Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/3130332e35332e3138342e302f32332d3234203d3e203633383734.roa
File:                     3130332e35332e3138342e302f32332d3234203d3e203633383734.roa (raw, json)
Hash identifier:          LCTalW2OdI1gYSKj0d9a5cN3x/BU4CR5jkgjJ4XsxFo=
Subject key identifier:   B5:EC:58:6F:E2:9F:57:C8:65:5A:96:96:EE:16:8F:83:2E:75:41:0F
Certificate issuer:       /CN=A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C
Certificate serial:       76A36C761B0D883C3239C195C2AC14CD41240A8B
Authority key identifier: A5:51:C9:C9:99:1E:20:FF:99:C2:A7:48:CB:76:65:B2:DE:0D:2F:0C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/3130332e35332e3138342e302f32332d3234203d3e203633383734.roa
Signing time:             Thu 03 Jul 2025 06:00:00 +0000
ROA not before:           Thu 03 Jul 2025 05:55:00 +0000
ROA not after:            Thu 02 Jul 2026 06:00:00 +0000
asID:                     63874
IP address blocks:        103.53.184.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.crl
                          rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 11 Aug 2025 18:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:a3:6c:76:1b:0d:88:3c:32:39:c1:95:c2:ac:14:cd:41:24:0a:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C
        Validity
            Not Before: Jul  3 05:55:00 2025 GMT
            Not After : Jul  2 06:00:00 2026 GMT
        Subject: CN=B5EC586FE29F57C8655A9696EE168F832E75410F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:23:23:29:3e:42:4c:7d:5b:b5:21:82:5e:5c:
                    44:9d:66:6d:cd:4f:a6:0e:87:55:7b:9e:ee:3c:9c:
                    ff:f9:8f:f2:62:7b:93:82:c4:52:2b:93:d6:d5:4d:
                    2f:83:cc:de:30:38:61:82:ab:16:0f:d1:f9:e7:e0:
                    42:4f:c0:4b:91:0a:e1:19:a3:5a:06:f8:1b:e4:37:
                    15:e2:8c:c0:cc:24:16:21:3b:b9:f6:bb:89:b4:9e:
                    ad:76:95:50:cb:e6:cf:e0:cc:f0:43:94:82:e9:42:
                    d7:be:33:6c:f4:55:43:40:b9:85:b5:64:1a:23:e6:
                    67:ed:9f:3b:02:7e:7f:ef:92:a1:2f:db:74:50:1f:
                    9c:7a:44:96:7c:91:d5:cb:11:c2:4d:76:32:d1:be:
                    dd:b0:9b:26:1e:73:8e:8b:d2:42:e0:ae:5b:6b:c3:
                    31:a5:85:85:6a:88:41:21:ed:9a:f2:27:c5:96:82:
                    4e:e2:24:d1:4c:d3:21:99:13:db:12:ea:29:2f:77:
                    e7:26:56:be:6a:b6:13:00:63:90:7d:51:82:47:89:
                    e5:ff:de:77:b3:d9:cd:ed:10:a2:55:3a:55:ef:07:
                    ac:db:3e:1d:5b:bd:73:8e:f4:15:ed:55:cf:86:0b:
                    82:48:f8:e4:4d:75:97:79:9f:b6:50:92:e9:85:e0:
                    71:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:EC:58:6F:E2:9F:57:C8:65:5A:96:96:EE:16:8F:83:2E:75:41:0F
            X509v3 Authority Key Identifier:
                keyid:A5:51:C9:C9:99:1E:20:FF:99:C2:A7:48:CB:76:65:B2:DE:0D:2F:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/3130332e35332e3138342e302f32332d3234203d3e203633383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.53.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:3c:be:58:9a:0f:e7:cc:f4:d4:e2:17:5d:e9:2a:f7:a7:5f:
         bd:bb:f5:24:84:67:a6:d1:0f:bc:5b:99:fe:29:9f:6b:ed:5c:
         0d:45:a7:64:1f:2d:87:d5:3c:1d:2d:b0:60:df:e5:fd:aa:5b:
         4c:5a:3f:8f:57:42:26:e1:fe:07:fa:c2:9c:ec:e2:8e:1c:45:
         65:b0:6c:a5:8c:74:48:9b:ec:9a:fd:b5:6a:a6:bd:c8:0e:81:
         2a:2c:c1:0a:d7:9c:37:3a:14:1a:4b:e4:59:2d:c4:d9:57:bf:
         5c:a7:72:54:64:bf:14:49:b9:06:9f:68:65:99:95:a9:c8:e2:
         c1:54:6a:f7:65:5b:d5:3b:87:d3:ef:44:e1:87:6c:03:db:ce:
         ab:01:18:b7:e9:da:f2:d1:59:0d:09:7f:97:88:83:0c:7f:38:
         e0:0c:17:01:3e:cf:93:91:ca:a8:f3:83:45:b1:67:a8:f6:a5:
         9c:f8:c3:25:60:da:c0:12:9d:4e:c3:d4:44:21:e5:7c:08:dd:
         c9:69:0f:7d:41:5a:8f:09:4a:b3:eb:43:9f:94:aa:b7:48:d9:
         dd:c5:36:31:40:aa:bf:95:50:d2:d2:1f:bc:72:f8:71:d3:74:
         1a:d6:fd:d6:b8:f9:eb:a3:19:62:23:66:72:9f:a1:2f:af:ca:
         7f:60:77:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:48:05 2025 by rpki-client