Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/3130332e35342e3133342e302f32342d3234203d3e203633383736.roa
File:                     3130332e35342e3133342e302f32342d3234203d3e203633383736.roa (raw, json)
Hash identifier:          rvPyF4pzz+NGPBxHBZxBP55s7GX0enQK9yL4BnvRk1A=
Subject key identifier:   6D:63:67:0F:4E:A4:86:93:28:45:B3:E6:DB:1C:4D:94:43:A1:64:B7
Certificate issuer:       /CN=EF4C4D45351DBB35C40C58769D718931B1AAD47D
Certificate serial:       063E6C59B4229F43429A4987B005267C6E30CEE4
Authority key identifier: EF:4C:4D:45:35:1D:BB:35:C4:0C:58:76:9D:71:89:31:B1:AA:D4:7D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF4C4D45351DBB35C40C58769D718931B1AAD47D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/3130332e35342e3133342e302f32342d3234203d3e203633383736.roa
Signing time:             Mon 02 Jun 2025 01:02:55 +0000
ROA not before:           Mon 02 Jun 2025 00:57:55 +0000
ROA not after:            Mon 01 Jun 2026 01:02:55 +0000
asID:                     63876
IP address blocks:        103.54.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/EF4C4D45351DBB35C40C58769D718931B1AAD47D.crl
                          rsync://repo-rpki.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/EF4C4D45351DBB35C40C58769D718931B1AAD47D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF4C4D45351DBB35C40C58769D718931B1AAD47D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Jul 2025 11:19:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:3e:6c:59:b4:22:9f:43:42:9a:49:87:b0:05:26:7c:6e:30:ce:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF4C4D45351DBB35C40C58769D718931B1AAD47D
        Validity
            Not Before: Jun  2 00:57:55 2025 GMT
            Not After : Jun  1 01:02:55 2026 GMT
        Subject: CN=6D63670F4EA486932845B3E6DB1C4D9443A164B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d3:19:37:c1:2f:95:d6:c4:b9:15:ca:ae:70:
                    69:9d:24:5e:0a:90:0c:49:04:ba:d3:43:0d:98:a6:
                    64:71:a6:ab:c1:fc:58:fd:ca:b8:69:bd:b3:ba:96:
                    21:c3:76:c1:3d:d6:9e:6d:b0:40:47:af:c3:ac:2b:
                    d6:d4:43:5b:ba:5a:25:4e:33:de:14:5c:11:be:2e:
                    89:84:27:49:2e:c3:31:71:31:37:7f:17:54:18:48:
                    c0:05:18:41:68:38:24:df:a1:f1:3e:df:90:20:02:
                    8f:c5:ea:99:fd:26:8d:21:65:9b:23:ec:35:58:1b:
                    89:dc:f5:f1:28:cc:54:a8:44:12:4c:8d:96:01:df:
                    99:15:b5:79:f1:55:08:36:2b:34:d6:cb:96:c3:79:
                    56:ee:86:06:b2:9a:b8:91:52:b0:0f:98:e6:5b:86:
                    e7:6e:4d:37:e2:57:55:a5:30:38:f0:dc:01:fe:c6:
                    2e:54:5f:15:00:ac:22:15:cb:94:69:8a:69:dd:20:
                    c2:ea:39:a9:ba:15:3d:75:87:d4:81:03:4b:14:41:
                    8d:f7:35:78:4f:e9:71:4f:a8:82:0e:9f:3c:22:01:
                    ed:29:dd:84:dd:3e:09:03:ee:5f:51:9d:e4:d9:69:
                    76:dd:ad:98:f4:6c:82:81:0b:0f:24:19:c8:0d:55:
                    cd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:63:67:0F:4E:A4:86:93:28:45:B3:E6:DB:1C:4D:94:43:A1:64:B7
            X509v3 Authority Key Identifier:
                keyid:EF:4C:4D:45:35:1D:BB:35:C4:0C:58:76:9D:71:89:31:B1:AA:D4:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/EF4C4D45351DBB35C40C58769D718931B1AAD47D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF4C4D45351DBB35C40C58769D718931B1AAD47D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/3130332e35342e3133342e302f32342d3234203d3e203633383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:38:ee:b3:2d:f9:b6:4d:99:5c:c9:19:0d:43:df:48:c2:83:
         13:a1:59:d0:5f:03:22:6b:24:b6:78:9b:ee:5c:5c:5a:f1:11:
         4a:65:4f:f6:48:f7:dd:f4:5f:f5:d4:87:09:68:15:ce:ae:18:
         71:90:c1:6d:f6:e4:dd:ee:4b:98:98:4a:64:cc:5d:4a:e3:ba:
         1b:7b:1c:5c:14:37:85:be:24:c8:ec:a8:09:b9:b7:15:54:de:
         71:e2:44:27:2b:7f:e4:2f:e3:b1:8e:6a:e6:13:49:14:42:75:
         8e:59:f4:c7:b8:1c:ef:3a:24:54:7d:b1:1f:bc:46:9d:9d:c2:
         32:b1:ab:db:36:25:34:7a:cb:68:25:02:c5:e0:15:e9:f3:6f:
         4f:0d:4a:32:88:8f:49:4e:74:e3:fc:3d:84:b1:30:c7:e3:06:
         b2:76:21:a3:90:53:2a:1a:01:ce:ca:72:00:21:17:23:e4:a6:
         0b:35:e0:84:40:e4:59:1e:92:2f:b8:09:d4:f5:df:60:73:bd:
         93:88:46:a8:53:e7:ac:da:50:f1:f6:db:5d:59:88:99:4c:fc:
         f6:37:4d:fc:5b:17:91:ea:7d:47:c1:85:c9:e3:f4:25:b3:81:
         a6:69:92:fe:88:b0:6a:f8:b1:5d:9b:15:66:d8:17:4c:88:a1:
         4f:b7:ef:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 06:52:50 2025 by rpki-client