Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/3130332e3134342e31392e302f32342d3234203d3e20313339343138.roa
File:                     3130332e3134342e31392e302f32342d3234203d3e20313339343138.roa (raw, json)
Hash identifier:          NPTNkAFeiU4perz1lh+B9xb1IjABewQG5b/Cldme2U8=
Subject key identifier:   6A:2E:3D:0A:FD:E8:11:69:C2:7B:17:A7:B4:31:3A:34:63:4C:F9:D9
Certificate issuer:       /CN=516450A151C5487FCC5911F4C18941CA895B07A5
Certificate serial:       15C6506E0C7E31D4FA766C79BFBF8C47330CBBFE
Authority key identifier: 51:64:50:A1:51:C5:48:7F:CC:59:11:F4:C1:89:41:CA:89:5B:07:A5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/3130332e3134342e31392e302f32342d3234203d3e20313339343138.roa
Signing time:             Sat 28 Jun 2025 04:02:22 +0000
ROA not before:           Sat 28 Jun 2025 03:57:22 +0000
ROA not after:            Sat 27 Jun 2026 04:02:22 +0000
asID:                     139418
IP address blocks:        103.144.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.crl
                          rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Jul 2025 18:57:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:c6:50:6e:0c:7e:31:d4:fa:76:6c:79:bf:bf:8c:47:33:0c:bb:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516450A151C5487FCC5911F4C18941CA895B07A5
        Validity
            Not Before: Jun 28 03:57:22 2025 GMT
            Not After : Jun 27 04:02:22 2026 GMT
        Subject: CN=6A2E3D0AFDE81169C27B17A7B4313A34634CF9D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b2:17:86:2d:8b:6c:1b:4b:45:f1:85:68:c1:
                    6b:46:79:59:37:b5:9b:42:19:c7:81:66:58:03:6c:
                    49:96:54:8b:a8:19:f1:f8:90:07:92:a1:a8:34:dc:
                    09:bb:2a:09:99:57:fe:ac:15:48:2d:f5:cc:3f:53:
                    a2:c9:07:99:d6:7f:28:05:cf:3b:38:56:d3:62:9e:
                    3f:eb:ea:51:c3:16:e1:ec:c1:46:cc:6a:7c:d5:54:
                    57:0d:fb:03:c3:25:3a:1b:7f:81:9d:bf:31:ba:09:
                    7c:dd:7b:7a:5b:13:0e:56:fb:c0:bb:b1:06:81:09:
                    50:7d:a2:90:ac:2e:cb:dd:2a:4b:68:5d:b0:ad:68:
                    29:60:dc:03:f3:dd:97:c7:55:8f:e2:24:8d:40:e8:
                    bd:16:10:fe:ee:be:fd:61:fa:7a:e8:f0:18:4d:2d:
                    76:b2:b1:c1:f0:1d:60:4c:c3:0b:8b:39:38:2e:62:
                    fa:21:bd:5f:da:50:bd:3d:ba:c6:92:9d:24:b8:44:
                    ff:2a:52:0e:1e:0b:3c:3c:69:4c:d2:70:4f:a6:02:
                    1e:51:76:57:f3:8c:a6:03:23:b7:3c:39:36:c6:5a:
                    89:43:7b:b8:11:7d:bb:7c:58:2a:f0:b4:89:f8:ea:
                    26:38:77:25:94:d5:bc:6a:53:29:a2:66:9a:f9:9f:
                    f2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:2E:3D:0A:FD:E8:11:69:C2:7B:17:A7:B4:31:3A:34:63:4C:F9:D9
            X509v3 Authority Key Identifier:
                keyid:51:64:50:A1:51:C5:48:7F:CC:59:11:F4:C1:89:41:CA:89:5B:07:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/3130332e3134342e31392e302f32342d3234203d3e20313339343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:42:af:eb:bb:6c:e4:27:c7:a3:14:1b:64:4c:f4:66:ef:a7:
         5c:b5:2b:63:45:2a:c0:71:de:b9:3b:3b:92:12:81:29:2b:5c:
         86:34:18:51:6c:a0:04:6a:0f:d1:d9:14:ee:a0:2e:0e:60:5b:
         e8:14:c7:35:23:bf:48:4f:26:2a:a1:dc:dd:b0:80:30:b4:d0:
         95:19:ab:12:7a:9c:e3:3e:f2:a7:94:2e:9d:77:6d:c5:2d:f3:
         39:52:3e:43:cb:3a:53:fa:73:1b:5c:70:b4:21:2d:c0:4f:d1:
         29:19:b3:f3:76:4e:97:42:e5:5e:1d:14:a5:26:46:9f:e7:2b:
         a2:fd:fb:3a:aa:e7:34:57:58:4b:97:31:3a:a4:15:45:a2:6d:
         ff:43:8c:3a:34:e6:fc:66:79:ee:32:d8:56:c4:d5:f2:52:48:
         16:91:fe:68:ce:82:b5:fe:bb:0e:8d:2e:d5:30:65:fa:84:c0:
         a9:ec:f2:3c:87:59:e9:7c:de:b1:1d:a1:20:a6:86:c9:9e:64:
         48:e5:96:7e:4e:bf:be:78:59:fe:f5:7d:86:64:2a:ff:34:be:
         a4:12:41:4f:ed:14:d8:ef:36:06:cd:36:4f:0f:ee:8d:50:fe:
         74:31:98:9d:9f:ef:90:a7:0c:3c:22:6e:56:e3:59:4d:d6:26:
         ff:aa:12:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:48:06 2025 by rpki-client