Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/3130332e32362e3132392e302f32342d3234203d3e20313431363634.roa
File:                     3130332e32362e3132392e302f32342d3234203d3e20313431363634.roa (raw, json)
Hash identifier:          vyT/LZjCILFdXlnqhazXHC8QlbJEth3HxeK9K9f//Bc=
Subject key identifier:   21:5F:34:86:F1:9A:ED:13:F8:25:CF:FA:33:88:8F:4C:DE:7B:E1:A7
Certificate issuer:       /CN=9A635D422743AA8C31CA82C7F503B95FFB64A4DF
Certificate serial:       5FF03F716372BDE815B16898E577DC57D795E20E
Authority key identifier: 9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/3130332e32362e3132392e302f32342d3234203d3e20313431363634.roa
Signing time:             Fri 06 Jun 2025 08:00:01 +0000
ROA not before:           Fri 06 Jun 2025 07:55:01 +0000
ROA not after:            Fri 05 Jun 2026 08:00:01 +0000
asID:                     141664
IP address blocks:        103.26.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl
                          rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 21:28:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:f0:3f:71:63:72:bd:e8:15:b1:68:98:e5:77:dc:57:d7:95:e2:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A635D422743AA8C31CA82C7F503B95FFB64A4DF
        Validity
            Not Before: Jun  6 07:55:01 2025 GMT
            Not After : Jun  5 08:00:01 2026 GMT
        Subject: CN=215F3486F19AED13F825CFFA33888F4CDE7BE1A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4f:c6:22:4c:21:02:2d:26:af:dc:46:85:e1:
                    b6:46:6f:f1:d0:02:d4:c6:21:1f:a4:b7:48:ed:f8:
                    5b:4e:e7:8d:85:23:1b:b1:61:b4:ec:1a:dc:a7:e9:
                    18:09:3d:1e:c8:fa:c3:3e:4e:c6:07:65:81:15:12:
                    53:a4:31:0b:bc:fa:5f:dd:a5:8e:84:18:23:51:a0:
                    d3:d8:bc:79:93:16:d8:99:c3:44:57:15:25:c9:05:
                    75:ff:d4:eb:31:64:c7:f7:15:e2:2f:6d:49:5d:d5:
                    fc:9a:ca:d2:b9:18:b6:5e:55:0b:4e:0b:e6:46:e9:
                    44:bb:b6:60:eb:a0:2f:2b:ea:25:35:5b:fb:66:e5:
                    81:8e:8f:e0:76:74:27:db:4b:8c:f6:af:27:62:d9:
                    0a:63:58:c5:5e:a9:4e:08:a2:e7:79:27:55:37:19:
                    36:34:14:fd:a1:e0:9b:d6:cc:b2:5b:6b:e5:df:83:
                    6c:b4:ba:f6:18:24:a6:1d:03:51:17:16:bd:51:48:
                    0b:78:da:9d:83:7c:e2:1e:69:51:63:5d:f7:96:31:
                    ed:70:52:6a:ba:3e:14:a5:cd:a7:a5:2a:7b:35:bc:
                    07:74:86:3a:79:50:18:f5:a9:6d:0e:a5:5c:43:dd:
                    b1:19:e0:be:a8:19:52:6c:df:60:a3:34:d6:6e:e9:
                    60:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:5F:34:86:F1:9A:ED:13:F8:25:CF:FA:33:88:8F:4C:DE:7B:E1:A7
            X509v3 Authority Key Identifier:
                keyid:9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/3130332e32362e3132392e302f32342d3234203d3e20313431363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:bc:e0:f6:7e:14:8e:c2:35:6c:38:01:3b:2d:8e:f9:f6:c4:
         df:af:c3:14:07:48:b9:64:46:7b:ff:de:e2:d1:03:f7:49:12:
         46:d1:08:59:86:f0:36:61:27:0f:9b:24:9c:2f:02:35:03:c0:
         8f:49:ec:dd:d0:b4:4b:36:83:8f:7d:ed:20:36:3c:24:03:15:
         62:0c:53:dc:af:eb:0f:05:29:ff:0b:ed:7c:56:aa:09:c2:43:
         9e:d0:6f:65:ef:59:26:c5:24:e1:1d:05:37:44:c6:6c:e6:0f:
         a5:ac:2c:56:fe:6a:bb:7a:5c:4b:24:3c:e8:9b:33:82:5c:e7:
         2d:32:de:73:8b:a1:5f:aa:e3:d5:23:8b:42:b9:7d:c4:95:33:
         21:28:a3:f9:4a:bf:3b:21:c4:c8:56:e9:87:0c:9b:1d:77:e6:
         e2:37:d3:67:78:44:3b:b5:9d:4b:b0:bd:0f:7f:d0:82:e4:03:
         4a:c6:da:4e:22:f8:3c:55:63:ff:ed:d7:e6:64:f2:6a:08:4e:
         26:c4:77:6f:4c:ce:d6:a2:52:4e:65:a4:9b:92:70:27:26:50:
         af:92:50:fb:22:b9:bb:fd:38:70:e3:25:16:a1:4e:c8:40:fd:
         51:7c:0c:11:0a:d0:dc:22:f5:c8:99:ae:ce:43:44:74:08:91:
         ff:a6:9a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 02:41:12 2025 by rpki-client