Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/3130332e3134392e3232382e302f32332d3234203d3e20313439393733.roa
File:                     3130332e3134392e3232382e302f32332d3234203d3e20313439393733.roa (raw, json)
Hash identifier:          th+eNJC6/6XzvFTQRUFMp1BwXP0oM6Ef0vlOiEQwh/0=
Subject key identifier:   B4:A7:58:C9:60:5E:A2:E4:BF:66:3D:9F:01:D5:6B:7B:6D:7E:02:BD
Certificate issuer:       /CN=26ED4619223C6097B33621E429F958020B6F4624
Certificate serial:       53013AFBE2EAB817EDC79AAC6121BE3AF2B67504
Authority key identifier: 26:ED:46:19:22:3C:60:97:B3:36:21:E4:29:F9:58:02:0B:6F:46:24
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26ED4619223C6097B33621E429F958020B6F4624.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/3130332e3134392e3232382e302f32332d3234203d3e20313439393733.roa
Signing time:             Sun 15 Jun 2025 13:00:01 +0000
ROA not before:           Sun 15 Jun 2025 12:55:01 +0000
ROA not after:            Sun 14 Jun 2026 13:00:01 +0000
asID:                     149973
IP address blocks:        103.149.228.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/26ED4619223C6097B33621E429F958020B6F4624.crl
                          rsync://repo-rpki.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/26ED4619223C6097B33621E429F958020B6F4624.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26ED4619223C6097B33621E429F958020B6F4624.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 13:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:01:3a:fb:e2:ea:b8:17:ed:c7:9a:ac:61:21:be:3a:f2:b6:75:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26ED4619223C6097B33621E429F958020B6F4624
        Validity
            Not Before: Jun 15 12:55:01 2025 GMT
            Not After : Jun 14 13:00:01 2026 GMT
        Subject: CN=B4A758C9605EA2E4BF663D9F01D56B7B6D7E02BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b7:c4:69:a7:74:cb:5a:11:c5:4d:98:bd:af:
                    44:cb:d9:38:f3:1f:1f:68:95:2f:e4:4e:6f:07:c5:
                    ac:55:b9:a3:8a:48:bc:ab:03:1f:69:61:55:b3:f9:
                    6e:a3:4f:65:29:b9:d9:2c:38:df:54:b1:7d:8a:11:
                    cd:55:40:43:98:6e:26:93:5a:7f:3b:a7:05:23:c5:
                    53:66:9a:62:04:4a:e5:ce:ca:8b:4c:57:78:3d:8b:
                    a1:e7:35:38:93:6b:46:7e:38:dd:da:b5:ce:c3:44:
                    44:d5:29:1f:bb:cf:1c:7a:e0:9c:f6:ff:23:c5:82:
                    b5:6c:a9:39:ae:da:30:61:39:62:e7:5b:3b:86:1f:
                    52:58:0c:7b:b7:c8:e8:82:d6:ee:98:68:d0:26:eb:
                    e7:3a:e3:74:00:ad:e3:c2:d3:13:d3:0c:56:89:63:
                    ff:7a:fe:89:f7:fe:2d:ba:92:29:bf:8f:3f:f3:28:
                    a4:2a:e4:ee:97:c6:86:3f:3e:0a:cd:d4:cd:ab:7f:
                    5b:93:68:45:cb:d4:ad:7d:23:1f:26:c0:29:81:79:
                    0a:31:41:a9:ee:95:6e:45:55:fb:f2:94:38:ec:e6:
                    1b:88:c3:35:b6:7f:2c:22:53:db:4e:d8:ce:39:cf:
                    cd:06:c0:ea:05:49:0c:a2:4d:57:e8:4f:02:9e:77:
                    9b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A7:58:C9:60:5E:A2:E4:BF:66:3D:9F:01:D5:6B:7B:6D:7E:02:BD
            X509v3 Authority Key Identifier:
                keyid:26:ED:46:19:22:3C:60:97:B3:36:21:E4:29:F9:58:02:0B:6F:46:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/26ED4619223C6097B33621E429F958020B6F4624.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26ED4619223C6097B33621E429F958020B6F4624.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/3130332e3134392e3232382e302f32332d3234203d3e20313439393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:2d:d5:7d:0c:01:e0:13:23:76:06:e1:1f:85:1d:68:d5:3c:
         28:fd:8e:a5:2d:39:2e:ec:77:5a:c4:81:0a:98:e0:2d:a6:7c:
         fd:50:3b:d6:08:42:85:91:ff:55:e0:2f:d4:79:b4:13:7d:61:
         59:f4:91:44:66:56:b9:bb:43:ef:c8:ed:9a:bc:48:d3:77:f7:
         76:7d:7b:5e:93:33:79:1c:00:e8:2b:03:f9:ff:6b:89:1f:2c:
         38:64:7e:ee:c5:cb:4e:84:50:33:cc:9a:35:0b:5b:d0:e3:d5:
         a1:c6:70:17:b7:e8:ee:0e:28:d5:07:33:4f:90:ae:ff:9e:ee:
         84:8a:53:f5:7e:2e:23:6d:1c:96:3e:9c:92:43:66:87:b8:4b:
         f3:b6:a9:4f:ee:37:b1:59:78:88:34:25:22:86:c1:33:db:8b:
         63:15:b5:59:f9:a5:8b:59:29:3e:f7:91:db:c0:4b:98:7a:fa:
         00:26:32:8a:1c:39:72:fc:0d:7f:75:90:0f:b6:09:44:0f:11:
         e4:6f:c4:53:64:d7:68:36:11:c3:87:3f:07:40:c9:da:a2:ec:
         a0:52:0e:3f:f8:e8:08:e9:88:5c:be:ea:6f:c1:ad:4e:8e:2b:
         0f:73:ab:41:ce:47:09:90:58:bd:c5:d0:c8:76:1c:06:7e:b9:
         5a:39:dd:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 00:15:24 2025 by rpki-client