Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/3130332e3232302e34352e302f32342d3234203d3e203438343635.roa
File:                     3130332e3232302e34352e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier:          m4IQs/Cui2ddwLQciv0u+g5oFPnYhzNtze79R+PFKLg=
Subject key identifier:   B6:AD:13:A9:B2:2A:8C:2C:D4:12:8F:BE:7C:96:C6:AE:4B:B3:A6:8F
Certificate issuer:       /CN=5AE19AE3FA86591042AE694640539C9669DEC801
Certificate serial:       6ABFED4CE7703F51316112A6D01FB7C658F6E318
Authority key identifier: 5A:E1:9A:E3:FA:86:59:10:42:AE:69:46:40:53:9C:96:69:DE:C8:01
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/3130332e3232302e34352e302f32342d3234203d3e203438343635.roa
Signing time:             Mon 16 Jun 2025 03:02:54 +0000
ROA not before:           Mon 16 Jun 2025 02:57:54 +0000
ROA not after:            Mon 15 Jun 2026 03:02:54 +0000
asID:                     48465
IP address blocks:        103.220.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.crl
                          rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 06:49:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:bf:ed:4c:e7:70:3f:51:31:61:12:a6:d0:1f:b7:c6:58:f6:e3:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AE19AE3FA86591042AE694640539C9669DEC801
        Validity
            Not Before: Jun 16 02:57:54 2025 GMT
            Not After : Jun 15 03:02:54 2026 GMT
        Subject: CN=B6AD13A9B22A8C2CD4128FBE7C96C6AE4BB3A68F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3c:47:13:f0:c6:f5:4f:f6:a1:7b:19:88:84:
                    55:53:58:09:07:c5:8c:29:48:fe:2e:9c:73:56:95:
                    db:01:c4:e6:9a:ff:5a:e3:8a:2d:0d:6c:29:02:a1:
                    18:a5:52:57:29:12:97:18:52:38:93:4f:2f:b8:72:
                    78:32:7c:0c:2b:5a:08:97:80:03:15:db:5e:52:6b:
                    21:9e:4e:8e:97:f2:30:93:ec:ae:0c:9e:3e:71:a7:
                    29:50:e1:d7:f7:2f:4a:a4:ac:3c:39:d7:96:0b:99:
                    4d:b2:4e:10:01:4e:d1:31:cd:71:1f:5d:66:1d:52:
                    1e:c6:ac:e3:ff:e2:1c:67:d6:14:76:01:3e:3a:fd:
                    50:b5:ef:de:b8:f7:2e:c5:c8:d2:af:91:3f:01:ad:
                    7e:4e:66:0d:c6:fa:29:4f:b3:4c:66:00:f6:72:06:
                    e2:fd:eb:2a:51:d4:67:c0:8a:f4:ad:ff:68:46:7d:
                    86:88:8f:61:fb:60:69:a7:f7:85:31:fc:64:bf:77:
                    9a:15:63:aa:b7:b6:20:b1:ba:9e:ef:ce:86:5d:73:
                    7a:74:7a:ab:b1:02:11:96:7e:e3:4d:08:5f:df:7c:
                    ad:e8:64:00:a7:e1:1c:8c:33:0a:8f:1b:26:18:e6:
                    0c:f3:a7:ff:a3:1c:fd:1c:fc:07:be:2e:ae:01:31:
                    ca:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:AD:13:A9:B2:2A:8C:2C:D4:12:8F:BE:7C:96:C6:AE:4B:B3:A6:8F
            X509v3 Authority Key Identifier:
                keyid:5A:E1:9A:E3:FA:86:59:10:42:AE:69:46:40:53:9C:96:69:DE:C8:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/3130332e3232302e34352e302f32342d3234203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.220.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:a4:e2:59:55:b2:99:6b:57:c9:a4:3e:76:29:82:38:54:9e:
         a5:3d:da:7b:12:b2:57:56:a8:73:97:c6:16:15:bc:35:dd:ec:
         52:83:07:f8:9b:69:ef:0f:30:1b:69:cb:83:88:be:a4:a0:90:
         c6:77:26:3a:7a:60:a9:e0:84:95:b4:26:e2:8a:1e:ff:82:03:
         b0:ed:97:ee:be:f1:20:ee:2a:6e:87:a4:6b:dc:3d:26:49:ba:
         b5:a5:ee:a4:9f:7d:1f:c1:1a:89:a6:43:9c:c1:cc:d9:82:21:
         50:1b:b3:db:84:ad:02:fb:ed:1d:20:87:5d:2f:b1:b5:76:b6:
         15:d4:08:f3:01:0c:ff:d5:e0:e2:1f:bd:cd:1e:ab:39:6e:71:
         31:4b:d6:5e:98:b8:88:6a:af:41:93:ab:95:d9:36:0b:7e:d7:
         47:c9:85:54:65:0c:3e:d4:89:2b:f5:c9:ec:17:4a:2a:d5:05:
         8a:a3:9b:1c:4c:8f:75:13:f9:73:a8:42:eb:71:43:7b:ab:65:
         d6:d9:f9:4f:09:0f:c5:45:10:df:1a:98:dc:8a:cf:7b:9e:d3:
         85:dc:c5:8d:e5:58:d5:b5:f7:44:98:b3:9e:97:07:39:e1:58:
         94:03:4c:98:77:b5:a1:98:62:e3:63:b3:2e:cf:0b:b7:93:ed:
         f2:a6:50:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:00:21 2025 by rpki-client