Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3130332e3139332e3134362e302f32342d3234203d3e20313530393836.roa
File:                     3130332e3139332e3134362e302f32342d3234203d3e20313530393836.roa (raw, json)
Hash identifier:          DrfxLIvnXV7Zd1k+L6FjxK0p1QfF/z3NuqgLUILzqc8=
Subject key identifier:   6E:51:D2:56:32:66:1B:71:60:FC:2F:83:7E:05:A4:14:55:33:65:06
Certificate issuer:       /CN=67749A065BBCF1E57768F4207E1B2FE788604D47
Certificate serial:       67ABF1F630BB95DC840BB38B9DA6A19574C91E91
Authority key identifier: 67:74:9A:06:5B:BC:F1:E5:77:68:F4:20:7E:1B:2F:E7:88:60:4D:47
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3130332e3139332e3134362e302f32342d3234203d3e20313530393836.roa
Signing time:             Thu 01 May 2025 02:00:01 +0000
ROA not before:           Thu 01 May 2025 01:55:01 +0000
ROA not after:            Thu 30 Apr 2026 02:00:01 +0000
asID:                     150986
IP address blocks:        103.193.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.crl
                          rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 May 2025 12:31:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ab:f1:f6:30:bb:95:dc:84:0b:b3:8b:9d:a6:a1:95:74:c9:1e:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67749A065BBCF1E57768F4207E1B2FE788604D47
        Validity
            Not Before: May  1 01:55:01 2025 GMT
            Not After : Apr 30 02:00:01 2026 GMT
        Subject: CN=6E51D25632661B7160FC2F837E05A41455336506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3a:71:b4:bf:a9:1b:ac:00:1a:a1:ee:3d:3c:
                    c5:e6:9c:97:b1:33:85:2b:9c:5f:c2:1f:8a:58:c5:
                    7c:cf:ca:a8:e2:0a:ce:c1:16:3f:70:25:f9:5a:e5:
                    70:9d:db:73:c3:95:3b:92:50:4d:40:f6:2a:ef:18:
                    2f:ae:0d:a1:e2:4f:2f:fb:a1:23:bf:23:39:75:5d:
                    a3:a7:23:92:bb:64:d4:45:b9:a7:38:90:e1:a9:68:
                    66:e2:a8:76:05:94:93:e8:18:64:bb:90:a4:d8:c4:
                    bd:50:f3:91:75:46:d2:cb:a0:9c:f3:4d:c7:83:8d:
                    18:9e:dc:c7:3f:5c:38:4e:8e:79:1d:28:b9:8f:1c:
                    4b:a9:75:71:51:d3:83:11:5e:c5:98:ad:50:8b:e7:
                    7c:65:c2:2e:34:58:e3:69:05:ad:39:85:2c:b5:c8:
                    fc:15:39:c1:60:05:71:d7:07:7c:71:bb:e4:a6:e8:
                    72:94:de:b2:80:8f:0a:6c:d2:3c:53:11:fc:8f:7a:
                    16:45:f7:bf:cc:38:cf:ae:6c:65:b7:49:25:13:60:
                    46:ed:70:5a:37:d3:a1:33:71:15:18:ed:26:46:35:
                    ae:75:54:49:7d:bf:2c:82:5e:23:a4:a6:79:37:7a:
                    92:61:c2:dc:2a:84:f9:7e:04:83:b6:94:82:4d:dc:
                    4c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:51:D2:56:32:66:1B:71:60:FC:2F:83:7E:05:A4:14:55:33:65:06
            X509v3 Authority Key Identifier:
                keyid:67:74:9A:06:5B:BC:F1:E5:77:68:F4:20:7E:1B:2F:E7:88:60:4D:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/67749A065BBCF1E57768F4207E1B2FE788604D47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/67749A065BBCF1E57768F4207E1B2FE788604D47.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3130332e3139332e3134362e302f32342d3234203d3e20313530393836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.193.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:e3:ae:9f:2a:3e:78:c1:a2:30:79:53:f7:f2:b8:59:42:50:
         18:70:34:43:8f:a3:70:b0:d5:08:9d:e8:41:f0:14:c5:0a:fd:
         c0:4a:fe:38:80:66:d9:32:28:df:c2:e5:fb:f2:14:8e:8e:51:
         b3:f3:5e:f9:7f:bd:b2:9f:86:f8:2e:37:2d:73:63:23:85:d8:
         91:c7:b7:91:7a:6d:45:f1:dd:3d:d3:b0:2e:2d:9c:b8:77:40:
         f4:74:0c:cb:33:13:4c:ff:18:a4:6e:8a:0d:05:87:4e:0b:78:
         cf:06:e5:43:8a:f6:db:cb:f8:6b:7a:34:e3:f3:95:a8:3f:c8:
         e0:3b:f9:c7:dd:41:b6:7b:cd:07:c0:de:af:b5:48:35:08:0f:
         6f:50:da:b6:6e:21:97:df:16:06:82:42:bc:06:91:b3:e6:14:
         ac:ed:a8:49:81:1f:2a:4a:45:eb:9d:32:38:d4:35:09:c9:5b:
         42:4a:1b:a3:2b:af:a5:34:ec:4b:fd:85:4f:80:13:a7:c7:6e:
         73:41:37:31:4e:e3:36:01:b6:e4:61:58:6c:82:0a:61:ea:d1:
         13:dc:9d:fb:a8:47:b2:4d:ab:92:8c:ec:f2:ac:80:12:5c:b4:
         be:76:3f:ee:eb:24:d5:ce:ca:aa:f5:4e:59:de:d0:1b:fe:be:
         bd:ac:6d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:49:44 2025 by rpki-client