34:4e:60:e9:43:79:51:fe:6a:dd:63:28:bc:34:e0:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99
        Validity
            Not Before: Jul  3 07:55:01 2025 GMT
            Not After : Jul  2 08:00:01 2026 GMT
        Subject: CN=95B063699A93FA8C7F2BDA262DFBA649FE142A18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2f:3b:ee:a2:9d:3e:8e:33:45:4f:b5:e6:89:
                    44:50:f2:f0:d0:c5:01:6f:e1:d7:d1:19:d7:bf:fa:
                    bf:c9:01:07:38:91:4c:45:6e:64:e1:05:ab:be:8d:
                    48:5c:50:65:90:ce:71:38:03:13:a8:f9:f0:5f:5b:
                    55:cf:9e:7f:dd:44:87:9f:18:fb:c3:8f:d7:10:42:
                    e0:4e:31:18:75:a5:68:cd:cd:e6:e7:99:56:7b:5f:
                    23:90:d1:67:17:3f:5d:c9:ca:26:3f:ea:04:ab:a2:
                    cf:0b:9b:bf:18:6a:9e:30:5b:2e:01:ec:ba:fb:d0:
                    87:df:60:20:e1:65:a1:d7:c4:a5:62:6f:02:72:4a:
                    10:51:a8:41:57:d9:97:9f:b1:3f:36:7e:55:59:4e:
                    02:52:3d:e3:3c:6f:28:66:c9:34:09:c6:b4:c6:09:
                    64:91:ef:5e:63:31:3c:9b:0d:97:33:ca:24:df:da:
                    0d:01:77:92:12:72:b0:ca:16:9c:00:43:9c:8d:68:
                    11:6b:13:b7:ac:fc:32:87:96:12:6f:5c:68:b4:65:
                    c2:cb:8a:ba:d2:89:30:a8:64:0d:a7:6a:e7:50:e2:
                    46:06:cd:a3:d8:de:d9:de:33:2b:f9:44:31:be:68:
                    13:d0:43:dc:47:e3:2a:a3:0a:d5:59:a4:8e:a9:be:
                    61:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B0:63:69:9A:93:FA:8C:7F:2B:DA:26:2D:FB:A6:49:FE:14:2A:18
            X509v3 Authority Key Identifier:
                keyid:0A:84:F9:18:C6:DC:C0:E4:A9:89:AE:30:55:3E:8D:7F:B1:3A:CC:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/3130332e31332e3136342e302f32332d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:39:45:dd:fa:27:b8:fc:48:a7:e1:f4:b5:6a:6a:a8:48:10:
         59:e3:0c:44:a2:cd:4c:f9:3e:fe:97:ad:bf:0c:05:0b:a3:6c:
         47:d9:fe:c1:4a:3d:c6:b6:04:37:11:c7:c0:4f:2d:91:72:67:
         a4:89:72:f2:a9:cf:9c:a6:1e:31:b9:17:2e:7e:6e:1c:79:61:
         a3:19:24:74:34:19:2e:0f:52:15:02:e8:34:1e:a7:21:f2:e2:
         f8:e6:b5:1f:57:b1:d5:e9:ef:83:09:ce:c0:ad:ff:03:4d:97:
         d0:4d:fa:83:63:a0:ac:50:3f:32:0f:db:cf:c2:e0:90:f1:21:
         66:ad:d8:3c:17:62:75:a7:b8:31:ca:1f:be:0d:66:e1:e0:d0:
         00:f9:8d:06:5c:e7:4f:57:e5:2e:20:8b:95:0a:c8:8e:03:91:
         8c:17:d8:b6:5a:6b:1f:f9:70:52:60:27:f2:44:eb:e4:41:ea:
         62:da:2f:71:26:14:85:2a:00:10:b2:4c:7e:cc:c5:9d:c9:52:
         ac:ac:e9:15:c5:a6:dd:75:0c:1a:55:e6:f1:0e:99:72:f7:c1:
         50:6e:9b:d9:36:da:5e:6f:4c:39:0e:5b:de:9d:94:64:99:30:
         3f:ee:a4:15:cb:23:88:07:81:c9:b4:ad:f3:ae:24:a5:9a:d3:
         d2:09:fa:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:02:02 2025 by rpki-client