Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e35302e31362e302f32342d3234203d3e20313331313137.roa
File:                     3130312e35302e31362e302f32342d3234203d3e20313331313137.roa (raw, json)
Hash identifier:          OSrWqKGKMAX7FGLQm0C90NPWE8pQBHSR5nRG4e13UVw=
Subject key identifier:   5A:F0:EB:C3:09:3B:E7:BD:75:AD:D5:B4:99:90:AC:C6:47:2B:DC:1B
Certificate issuer:       /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial:       6EA8505EEB715CD1EAC79105B5FB26A238A26EAE
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e35302e31362e302f32342d3234203d3e20313331313137.roa
Signing time:             Tue 01 Jul 2025 03:00:00 +0000
ROA not before:           Tue 01 Jul 2025 02:55:00 +0000
ROA not after:            Tue 30 Jun 2026 03:00:00 +0000
asID:                     131117
IP address blocks:        101.50.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
                          rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Jul 2025 15:54:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:a8:50:5e:eb:71:5c:d1:ea:c7:91:05:b5:fb:26:a2:38:a2:6e:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
        Validity
            Not Before: Jul  1 02:55:00 2025 GMT
            Not After : Jun 30 03:00:00 2026 GMT
        Subject: CN=5AF0EBC3093BE7BD75ADD5B49990ACC6472BDC1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:57:c3:ff:3e:f2:70:dd:8f:fc:f8:5d:79:aa:
                    1f:5d:72:b5:ec:32:22:a0:bd:92:17:3e:18:74:df:
                    4a:26:31:64:4d:0e:b7:0f:1e:a7:e7:c4:c1:11:9a:
                    df:78:24:70:67:34:65:32:3b:db:fc:09:86:15:c6:
                    de:0e:38:07:5d:7d:98:5a:77:b7:5c:bc:c5:5d:a3:
                    d0:55:5f:e2:2a:b0:50:ee:9a:9c:08:86:e0:54:38:
                    af:9a:e2:89:36:51:eb:da:83:ff:cc:96:79:62:b4:
                    a6:49:7d:8e:fb:a6:d4:28:48:0c:ab:30:5c:32:85:
                    00:01:3d:8b:4a:01:79:a8:1a:5f:55:d0:6d:94:b6:
                    b3:95:db:10:6c:4c:bb:74:a4:8b:00:5f:62:c3:27:
                    ae:a5:02:8b:49:c8:12:fc:11:86:7c:6b:af:7c:4d:
                    eb:2e:51:ad:4e:87:35:69:1d:85:1b:7d:86:d5:c6:
                    02:75:bb:1c:4c:67:0b:67:d2:3a:62:8a:fd:95:fe:
                    80:80:35:a5:97:11:e5:3b:47:b0:29:e3:cd:5d:d5:
                    4d:4c:57:fc:d9:ca:06:f6:23:07:db:59:cc:a9:57:
                    a3:38:0a:de:53:3d:50:53:60:ca:81:c3:1e:0e:8c:
                    22:f0:06:2a:97:3e:ca:04:42:d9:4b:62:68:1f:42:
                    61:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F0:EB:C3:09:3B:E7:BD:75:AD:D5:B4:99:90:AC:C6:47:2B:DC:1B
            X509v3 Authority Key Identifier:
                keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e35302e31362e302f32342d3234203d3e20313331313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.50.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:3b:31:bd:9b:41:80:3a:9f:31:8a:79:35:44:7e:2b:04:d6:
         72:a5:56:be:ed:fe:82:b5:42:93:ec:70:d9:bb:8f:f7:29:90:
         cc:16:df:d5:c6:64:08:af:02:0d:83:97:9f:db:48:19:db:38:
         eb:da:72:d2:db:ea:14:af:f7:b5:0a:38:8e:df:9d:2c:95:4a:
         17:70:04:fa:b5:d0:8b:bf:72:c8:e0:c4:e5:3c:60:c9:97:de:
         3b:19:6b:a3:f5:8b:9f:96:38:ab:a6:e8:11:e2:48:b9:3c:51:
         04:9f:13:ff:57:11:04:b4:e0:95:2b:53:56:11:e1:6b:f6:65:
         74:1c:d8:8b:55:7e:3a:01:ba:03:a5:81:25:dd:22:36:89:39:
         90:1b:dd:38:3e:67:47:33:ee:84:e2:2d:a1:df:5f:df:54:1d:
         f8:84:e8:cc:0e:0f:1d:96:b5:82:77:81:6e:f3:f5:64:5e:30:
         2b:48:08:87:06:02:57:ab:5d:cf:c9:83:8b:1e:e0:9f:7a:d4:
         c8:71:15:24:ea:0e:d1:6b:eb:25:15:3b:0c:f5:5f:4a:87:98:
         2c:13:4b:a8:2e:c7:a2:f6:c9:a1:5d:51:36:b5:9b:bd:7f:a0:
         90:65:17:44:48:27:4c:92:62:38:71:3d:f5:23:ed:be:d5:a2:
         db:32:1a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 19:04:37 2025 by rpki-client