Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/3130332e3132322e382e302f32342d3234203d3e20313530393635.roa
File:                     3130332e3132322e382e302f32342d3234203d3e20313530393635.roa (raw, json)
Hash identifier:          OBSu5NWIqhavEgs//Z/O6dTCa3LFoSwUa21LGk85Vss=
Subject key identifier:   8C:FA:32:12:6A:C5:B8:4B:4B:98:A0:2C:63:C3:E8:8C:91:F1:C8:56
Certificate issuer:       /CN=8B19ACE0A7391492B18BE27AC01D2A602872BFC0
Certificate serial:       743F3B858C88C80CF81E58AC2612E5ED9113C620
Authority key identifier: 8B:19:AC:E0:A7:39:14:92:B1:8B:E2:7A:C0:1D:2A:60:28:72:BF:C0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/3130332e3132322e382e302f32342d3234203d3e20313530393635.roa
Signing time:             Sat 14 Jun 2025 02:00:01 +0000
ROA not before:           Sat 14 Jun 2025 01:55:01 +0000
ROA not after:            Sat 13 Jun 2026 02:00:01 +0000
asID:                     150965
IP address blocks:        103.122.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.crl
                          rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 16:16:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:3f:3b:85:8c:88:c8:0c:f8:1e:58:ac:26:12:e5:ed:91:13:c6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B19ACE0A7391492B18BE27AC01D2A602872BFC0
        Validity
            Not Before: Jun 14 01:55:01 2025 GMT
            Not After : Jun 13 02:00:01 2026 GMT
        Subject: CN=8CFA32126AC5B84B4B98A02C63C3E88C91F1C856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5f:f1:26:82:56:b8:a2:08:a3:20:18:1b:c4:
                    42:bc:b9:6d:a9:07:d3:a2:fa:8c:99:55:cd:9e:5a:
                    af:b9:13:cb:b6:ab:95:c8:51:43:e3:26:60:75:75:
                    76:25:5c:69:c4:8e:a0:c2:10:72:86:af:a0:13:7c:
                    af:8c:54:7f:fc:b5:dc:86:54:14:f9:5c:3c:15:8b:
                    76:dd:4e:5c:4a:e3:d5:c0:2b:78:b2:3c:05:fe:c6:
                    79:b3:0c:90:fd:41:3c:f0:3d:7e:e0:d7:fb:e2:5b:
                    87:be:5f:bc:6e:19:45:f2:aa:d2:9b:e5:cf:af:4d:
                    4f:c5:69:a9:ad:a1:4a:a3:41:c2:08:1f:06:2a:a2:
                    6a:2d:0f:1c:bb:65:3c:a0:b3:a4:b2:e8:57:bb:c9:
                    0b:fb:dc:fe:f6:25:20:94:95:a3:a7:01:7c:19:e8:
                    6b:53:a9:1b:9a:57:19:cc:8a:bf:95:2e:18:80:64:
                    42:59:60:a0:e0:d3:be:fc:77:60:45:63:e5:3b:c1:
                    e0:c4:f3:47:fe:ab:02:54:7f:a3:38:67:94:38:01:
                    2e:7a:ce:bf:b4:c8:d1:d3:d6:18:84:f3:2c:49:42:
                    98:e9:92:b0:f3:64:a5:be:c8:0a:92:0e:78:70:00:
                    fe:f6:ad:88:72:39:ca:09:db:e6:06:0b:28:9e:1a:
                    2d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:FA:32:12:6A:C5:B8:4B:4B:98:A0:2C:63:C3:E8:8C:91:F1:C8:56
            X509v3 Authority Key Identifier:
                keyid:8B:19:AC:E0:A7:39:14:92:B1:8B:E2:7A:C0:1D:2A:60:28:72:BF:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/3130332e3132322e382e302f32342d3234203d3e20313530393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:f1:a0:36:df:aa:df:6f:b3:55:30:c3:cf:1a:b8:16:d4:c3:
         3b:36:25:1a:65:6a:f7:f0:16:04:1d:af:29:34:e4:be:69:ec:
         78:20:b6:0b:24:7e:24:2c:3a:59:4f:96:03:6f:86:ab:f2:37:
         f9:8a:df:93:83:fd:2e:4a:03:19:cb:f0:3f:ee:bb:8a:d7:15:
         3d:ed:c4:4b:f8:88:09:27:84:58:af:48:57:f4:0c:ca:40:19:
         7a:7a:1c:49:68:83:29:1d:d9:c4:50:66:cd:56:c6:7a:bd:89:
         70:eb:ff:c2:f5:8c:c7:1f:5e:a8:72:87:42:95:17:72:b6:e5:
         b8:76:c9:5b:dc:ca:d2:c4:72:59:71:66:de:9e:f3:fa:a9:73:
         ee:63:bf:11:16:db:c9:ad:8d:ef:e0:78:71:50:bf:e2:f2:2a:
         d8:69:0b:88:1f:75:0d:6e:14:0c:e4:70:34:0f:c2:c1:4d:e0:
         46:b8:aa:34:d9:d9:43:68:fa:c5:4d:11:c7:b2:8b:93:ef:b3:
         a4:cf:19:e5:7e:92:e6:6a:43:e4:bc:11:b1:58:d9:18:c6:bc:
         4b:8d:be:57:ef:52:fc:5b:bd:33:42:8f:1f:35:a0:d6:11:1b:
         45:4b:5c:71:26:1d:52:76:0e:38:2b:bb:0f:32:bd:a2:19:73:
         ca:b7:c7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 01:51:27 2025 by rpki-client