Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/3130332e3232302e34342e302f32342d3234203d3e203438343635.roa
File:                     3130332e3232302e34342e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier:          Vw4jOV+MZ+fjdwltnh69uK5QodMXxVJ0LlNiepCYdZ0=
Subject key identifier:   54:C1:77:DD:B1:FE:45:31:8D:4A:11:B1:95:74:C0:18:E9:4A:8E:9D
Certificate issuer:       /CN=5AE19AE3FA86591042AE694640539C9669DEC801
Certificate serial:       16E26BB596E324D6B8DDA525D2CCFF5C9FB469A4
Authority key identifier: 5A:E1:9A:E3:FA:86:59:10:42:AE:69:46:40:53:9C:96:69:DE:C8:01
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/3130332e3232302e34342e302f32342d3234203d3e203438343635.roa
Signing time:             Mon 16 Jun 2025 03:02:54 +0000
ROA not before:           Mon 16 Jun 2025 02:57:54 +0000
ROA not after:            Mon 15 Jun 2026 03:02:54 +0000
asID:                     48465
IP address blocks:        103.220.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.crl
                          rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 06:49:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e2:6b:b5:96:e3:24:d6:b8:dd:a5:25:d2:cc:ff:5c:9f:b4:69:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AE19AE3FA86591042AE694640539C9669DEC801
        Validity
            Not Before: Jun 16 02:57:54 2025 GMT
            Not After : Jun 15 03:02:54 2026 GMT
        Subject: CN=54C177DDB1FE45318D4A11B19574C018E94A8E9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f3:8e:e5:b9:67:48:94:06:83:90:cb:c4:c2:
                    c7:51:d8:98:7d:83:67:a3:f8:bf:53:69:fc:96:64:
                    3e:9d:6b:f6:3c:b2:12:2d:b6:83:d8:cd:e1:51:98:
                    28:ef:a8:a6:a0:a8:f4:8e:fa:18:ba:28:96:1d:36:
                    94:31:6b:76:b6:dd:87:fe:a2:43:1a:58:05:b2:be:
                    04:3b:c5:b4:36:a8:bc:05:79:95:b1:69:ed:58:37:
                    1d:28:b1:9e:b4:38:69:da:03:ca:de:4e:bf:9c:d8:
                    a0:bc:33:f7:36:75:55:a3:77:7c:20:ea:91:5a:32:
                    4f:d3:49:3a:9f:a6:e5:23:28:e6:6a:e6:b5:a7:30:
                    48:dd:88:c6:ed:46:d0:11:0a:a9:e9:f6:57:9d:98:
                    77:15:61:84:21:41:fe:90:cd:ca:1f:fe:46:ae:15:
                    18:24:a0:74:92:ba:06:70:58:11:49:54:aa:d7:ca:
                    49:f6:bf:7d:06:0f:e0:f9:d4:04:eb:eb:dd:14:4d:
                    f6:e6:01:5e:b5:d6:48:91:42:f3:16:76:d9:12:84:
                    35:5f:97:ac:d2:47:58:d2:bb:30:27:d4:32:5b:96:
                    48:3f:d5:83:af:e2:da:09:a9:cf:89:92:68:25:0e:
                    04:3d:69:bb:97:0c:1e:9a:7f:08:03:21:a1:3c:94:
                    2c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C1:77:DD:B1:FE:45:31:8D:4A:11:B1:95:74:C0:18:E9:4A:8E:9D
            X509v3 Authority Key Identifier:
                keyid:5A:E1:9A:E3:FA:86:59:10:42:AE:69:46:40:53:9C:96:69:DE:C8:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/3130332e3232302e34342e302f32342d3234203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.220.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:eb:d3:6a:ae:0b:b4:2c:4a:3f:8f:5e:28:1f:ca:89:0b:6b:
         77:0d:5b:88:bb:d2:77:5d:e1:ac:bd:86:54:b8:6a:0d:f7:f1:
         b8:21:01:6b:60:d8:06:d3:3f:f3:ed:74:42:f4:0f:a3:8d:d8:
         b5:d5:4e:dd:6f:da:cc:2a:46:c5:df:0e:88:5e:08:4a:b3:fd:
         7d:c5:d8:3f:96:96:45:41:0d:9b:3d:3d:c8:fb:0a:c8:d8:bd:
         f8:ef:f7:60:80:77:44:7d:f5:0c:40:ad:3a:02:a5:51:b0:a3:
         48:25:81:35:86:bc:6b:b2:62:40:b7:48:f0:76:11:b0:9f:2a:
         26:1d:94:92:1f:2c:74:f8:a1:42:c7:e5:ea:95:e2:2f:f1:51:
         0e:68:f4:ec:62:89:db:e5:23:4c:6e:3d:6f:b1:26:5e:dd:75:
         d4:86:33:71:f5:6c:f7:22:be:0a:ff:e0:d7:f9:97:c0:c6:7c:
         97:14:b4:ce:2b:d7:43:f7:19:8e:81:f7:e5:b3:23:cb:7a:85:
         d6:e7:c2:70:27:bd:3d:a9:2a:ce:dc:69:73:01:14:82:13:cf:
         49:e8:f7:4c:79:16:6d:82:46:44:fa:19:97:0e:42:e4:5a:89:
         2f:f7:b9:bd:8a:c1:24:d9:33:9d:ba:d3:82:f8:97:f1:b8:92:
         1e:1e:75:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:27:34 2025 by rpki-client