Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3130332e32382e3131362e302f32322d3232203d3e203535363939.roa
File:                     3130332e32382e3131362e302f32322d3232203d3e203535363939.roa (raw, json)
Hash identifier:          IBqG3JTOb2BDjjHywaslInJ9v2wxZNaFPsj9QnGmFyU=
Subject key identifier:   F6:E2:88:95:63:89:E5:FE:9C:6D:06:BB:67:6D:F4:CC:F9:A7:30:D6
Certificate issuer:       /CN=1976DD7D4FBDFBEB355F0B96690613959E106872
Certificate serial:       56A2D9E156BA2551841DBF638B56F4D4E3917609
Authority key identifier: 19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3130332e32382e3131362e302f32322d3232203d3e203535363939.roa
Signing time:             Thu 17 Jul 2025 12:00:02 +0000
ROA not before:           Thu 17 Jul 2025 11:55:02 +0000
ROA not after:            Thu 16 Jul 2026 12:00:02 +0000
asID:                     55699
IP address blocks:        103.28.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl
                          rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 10 Aug 2025 01:28:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:a2:d9:e1:56:ba:25:51:84:1d:bf:63:8b:56:f4:d4:e3:91:76:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1976DD7D4FBDFBEB355F0B96690613959E106872
        Validity
            Not Before: Jul 17 11:55:02 2025 GMT
            Not After : Jul 16 12:00:02 2026 GMT
        Subject: CN=F6E288956389E5FE9C6D06BB676DF4CCF9A730D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7a:d0:71:f9:d3:ed:16:dd:7e:63:da:89:e7:
                    8e:76:0e:38:cf:98:8e:ee:72:22:2c:ef:38:35:d9:
                    e8:f9:ec:ac:0a:3e:d9:fe:e1:5e:57:1f:ca:95:5c:
                    a5:a4:3a:ee:0d:2e:dc:51:6f:18:79:8f:da:cc:d3:
                    79:bc:38:c1:8a:0a:b5:72:08:07:bb:b9:92:d4:1f:
                    14:2d:ea:8e:43:27:06:c2:f5:06:28:aa:4b:fe:f7:
                    46:d2:01:dd:be:26:30:d0:3e:b4:2a:14:a5:95:45:
                    d3:0e:66:da:89:11:f9:63:09:d1:fc:d1:c3:b4:75:
                    fe:1b:48:b6:be:60:b2:02:02:fa:47:84:61:2d:89:
                    8c:a2:b1:21:40:95:f3:d6:98:f7:05:2f:5b:dc:be:
                    3f:e4:65:2d:9a:56:a9:60:87:2e:07:93:1c:a9:f8:
                    ac:5d:1f:70:15:c0:17:3e:34:08:cc:29:86:88:8f:
                    f6:d0:4a:25:da:53:d6:a1:06:fa:e3:2a:b6:7d:7d:
                    e9:63:a5:04:4e:87:58:3c:f0:1a:3d:3e:36:c8:ef:
                    db:e9:80:91:dd:39:71:56:a9:8f:61:57:d2:68:44:
                    12:3d:23:94:d5:24:77:e7:1d:e5:8c:82:e4:4f:93:
                    07:d7:ef:21:81:bc:83:2d:69:7a:f9:be:ec:0b:3e:
                    86:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E2:88:95:63:89:E5:FE:9C:6D:06:BB:67:6D:F4:CC:F9:A7:30:D6
            X509v3 Authority Key Identifier:
                keyid:19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3130332e32382e3131362e302f32322d3232203d3e203535363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:37:39:18:54:69:21:1d:c8:db:ea:39:d2:a8:a0:a5:7a:89:
         0d:c5:3c:ae:f2:78:95:8c:cb:b0:9b:97:df:f5:e1:3c:3c:aa:
         05:03:6d:f6:64:e6:30:15:db:4c:af:b5:42:fb:2f:54:3d:21:
         f9:ac:69:f6:85:ba:0c:e8:52:6e:5c:b1:3f:b0:3b:dd:83:e8:
         b2:d2:e5:19:5b:3c:87:f0:0b:ee:64:ba:99:ce:06:9a:d3:ae:
         d5:f5:9e:b9:3b:94:e4:35:46:c1:6d:2d:00:d0:8a:31:f4:a5:
         49:3c:39:3b:d3:a8:4a:68:8f:99:f4:23:bb:56:32:c0:12:6f:
         f0:95:84:2b:d0:4e:b8:be:6b:9b:b2:b2:5e:58:c4:09:51:81:
         49:97:b3:18:d3:b5:56:43:e0:ff:63:92:8b:6e:93:c4:8d:3c:
         42:43:11:89:34:f8:25:d4:39:32:96:ff:97:e2:85:3d:c1:53:
         dd:70:43:95:c4:1a:5a:ee:d4:c7:b1:f6:d3:35:5e:d0:4b:04:
         7f:0d:d3:24:80:0d:6b:d6:f2:8a:0b:7b:7a:d5:ef:83:75:38:
         41:5c:fc:f6:5b:10:0c:22:0b:82:a3:e5:16:e3:75:d5:f1:f2:
         97:8c:d9:20:44:de:1f:d6:68:b1:20:bc:60:a7:0d:b0:b8:3c:
         a9:ef:13:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:16:00 2025 by rpki-client