Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/3130332e35352e32392e302f32342d3234203d3e20313530343837.roa
File:                     3130332e35352e32392e302f32342d3234203d3e20313530343837.roa (raw, json)
Hash identifier:          Zcui17ZIB7y9MI9lypagYjRYe4mnYqSwkXUNcZtsFwo=
Subject key identifier:   B0:90:64:2C:11:1A:95:C0:E0:5F:21:00:A8:2A:4B:5F:1B:3C:D6:68
Certificate issuer:       /CN=FA86E23853549D2EF1D9F9C9222147A550E36A38
Certificate serial:       04B155809809C1E65A65396327403175569ECC41
Authority key identifier: FA:86:E2:38:53:54:9D:2E:F1:D9:F9:C9:22:21:47:A5:50:E3:6A:38
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA86E23853549D2EF1D9F9C9222147A550E36A38.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/3130332e35352e32392e302f32342d3234203d3e20313530343837.roa
Signing time:             Thu 05 Jun 2025 19:14:01 +0000
ROA not before:           Thu 05 Jun 2025 19:09:01 +0000
ROA not after:            Thu 04 Jun 2026 19:14:01 +0000
asID:                     150487
IP address blocks:        103.55.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.crl
                          rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA86E23853549D2EF1D9F9C9222147A550E36A38.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 08:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b1:55:80:98:09:c1:e6:5a:65:39:63:27:40:31:75:56:9e:cc:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA86E23853549D2EF1D9F9C9222147A550E36A38
        Validity
            Not Before: Jun  5 19:09:01 2025 GMT
            Not After : Jun  4 19:14:01 2026 GMT
        Subject: CN=B090642C111A95C0E05F2100A82A4B5F1B3CD668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d9:6e:b1:e3:87:7b:86:e7:7e:1c:1f:1a:f5:
                    84:36:e5:04:16:df:27:f1:2f:4f:80:b9:e9:18:ff:
                    d4:07:da:50:27:24:50:28:a6:1c:63:1f:99:de:91:
                    2d:07:b2:17:07:7c:9d:a7:ae:6b:da:8d:2d:7c:28:
                    fb:bd:67:2d:a3:ef:b6:c4:f0:10:17:30:b5:87:d1:
                    06:4d:be:9f:90:be:e6:4e:73:82:5f:c6:80:1c:75:
                    48:0b:06:03:d8:83:8a:64:ae:7c:ed:65:db:a0:7a:
                    d3:2e:c4:1c:83:42:b6:31:ff:8b:d1:09:23:3d:cd:
                    b3:6c:4b:30:f1:b8:24:3d:f0:d3:7b:9e:55:ff:7d:
                    1a:bd:c1:be:8f:64:89:fb:52:16:77:53:df:9d:7d:
                    1c:05:e4:1f:95:e5:99:3d:38:34:74:b3:4e:b6:9a:
                    48:ad:ae:05:26:a2:dd:39:75:09:ec:b0:bb:cb:0e:
                    c8:c2:86:a3:e6:93:d0:78:d9:c3:8d:7e:88:36:3b:
                    5d:e5:55:64:57:5c:19:33:df:63:c6:af:78:69:59:
                    a8:eb:8d:ab:8f:91:4b:8b:7a:84:0c:7a:40:83:00:
                    f9:13:76:c9:b7:7b:1d:ef:60:1a:15:b3:f7:4f:d0:
                    c0:39:a2:9d:38:6a:0f:59:23:46:b5:36:b1:4e:ad:
                    a9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:90:64:2C:11:1A:95:C0:E0:5F:21:00:A8:2A:4B:5F:1B:3C:D6:68
            X509v3 Authority Key Identifier:
                keyid:FA:86:E2:38:53:54:9D:2E:F1:D9:F9:C9:22:21:47:A5:50:E3:6A:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA86E23853549D2EF1D9F9C9222147A550E36A38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/3130332e35352e32392e302f32342d3234203d3e20313530343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:4a:25:aa:1c:b9:b6:53:17:d9:38:33:3b:9a:43:f9:2f:22:
         29:4f:a9:db:da:72:1c:25:01:0a:cc:ad:5c:4e:5b:e9:24:87:
         97:af:a5:6b:7e:49:d8:57:73:c3:16:c8:1f:a4:61:1b:52:c1:
         42:9e:76:7b:54:9f:5c:1c:e4:35:67:22:14:38:53:f4:dc:29:
         c9:de:28:14:c2:6e:96:ab:76:9b:5d:1a:0d:d1:61:30:38:5b:
         7c:b4:a3:31:01:68:9b:17:7e:2e:9b:b6:65:7a:62:24:3f:e6:
         91:8d:1e:62:2d:2d:68:d0:9e:e8:3b:65:3c:a9:d6:20:0f:a1:
         39:26:a4:31:74:84:a5:2c:62:95:87:0c:44:53:10:48:44:70:
         53:b8:75:b0:92:aa:3d:f6:ac:2c:87:46:7f:e4:70:4e:f5:d4:
         fc:b7:58:8b:6d:a7:78:b0:56:ae:29:5b:0c:f3:33:47:a0:d6:
         dc:4d:45:47:32:f2:6c:ca:ec:f5:59:39:27:d7:6f:be:8b:8b:
         9f:af:5b:1d:af:d5:0c:8b:77:eb:c6:9b:0c:fb:1b:f6:33:4d:
         32:33:b4:4b:27:21:15:6a:d9:15:16:cc:1e:65:50:49:33:9b:
         9d:1b:54:0c:97:47:85:13:96:d9:24:6a:21:7e:86:8e:d9:6d:
         2f:b7:42:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 02:00:44 2025 by rpki-client