Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/3130332e38332e39362e302f32322d3234203d3e20313336303738.roa
File:                     3130332e38332e39362e302f32322d3234203d3e20313336303738.roa (raw, json)
Hash identifier:          h+98Hl+FH7IDfemSrtBXhbDJo99hfIfndXfQe3JekOA=
Subject key identifier:   3F:60:4C:E3:9D:85:D5:9C:7F:D5:EC:82:64:29:84:6B:2A:1D:6F:3B
Certificate issuer:       /CN=798D703C19A93E4E19F716304D78F20AA3261B8A
Certificate serial:       6052EF1F21B90667D1EC909418C4FB0C363D2D3F
Authority key identifier: 79:8D:70:3C:19:A9:3E:4E:19:F7:16:30:4D:78:F2:0A:A3:26:1B:8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798D703C19A93E4E19F716304D78F20AA3261B8A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/3130332e38332e39362e302f32322d3234203d3e20313336303738.roa
Signing time:             Mon 02 Jun 2025 02:04:52 +0000
ROA not before:           Mon 02 Jun 2025 01:59:52 +0000
ROA not after:            Mon 01 Jun 2026 02:04:52 +0000
asID:                     136078
IP address blocks:        103.83.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/798D703C19A93E4E19F716304D78F20AA3261B8A.crl
                          rsync://repo-rpki.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/798D703C19A93E4E19F716304D78F20AA3261B8A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798D703C19A93E4E19F716304D78F20AA3261B8A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 00:14:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:52:ef:1f:21:b9:06:67:d1:ec:90:94:18:c4:fb:0c:36:3d:2d:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=798D703C19A93E4E19F716304D78F20AA3261B8A
        Validity
            Not Before: Jun  2 01:59:52 2025 GMT
            Not After : Jun  1 02:04:52 2026 GMT
        Subject: CN=3F604CE39D85D59C7FD5EC826429846B2A1D6F3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:16:d2:5c:07:a7:60:f3:e3:15:fe:18:ec:66:
                    b1:44:89:01:83:49:7f:c7:4b:e6:cc:42:dc:af:ac:
                    3a:2f:a0:da:e5:a1:30:04:3b:89:02:93:c1:3a:b1:
                    d3:80:e1:af:2a:cf:ff:6a:38:30:76:41:a5:45:74:
                    a0:27:e6:b3:80:ef:af:7e:b4:ee:40:ec:c4:04:85:
                    ed:09:4d:eb:9e:09:26:54:89:bc:b4:29:3c:b8:a3:
                    59:38:b7:03:06:c3:ca:dd:b6:4f:78:70:1e:02:25:
                    98:a7:40:48:0e:2b:46:21:c1:f0:f4:6f:5b:9d:99:
                    82:2c:bd:8c:27:52:42:2e:2f:e4:a8:ba:2d:2d:e7:
                    49:46:2a:de:5c:be:87:0e:d6:e7:4f:cd:e7:cf:ab:
                    56:a7:98:39:f7:bb:25:90:8c:0f:b3:00:e3:fd:aa:
                    bc:c5:fb:f5:09:e1:08:dc:bd:ab:a1:93:a7:59:c7:
                    92:0c:8f:67:d1:a7:51:7d:23:3e:01:c8:a0:49:1d:
                    12:65:8f:ae:1e:fd:7f:f2:59:c2:39:17:97:a8:9f:
                    da:51:f0:b1:b5:46:38:31:e6:27:61:25:a8:d6:bf:
                    8b:7d:9f:51:e6:f3:c3:47:9c:fd:6b:82:bf:13:d0:
                    67:09:04:c5:75:2e:be:1f:cc:c2:25:72:18:8b:e3:
                    0e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:60:4C:E3:9D:85:D5:9C:7F:D5:EC:82:64:29:84:6B:2A:1D:6F:3B
            X509v3 Authority Key Identifier:
                keyid:79:8D:70:3C:19:A9:3E:4E:19:F7:16:30:4D:78:F2:0A:A3:26:1B:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/798D703C19A93E4E19F716304D78F20AA3261B8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798D703C19A93E4E19F716304D78F20AA3261B8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/3130332e38332e39362e302f32322d3234203d3e20313336303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:e9:3b:f1:3c:1a:4f:ba:05:6d:03:95:58:14:75:94:df:01:
         f9:ae:9f:7f:2c:05:8f:08:69:45:24:51:49:f9:62:1f:ae:3f:
         bb:11:c9:e6:b0:5f:14:a6:58:b3:b0:16:91:60:b7:4f:f0:ab:
         b4:80:94:d6:c7:3e:59:d4:ca:e2:ce:b3:91:93:14:3b:c5:14:
         c6:e7:9a:ff:97:b2:a9:81:6d:a2:02:fc:ea:95:6b:a8:d0:31:
         ab:91:2c:35:3d:eb:6e:1f:4d:2b:22:4f:e8:ba:12:14:9c:c1:
         57:ba:c5:a8:fc:66:ab:29:2c:b7:8a:98:65:2b:05:11:00:eb:
         4e:69:be:00:0f:eb:f6:b7:f1:e3:cc:bc:9d:80:b6:73:49:16:
         bf:14:1d:81:ef:1e:bc:b0:07:58:da:1d:24:42:b9:a6:a2:f3:
         2b:f9:9e:f3:4b:85:65:b0:d0:e6:8f:93:50:6a:35:eb:95:d7:
         6b:1e:d8:87:20:13:ca:ff:43:7f:61:b4:38:56:32:71:ea:7d:
         02:bb:90:3a:ea:e0:04:71:a7:28:17:c3:82:40:0e:a1:ce:1c:
         f9:e0:42:40:7f:8b:f0:07:9b:64:57:4f:11:58:4d:21:11:a7:
         fa:8c:c7:5f:72:d0:fa:00:97:c4:a0:82:b0:b6:ff:d3:14:4c:
         03:08:a5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:51:12 2025 by rpki-client