Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/3130332e3232362e34392e302f32342d3234203d3e203539323733.roa
File:                     3130332e3232362e34392e302f32342d3234203d3e203539323733.roa (raw, json)
Hash identifier:          Cv0EMC5062htKdHyxcMyy6exUpE5aD8gtMnGLSz9Wog=
Subject key identifier:   B7:3D:C6:9A:27:E4:4C:7B:10:1C:BA:5C:47:BA:F7:2A:F6:04:35:A3
Certificate issuer:       /CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B
Certificate serial:       7EAFF587B1BCE926BFC77AC744E79A19D9BA2FA7
Authority key identifier: BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/3130332e3232362e34392e302f32342d3234203d3e203539323733.roa
Signing time:             Wed 04 Jun 2025 18:00:00 +0000
ROA not before:           Wed 04 Jun 2025 17:55:00 +0000
ROA not after:            Wed 03 Jun 2026 18:00:00 +0000
asID:                     59273
IP address blocks:        103.226.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl
                          rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 05:51:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:af:f5:87:b1:bc:e9:26:bf:c7:7a:c7:44:e7:9a:19:d9:ba:2f:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B
        Validity
            Not Before: Jun  4 17:55:00 2025 GMT
            Not After : Jun  3 18:00:00 2026 GMT
        Subject: CN=B73DC69A27E44C7B101CBA5C47BAF72AF60435A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dc:49:1b:8e:5d:6a:4e:bf:54:c5:7f:f0:eb:
                    cf:6a:d4:00:ce:b3:a9:ea:27:d8:e1:64:62:91:00:
                    ce:0c:86:41:62:c8:44:85:7f:43:d7:b2:8d:da:be:
                    96:a3:b9:7b:c6:f9:55:a6:f8:39:a1:56:00:74:46:
                    8f:c0:1d:6f:3e:c4:41:2f:b1:53:ff:d2:ea:73:9b:
                    2a:1d:fc:a2:07:b2:02:b3:64:c1:b7:53:38:f0:8d:
                    18:f6:51:01:6c:56:1e:32:44:ad:18:85:12:e3:99:
                    59:de:06:e2:d1:eb:fc:3f:2a:a8:9e:e0:79:0d:64:
                    f4:85:5a:49:30:66:83:6c:2f:c9:f3:4c:fb:cd:48:
                    2e:1c:02:ec:5a:74:f6:86:75:c6:61:63:46:4d:cb:
                    d0:d2:b5:6d:86:5e:35:ee:39:10:60:d8:b0:29:60:
                    72:64:f2:b0:42:e6:50:ab:6f:7d:b3:34:5e:52:0f:
                    ee:8b:b8:48:07:dd:91:4e:93:20:5a:f1:5b:4d:0e:
                    ca:00:aa:bf:69:f1:d3:82:79:c3:d4:f3:f5:b7:15:
                    55:39:72:cc:12:4a:1e:08:21:f4:5e:08:1c:28:4e:
                    cf:b0:46:91:02:3d:d2:5c:46:09:7f:f0:5f:39:b5:
                    3f:87:c1:7d:6d:85:82:eb:60:74:fe:04:53:0d:41:
                    8e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:3D:C6:9A:27:E4:4C:7B:10:1C:BA:5C:47:BA:F7:2A:F6:04:35:A3
            X509v3 Authority Key Identifier:
                keyid:BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/3130332e3232362e34392e302f32342d3234203d3e203539323733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.226.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:ae:c7:8d:0d:75:a0:de:b1:3e:16:d5:05:f2:6c:da:fa:f8:
         62:0e:3e:c1:b9:ea:73:b1:95:fd:05:37:49:71:65:40:90:c1:
         64:96:f7:c2:e1:ec:87:12:8a:96:31:3b:a0:59:81:e6:48:d1:
         eb:44:32:b0:cd:b1:11:92:c8:cc:d8:8e:0c:29:c4:cd:54:89:
         a2:10:ac:d1:62:c8:46:23:f6:64:ff:86:09:45:88:1c:94:74:
         7b:0d:7b:6c:ce:ce:c2:d4:99:50:30:de:5e:cd:ac:8e:73:30:
         74:4e:4f:04:07:68:83:9a:f5:c6:fb:9d:a3:c4:c1:e5:77:8a:
         4d:b1:fb:35:69:65:26:2e:2a:cf:fb:d4:27:ab:f6:ef:32:37:
         b8:2d:37:63:90:a1:b9:9d:60:57:72:80:cf:e5:48:a5:29:74:
         9c:f0:f6:2a:57:e3:cd:43:02:4b:93:9d:8a:6b:fd:0f:ee:c5:
         82:19:aa:be:c2:20:bb:e6:56:ca:38:80:6d:46:32:da:29:00:
         e1:40:34:ed:c4:a3:1b:cb:d8:75:92:10:1c:e5:2e:30:b5:dd:
         5c:ae:cd:d2:9f:e9:d8:5c:32:8f:ca:c7:b5:bc:c8:31:f6:18:
         44:06:3c:3e:3d:6d:71:35:b9:76:06:e1:0b:8e:81:48:2b:fe:
         fc:6a:1c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:32:07 2025 by rpki-client