Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/3130332e3139312e37302e302f32342d3234203d3e20313439393134.roa
File:                     3130332e3139312e37302e302f32342d3234203d3e20313439393134.roa (raw, json)
Hash identifier:          LKby0ViyWSUSxyx6by+Sa+3JQIcYE0HMocb+PoIEh0U=
Subject key identifier:   03:AE:AC:53:97:97:8B:FD:4C:E4:5E:AD:CF:93:6C:75:F1:DA:C9:33
Certificate issuer:       /CN=E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38
Certificate serial:       64A5CBE835A77F7397E460C35F9925F2BFA284CC
Authority key identifier: E5:1A:77:F5:DB:FB:16:B1:60:6D:E1:A4:FF:6D:FD:05:73:42:0E:38
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/3130332e3139312e37302e302f32342d3234203d3e20313439393134.roa
Signing time:             Sun 22 Jun 2025 03:44:34 +0000
ROA not before:           Sun 22 Jun 2025 03:39:34 +0000
ROA not after:            Sun 21 Jun 2026 03:44:34 +0000
asID:                     149914
IP address blocks:        103.191.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.crl
                          rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 13:57:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:a5:cb:e8:35:a7:7f:73:97:e4:60:c3:5f:99:25:f2:bf:a2:84:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38
        Validity
            Not Before: Jun 22 03:39:34 2025 GMT
            Not After : Jun 21 03:44:34 2026 GMT
        Subject: CN=03AEAC5397978BFD4CE45EADCF936C75F1DAC933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c4:24:9f:74:64:97:58:7c:5e:d0:66:32:3a:
                    bd:43:43:be:ce:d2:91:c1:9a:f3:4d:5f:20:28:51:
                    48:34:04:f2:de:13:30:b9:35:22:61:e0:e3:82:24:
                    f8:61:bb:e4:13:fa:08:94:e6:95:b1:96:a3:f6:ab:
                    d1:95:e6:16:ae:bd:e3:20:eb:a1:4f:19:9d:66:16:
                    4d:3a:9a:08:6c:bc:ed:17:f9:74:d5:ed:f2:31:52:
                    6d:17:55:e6:3f:29:90:f6:a7:b4:47:a7:5b:a6:af:
                    56:5b:14:e1:ec:99:1d:d0:e5:c0:66:1c:88:80:b2:
                    fb:2d:67:ff:ba:ec:55:0e:ca:98:8f:8f:5b:e3:19:
                    56:84:b7:5e:f9:c1:a1:d1:33:06:08:59:23:73:c3:
                    59:bb:09:09:92:ac:9f:66:aa:88:e7:cb:d1:67:0e:
                    a5:55:b0:0b:a7:0a:88:1e:58:f3:85:ac:52:9f:18:
                    de:be:8c:67:90:e2:ae:8c:5c:c9:cd:0f:a4:de:17:
                    3d:f6:ac:37:8f:75:26:40:b3:9d:64:c4:d4:68:81:
                    24:7a:dd:ce:73:ca:46:e7:22:d5:87:3e:c8:b4:e1:
                    96:7a:61:7e:92:f8:cb:3a:ae:10:57:8e:48:d2:3f:
                    b9:9b:27:4b:53:d2:93:4e:9b:14:ff:83:5e:71:7d:
                    34:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:AE:AC:53:97:97:8B:FD:4C:E4:5E:AD:CF:93:6C:75:F1:DA:C9:33
            X509v3 Authority Key Identifier:
                keyid:E5:1A:77:F5:DB:FB:16:B1:60:6D:E1:A4:FF:6D:FD:05:73:42:0E:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/3130332e3139312e37302e302f32342d3234203d3e20313439393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:a5:e2:73:23:42:53:a0:7f:02:53:f4:c4:f2:3e:0b:67:b2:
         63:bb:d5:e6:a5:27:f8:8f:9d:cc:66:08:0a:04:78:84:04:f5:
         35:61:b6:fc:e6:5f:ac:79:52:3b:08:94:9a:a7:de:37:93:fc:
         45:8b:6e:f6:ad:8a:05:50:8d:fe:79:4e:ae:5e:5c:00:43:ab:
         6d:6d:46:62:b3:ac:cc:c5:cf:97:2e:f0:4b:53:76:0b:08:d9:
         b5:0f:52:18:22:d8:ba:87:79:be:e1:9c:c0:c2:16:51:1e:3e:
         2f:10:e2:3d:9d:d0:bd:cd:f9:78:cb:2e:e9:db:34:c2:b8:d7:
         6d:41:2e:21:f8:62:20:3a:d2:27:6e:1d:cf:d5:5e:64:c6:78:
         c9:21:d7:66:b1:34:f2:d7:d8:dc:99:76:d9:28:77:b5:90:52:
         8e:04:9f:53:78:4b:db:d5:c5:88:4a:56:45:53:ed:72:d6:26:
         33:c3:84:27:e3:4d:02:c4:4f:6a:dd:73:7d:c4:0a:b2:c1:20:
         9a:f5:1b:47:86:57:e1:01:ac:bd:d6:5c:68:ac:a7:0d:94:80:
         83:25:6b:20:5d:23:31:c9:16:3b:b8:01:de:42:ed:ad:dc:e7:
         42:62:6e:42:6a:7e:a7:22:72:22:6a:18:99:1f:70:75:4f:e5:
         13:ce:04:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 05:51:42 2025 by rpki-client