Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/3130332e3138392e3131372e302f32342d3234203d3e20313439383738.roa
File:                     3130332e3138392e3131372e302f32342d3234203d3e20313439383738.roa (raw, json)
Hash identifier:          nXEHhJ8w6SXV+eCEbP2YrkovqQsEQKgULxh/UNhY8O8=
Subject key identifier:   0B:57:24:9B:41:DF:DD:DB:26:69:37:F6:3B:BD:31:5F:18:02:9D:8A
Certificate issuer:       /CN=F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA
Certificate serial:       393B2B80252147A17CF534C6668E6BAF6155F3A7
Authority key identifier: F8:B7:C8:E5:DD:BD:D0:36:51:3F:10:B8:7F:39:A9:4B:E1:DB:3D:CA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/3130332e3138392e3131372e302f32342d3234203d3e20313439383738.roa
Signing time:             Tue 10 Jun 2025 05:00:00 +0000
ROA not before:           Tue 10 Jun 2025 04:55:00 +0000
ROA not after:            Tue 09 Jun 2026 05:00:00 +0000
asID:                     149878
IP address blocks:        103.189.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.crl
                          rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 10:18:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:3b:2b:80:25:21:47:a1:7c:f5:34:c6:66:8e:6b:af:61:55:f3:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA
        Validity
            Not Before: Jun 10 04:55:00 2025 GMT
            Not After : Jun  9 05:00:00 2026 GMT
        Subject: CN=0B57249B41DFDDDB266937F63BBD315F18029D8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0d:47:8d:7b:48:3d:65:7a:d6:18:e6:8d:14:
                    ac:d3:a9:92:71:a8:6d:67:94:7a:a5:0d:08:0f:f0:
                    97:c4:b3:15:75:b2:1c:d0:d9:50:eb:f5:80:4a:1f:
                    e4:51:f2:a8:e8:ec:67:e4:cd:52:48:a1:fb:bf:12:
                    2c:85:c6:be:19:6b:84:da:89:b3:d8:63:66:a9:96:
                    eb:f0:a3:8c:68:4f:05:ad:a5:9e:35:dc:b7:05:91:
                    9c:7c:c4:c8:56:31:66:0f:f1:9f:98:98:84:d4:78:
                    e1:d1:fc:89:21:f0:d3:44:52:b7:b8:36:ed:99:ec:
                    3b:72:2f:0e:70:71:7c:24:ff:5b:19:eb:3e:99:5b:
                    3b:3b:e9:f6:e1:f2:bc:71:5f:37:45:07:99:a5:b7:
                    92:61:5c:0d:a6:83:8f:3a:54:a4:41:c5:e6:89:37:
                    b2:4a:10:49:f9:52:f2:be:90:a9:82:bc:3a:a8:82:
                    08:e4:94:2a:c1:b3:cd:52:3c:32:83:61:ea:ba:be:
                    24:1e:56:d7:86:a2:32:79:5e:65:a9:7b:d4:4d:e9:
                    27:98:b8:ad:23:39:4f:63:1c:ae:ae:a8:fe:1e:da:
                    98:b3:b5:0b:ef:3f:bf:fa:76:da:09:67:c3:af:cb:
                    51:15:b2:a3:61:56:01:1b:48:04:ea:15:d8:ca:9d:
                    72:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:57:24:9B:41:DF:DD:DB:26:69:37:F6:3B:BD:31:5F:18:02:9D:8A
            X509v3 Authority Key Identifier:
                keyid:F8:B7:C8:E5:DD:BD:D0:36:51:3F:10:B8:7F:39:A9:4B:E1:DB:3D:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/3130332e3138392e3131372e302f32342d3234203d3e20313439383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:bd:15:8d:02:cd:d9:6f:e5:ae:70:7f:c9:f3:e4:3b:9c:de:
         f0:86:e9:f1:1b:57:4b:0a:80:4d:ad:1a:13:31:83:a0:df:03:
         61:d4:f4:a9:7a:10:82:5f:1e:86:e9:78:ed:9e:f0:0d:09:80:
         b3:59:da:bd:99:eb:95:71:af:be:60:de:16:98:b7:92:88:36:
         1d:6f:3b:5b:5c:30:d8:af:a2:ab:49:4b:81:23:90:d5:74:de:
         ea:58:75:91:4b:57:d2:0d:08:38:56:17:da:4e:af:d4:e9:f2:
         95:61:e1:18:be:46:33:8c:09:3c:14:30:51:2a:c0:31:6a:7d:
         b9:aa:a6:34:47:bc:13:a4:2f:77:64:bf:e9:87:0d:0c:b9:24:
         76:dd:e1:f4:79:ea:fe:51:2f:8e:eb:dd:be:40:32:d4:1d:e4:
         88:44:97:4c:bf:09:de:c3:a6:dc:5d:75:32:a1:8d:94:e0:6d:
         76:6d:24:e2:25:6b:d6:f6:ab:fc:96:a8:2c:12:28:6f:08:1a:
         d6:bb:a3:ae:d1:81:c8:8f:ec:d7:a6:9b:b4:91:27:98:ab:27:
         ba:e8:1f:15:33:66:91:b7:b8:80:00:23:5b:14:45:e9:18:3c:
         40:e2:75:b8:ae:36:64:fc:70:ae:11:11:04:a2:ac:f5:6e:09:
         94:53:c7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 07:57:17 2025 by rpki-client