Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/3130332e3232362e34382e302f32342d3234203d3e203539323733.roa
File:                     3130332e3232362e34382e302f32342d3234203d3e203539323733.roa (raw, json)
Hash identifier:          2RhwyxU2ZZMzvcv7V8AkytYIscjSPeyUgoz7RilYeSY=
Subject key identifier:   6C:DA:70:4F:33:C0:4F:CD:7A:C3:A3:AF:78:A7:4D:EE:BB:89:CF:EC
Certificate issuer:       /CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B
Certificate serial:       241822A0D981C4C3B59CDB307B44AC75EC7B7C01
Authority key identifier: BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/3130332e3232362e34382e302f32342d3234203d3e203539323733.roa
Signing time:             Wed 04 Jun 2025 19:00:00 +0000
ROA not before:           Wed 04 Jun 2025 18:55:00 +0000
ROA not after:            Wed 03 Jun 2026 19:00:00 +0000
asID:                     59273
IP address blocks:        103.226.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl
                          rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 05:51:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:18:22:a0:d9:81:c4:c3:b5:9c:db:30:7b:44:ac:75:ec:7b:7c:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B
        Validity
            Not Before: Jun  4 18:55:00 2025 GMT
            Not After : Jun  3 19:00:00 2026 GMT
        Subject: CN=6CDA704F33C04FCD7AC3A3AF78A74DEEBB89CFEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:66:39:95:88:12:0b:2b:f5:b9:7a:8a:f6:05:
                    c2:ba:4f:c7:29:35:62:da:98:7a:98:24:db:8a:8f:
                    65:8d:8f:30:1c:25:a9:c3:48:07:2b:5b:f9:23:13:
                    c9:8a:0e:f7:f0:5f:61:88:e1:f2:d8:74:da:0b:16:
                    fb:d5:f4:89:63:8e:a2:9a:c3:c6:bd:80:e3:5d:25:
                    30:b7:73:5e:e3:50:a3:bd:5b:a3:ff:3c:39:f3:a0:
                    ee:8f:52:1c:ee:37:dc:33:3c:ce:36:b3:0e:d0:01:
                    27:f6:e5:4b:86:fb:aa:c2:80:80:89:0f:53:a3:3f:
                    18:67:d9:02:02:75:ef:6c:ee:cc:24:71:24:14:3a:
                    10:5c:a6:07:49:40:a8:95:9a:98:7a:68:5e:8e:ed:
                    f2:b5:78:ad:6b:80:38:81:9e:46:e1:45:9d:ba:d3:
                    02:48:3a:54:68:7d:3b:60:5b:90:b8:c4:1f:53:e0:
                    6d:1d:8b:a1:d6:52:8a:cb:a5:fa:3f:22:c7:57:c1:
                    c1:d6:45:11:4e:98:cb:80:af:83:9f:1c:17:32:8b:
                    b0:73:ee:1d:f1:fe:2a:9b:5d:d1:01:9f:88:e1:40:
                    91:54:23:33:b8:93:d0:6b:97:78:9d:d1:6d:c4:98:
                    a8:ae:97:19:d4:4a:22:a6:58:fb:ae:ff:63:89:86:
                    1e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:DA:70:4F:33:C0:4F:CD:7A:C3:A3:AF:78:A7:4D:EE:BB:89:CF:EC
            X509v3 Authority Key Identifier:
                keyid:BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/3130332e3232362e34382e302f32342d3234203d3e203539323733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.226.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:96:dc:d0:45:c2:a8:f2:e0:16:67:8c:1e:20:94:b2:53:0d:
         f9:25:7b:e3:3a:2c:56:51:22:30:56:08:fa:26:da:6e:bd:e3:
         6f:b6:e3:4d:00:bc:e1:1a:51:20:b3:de:a2:47:ad:8f:69:c5:
         6a:d4:6a:70:6c:3a:f6:32:d8:bd:a2:2d:12:b6:23:79:bb:1c:
         a0:d5:44:a7:61:0f:81:03:5d:2b:93:4f:d3:9d:8d:3c:c9:f2:
         c0:45:06:ce:fe:52:15:ba:72:11:29:27:a8:e6:27:82:c9:65:
         8c:b4:41:a4:1f:ad:30:32:99:d2:60:a6:7b:b8:1b:42:6f:8c:
         9c:02:d0:a0:08:11:4d:f2:59:aa:61:d3:68:f1:4f:61:c2:77:
         f1:c1:93:64:30:5a:a6:e5:1d:70:1e:2b:1b:40:07:b3:20:d4:
         2f:46:61:39:7d:ec:ab:3a:78:12:51:53:b5:ac:c4:11:37:7c:
         9d:c1:8c:c2:d6:9c:16:94:cb:11:c5:4c:5b:89:62:e1:e1:ee:
         e3:a2:0f:91:7c:80:44:e7:a6:01:6d:5e:6e:df:58:f2:24:2b:
         f0:e5:a3:54:8f:a7:02:4d:62:2e:d5:ea:c3:51:48:51:50:b6:
         ad:45:e6:f2:c2:bb:c6:01:8a:59:f3:f9:3f:0e:e3:e4:f6:d9:
         50:86:37:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:59:28 2025 by rpki-client