Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/3130332e31332e3230352e302f32342d3234203d3e203438343635.roa
File:                     3130332e31332e3230352e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier:          /BkZhdhHuWpr0COSSqEa5xQ/tUEnJqvOpL9FKXE/Mm4=
Subject key identifier:   98:40:A0:25:51:2D:02:C6:61:AC:9F:D3:42:71:3D:6E:57:69:B5:F5
Certificate issuer:       /CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B
Certificate serial:       4CB20C78A408B106D267E06829817D85C52514E9
Authority key identifier: F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/3130332e31332e3230352e302f32342d3234203d3e203438343635.roa
Signing time:             Mon 16 Jun 2025 03:02:56 +0000
ROA not before:           Mon 16 Jun 2025 02:57:56 +0000
ROA not after:            Mon 15 Jun 2026 03:02:56 +0000
asID:                     48465
IP address blocks:        103.13.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl
                          rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 09:53:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:b2:0c:78:a4:08:b1:06:d2:67:e0:68:29:81:7d:85:c5:25:14:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B
        Validity
            Not Before: Jun 16 02:57:56 2025 GMT
            Not After : Jun 15 03:02:56 2026 GMT
        Subject: CN=9840A025512D02C661AC9FD342713D6E5769B5F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0d:e0:a9:ef:59:df:79:14:c4:a3:be:a2:a1:
                    09:2a:3e:c2:d0:7c:57:da:fa:2e:28:34:13:7a:96:
                    9b:e6:99:c3:07:ef:6d:44:68:2a:5e:35:ec:e2:76:
                    53:ef:47:d6:c1:e1:16:75:ae:fa:d4:c6:0d:2f:dc:
                    5c:aa:43:6f:d7:b8:b0:a9:e6:99:ae:fc:90:29:c8:
                    05:87:10:b0:a9:c9:61:04:95:0e:5e:ac:86:66:22:
                    34:5f:bf:30:17:2d:b7:ec:a3:b6:a1:45:d2:d3:08:
                    2b:25:46:dc:37:6a:e6:de:c1:4a:0e:41:29:c2:12:
                    62:12:d2:cd:b8:a5:8d:66:83:56:a0:7b:f9:4d:71:
                    89:f5:3b:15:cb:69:ba:24:a3:60:10:cc:ed:4b:ea:
                    f8:8b:c9:25:73:4f:e6:61:a6:2a:50:84:55:28:0b:
                    5b:fd:f2:84:b0:d9:fa:ad:bb:91:2f:8f:ea:0f:a1:
                    b2:e0:30:36:22:9c:eb:08:fd:f8:c2:c4:32:70:84:
                    00:b1:df:0a:63:ca:1d:92:81:3c:22:7c:67:44:37:
                    55:9c:14:79:09:2b:09:39:a5:44:0e:8f:dc:8d:88:
                    e7:80:e9:ee:81:3c:91:bb:5d:15:c9:a8:94:d1:7d:
                    99:6c:42:f6:a1:19:f3:91:ea:c9:c2:9f:7f:b0:cd:
                    7b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:40:A0:25:51:2D:02:C6:61:AC:9F:D3:42:71:3D:6E:57:69:B5:F5
            X509v3 Authority Key Identifier:
                keyid:F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/3130332e31332e3230352e302f32342d3234203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:26:f6:a4:79:a8:a2:c2:89:84:92:54:28:e3:6e:41:25:3d:
         44:3a:24:df:b5:14:95:e1:d8:14:5c:4c:27:54:e0:d4:b3:e1:
         4d:17:12:36:3b:5f:97:70:8b:5d:ef:6f:ba:79:cc:c5:b3:5d:
         d2:8b:71:da:03:e5:5a:63:9e:a0:39:fa:7b:df:9d:ff:f8:f4:
         da:e1:44:2e:4c:37:d7:14:63:3a:2d:bc:ef:3f:37:fd:d9:3a:
         0e:20:1a:21:b9:d6:fb:c1:ac:7d:40:91:c5:db:2d:03:07:d5:
         85:39:d6:88:05:6e:69:cd:47:08:61:a3:33:29:49:62:e7:55:
         7f:7b:ca:bb:78:55:91:89:8d:f0:87:d4:f9:7d:c7:5b:e3:46:
         35:3e:12:35:8c:06:1b:e1:33:54:49:64:a0:f5:35:ee:24:63:
         64:b0:ef:9d:40:26:31:e3:f9:e3:ae:7a:7d:4e:8e:f8:b6:bf:
         e0:88:03:76:69:70:4e:65:fc:dc:6e:e8:da:a3:f9:82:8d:11:
         ca:7f:08:ec:d4:20:8b:e5:fa:c8:d9:bb:b0:79:4b:f0:27:71:
         2c:88:42:1f:a6:b4:9d:17:a9:9b:39:1b:3f:12:50:99:83:89:
         db:ba:91:67:4e:b0:ee:08:81:a5:02:9e:df:f6:84:f6:f6:17:
         cc:57:de:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:22:47 2025 by rpki-client