Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/3130332e3136312e3133352e302f32342d3234203d3e203438343635.roa
File:                     3130332e3136312e3133352e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier:          mM1uMrTnIIOB9qV95bnMry0CA1H0myomJNfLWIW9li4=
Subject key identifier:   C6:23:9E:44:D0:28:DD:D7:68:11:6F:2C:D3:D2:5A:E2:2E:CB:EA:A7
Certificate issuer:       /CN=115880D133393FF2D96A5861679B5166AFDB1248
Certificate serial:       CF2B905E24868F6EEA863F66BE0E7565428D29
Authority key identifier: 11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/3130332e3136312e3133352e302f32342d3234203d3e203438343635.roa
Signing time:             Mon 16 Jun 2025 03:02:55 +0000
ROA not before:           Mon 16 Jun 2025 02:57:55 +0000
ROA not after:            Mon 15 Jun 2026 03:02:55 +0000
asID:                     48465
IP address blocks:        103.161.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl
                          rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 05:52:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            cf:2b:90:5e:24:86:8f:6e:ea:86:3f:66:be:0e:75:65:42:8d:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=115880D133393FF2D96A5861679B5166AFDB1248
        Validity
            Not Before: Jun 16 02:57:55 2025 GMT
            Not After : Jun 15 03:02:55 2026 GMT
        Subject: CN=C6239E44D028DDD768116F2CD3D25AE22ECBEAA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9b:4d:15:d2:32:52:93:a5:7c:1e:a3:32:ba:
                    a0:4f:3e:49:18:48:6e:cf:b3:8e:40:0c:de:8d:c1:
                    e3:48:6e:ff:3a:a0:0c:52:3e:9d:a0:00:67:cc:39:
                    9c:6f:b9:b4:d4:48:67:35:a9:65:46:4a:fe:6b:07:
                    3e:a4:33:05:b1:6e:89:4d:53:c4:a0:25:14:47:c2:
                    91:80:b2:be:32:68:48:87:09:bd:f7:09:7f:50:8c:
                    88:eb:27:33:2d:0e:92:7c:bc:5e:9a:ca:cd:92:c1:
                    84:c4:d5:2c:48:23:b6:3d:5f:e6:8b:25:7a:5a:94:
                    85:b8:08:ec:29:e7:c1:29:f0:fd:78:e9:39:27:b5:
                    65:d3:d7:69:d6:cc:a7:b5:58:ea:48:60:ad:a3:26:
                    08:09:d2:bc:14:ce:bb:28:d3:82:0c:52:7a:42:09:
                    cf:d4:39:43:74:93:7f:70:83:21:4f:a5:2e:7d:7d:
                    d9:97:cd:6f:4a:df:f1:7e:42:94:5b:4a:75:7a:3e:
                    ae:8d:a3:6b:ee:4a:3d:c1:2f:33:52:8c:20:2e:1f:
                    a4:5e:f9:88:1b:e8:46:0a:09:45:16:d7:a7:50:25:
                    d2:bd:28:01:3d:0b:9d:9e:cd:f5:6a:22:b4:7d:ea:
                    05:fd:12:86:9f:3d:15:7a:d0:af:a8:f7:ea:08:a2:
                    ae:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:23:9E:44:D0:28:DD:D7:68:11:6F:2C:D3:D2:5A:E2:2E:CB:EA:A7
            X509v3 Authority Key Identifier:
                keyid:11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/3130332e3136312e3133352e302f32342d3234203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:7c:36:d6:f9:3c:be:13:a5:43:eb:3f:ea:36:05:5b:a7:23:
         ee:4a:53:d8:35:dd:41:0a:73:7b:31:cb:6a:8d:8c:80:aa:2a:
         ff:e0:04:35:1f:91:57:8b:e2:0d:a9:ba:2d:d5:e8:5f:9c:ab:
         d0:81:b8:bb:a7:6e:6b:77:c4:58:4d:5c:83:c0:50:2b:5a:2d:
         14:60:7e:b7:2c:6e:9e:6d:e3:44:38:d4:72:9e:0f:19:73:86:
         a0:18:fb:dc:a6:99:4c:48:63:96:ed:6c:8a:03:43:01:1a:c3:
         b9:8c:70:fd:1b:4e:81:9f:8a:cf:43:42:e3:03:03:aa:cf:d0:
         9d:4b:9b:01:4b:02:60:4b:59:7c:33:b7:00:70:37:ce:52:38:
         9e:75:9d:29:2a:6a:ee:ce:38:f7:30:f1:c2:80:f9:98:7b:19:
         55:d5:e5:87:55:4d:da:71:90:94:84:48:7b:39:80:75:56:b3:
         e2:d6:b6:10:3d:68:d7:33:14:5a:7f:03:5f:01:c1:23:79:92:
         00:cb:01:e1:3f:ef:43:57:74:96:5d:f0:78:75:5b:c8:57:1d:
         59:ee:5d:d4:d8:f9:03:54:43:45:47:98:cd:0a:b5:06:bd:f5:
         73:d5:52:26:a5:fb:c0:f8:dd:0b:06:1e:9b:0f:b6:37:96:da:
         f9:ed:f5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:32:39 2025 by rpki-client