Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/3130332e352e3134392e302f32342d3234203d3e20313439393338.roa
File:                     3130332e352e3134392e302f32342d3234203d3e20313439393338.roa (raw, json)
Hash identifier:          aIp2Ip0KA7a4+VvE23OSDrVGb4sJGrWUPloeyjyWxtA=
Subject key identifier:   58:84:A9:FE:2E:E1:32:09:AE:ED:4B:32:CF:6E:D8:62:F7:FD:F7:38
Certificate issuer:       /CN=B8E467F9AD3F6AB1EEF3A9099A390231708C790A
Certificate serial:       5C0D5D5A215DA7CA1CA5A9C4400A39276954AFFD
Authority key identifier: B8:E4:67:F9:AD:3F:6A:B1:EE:F3:A9:09:9A:39:02:31:70:8C:79:0A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/3130332e352e3134392e302f32342d3234203d3e20313439393338.roa
Signing time:             Sat 03 May 2025 08:00:00 +0000
ROA not before:           Sat 03 May 2025 07:55:00 +0000
ROA not after:            Sat 02 May 2026 08:00:00 +0000
asID:                     149938
IP address blocks:        103.5.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.crl
                          rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 May 2025 10:16:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:0d:5d:5a:21:5d:a7:ca:1c:a5:a9:c4:40:0a:39:27:69:54:af:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E467F9AD3F6AB1EEF3A9099A390231708C790A
        Validity
            Not Before: May  3 07:55:00 2025 GMT
            Not After : May  2 08:00:00 2026 GMT
        Subject: CN=5884A9FE2EE13209AEED4B32CF6ED862F7FDF738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d7:56:31:d9:4b:0f:d5:82:bd:2c:79:ef:e6:
                    33:83:f1:f0:35:7b:b2:a2:f4:2d:6d:e9:6f:0f:9d:
                    3a:63:cc:bf:f9:90:27:53:41:4d:09:48:48:d8:c0:
                    9d:e7:d2:11:32:9a:17:ad:7d:6c:c6:6a:94:5c:0d:
                    67:92:be:57:29:30:c4:e5:09:d9:8f:0f:98:c0:b8:
                    cf:3d:26:97:5c:ba:4a:c4:2c:5b:71:bf:4c:ae:a8:
                    81:61:1e:12:45:fa:ef:bb:10:62:40:8f:8b:95:4c:
                    83:4b:4d:2d:52:17:6a:04:10:0a:8a:a4:60:5b:9d:
                    af:53:94:3e:f7:69:e2:9b:1f:d0:df:a4:4d:bf:7e:
                    ba:6d:fc:ee:00:5c:ce:76:87:d8:95:8d:41:ac:66:
                    cc:d8:d5:12:8b:96:31:20:1a:f1:bc:04:e6:28:6b:
                    df:bd:f5:4e:47:03:8a:79:fa:2b:f9:05:d4:b5:59:
                    4c:77:53:b7:0f:da:95:44:a4:9e:b4:93:39:22:6f:
                    c0:c9:5e:2e:31:c5:5d:9c:c6:82:84:ea:88:e7:61:
                    03:12:1a:1e:50:c2:16:cd:08:0b:5f:51:86:5c:fc:
                    1a:8c:a2:ae:03:3f:72:9e:5e:4b:69:f9:96:29:aa:
                    49:3c:1a:3f:74:3f:91:52:dd:e1:56:e1:9f:63:6a:
                    7e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:84:A9:FE:2E:E1:32:09:AE:ED:4B:32:CF:6E:D8:62:F7:FD:F7:38
            X509v3 Authority Key Identifier:
                keyid:B8:E4:67:F9:AD:3F:6A:B1:EE:F3:A9:09:9A:39:02:31:70:8C:79:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/3130332e352e3134392e302f32342d3234203d3e20313439393338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d4:35:d9:2c:dc:99:65:37:b0:16:f1:11:98:d7:a0:95:6e:d1:
         8e:ab:b5:f5:cf:30:eb:5b:c6:db:d1:09:94:d0:78:3e:02:63:
         79:6e:cb:45:cc:ad:da:04:83:c6:e7:78:06:d8:6b:3a:6b:19:
         cd:32:30:34:41:87:a0:e5:0e:85:c6:a4:84:1a:74:c1:63:98:
         e8:25:b4:d9:0d:12:9a:21:8a:a0:0d:7e:8f:d3:ce:d3:40:b4:
         93:bb:63:5a:9c:6f:b7:d4:d5:23:30:c8:6a:06:1f:18:3c:35:
         61:5e:f4:d0:a8:02:36:df:01:e4:3f:5a:8b:9b:fb:99:e3:d7:
         3b:c3:bc:30:87:d5:ef:38:1d:da:33:7e:d2:7a:d9:e2:9e:88:
         d9:23:c0:98:c2:99:3a:81:c6:bd:bc:7c:92:61:2b:b9:c5:79:
         a3:0f:57:91:96:8c:0e:ba:da:61:8f:2f:fe:16:41:d7:a7:f0:
         8c:ad:6f:9c:1f:1a:c0:36:40:fa:ff:89:45:3e:9a:f7:58:6b:
         9c:aa:31:c6:e0:e7:a3:fb:01:77:96:f6:2e:f4:1f:43:b1:a9:
         a6:4d:b3:b0:a0:10:68:a4:8b:3b:f5:52:8b:42:4c:56:24:06:
         a9:1c:17:6f:e7:70:57:1d:c8:3c:3d:38:51:cd:1a:f8:21:cb:
         af:54:32:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 06:57:33 2025 by rpki-client