Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/3130332e3232362e35302e302f32342d3234203d3e203539323733.roa
File:                     3130332e3232362e35302e302f32342d3234203d3e203539323733.roa (raw, json)
Hash identifier:          ImyXAYYU6gxFlWNkFMZjYF3LgN4oXFfG1+SCVAdQsYE=
Subject key identifier:   8C:C2:E6:E7:60:29:77:9B:50:58:DA:5A:C1:1A:B2:64:BB:56:EB:1A
Certificate issuer:       /CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B
Certificate serial:       0138E536B59A62939A9BFD2A4AB7CE6754934B15
Authority key identifier: BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/3130332e3232362e35302e302f32342d3234203d3e203539323733.roa
Signing time:             Wed 04 Jun 2025 20:00:00 +0000
ROA not before:           Wed 04 Jun 2025 19:55:00 +0000
ROA not after:            Wed 03 Jun 2026 20:00:00 +0000
asID:                     59273
IP address blocks:        103.226.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl
                          rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 05:51:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:38:e5:36:b5:9a:62:93:9a:9b:fd:2a:4a:b7:ce:67:54:93:4b:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B
        Validity
            Not Before: Jun  4 19:55:00 2025 GMT
            Not After : Jun  3 20:00:00 2026 GMT
        Subject: CN=8CC2E6E76029779B5058DA5AC11AB264BB56EB1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3c:09:47:ca:22:cc:89:17:d0:0a:e6:4e:41:
                    17:9e:34:d4:c1:c7:48:e8:13:38:9e:e0:9e:27:6d:
                    13:7c:18:49:54:fa:6c:c9:92:dc:ad:1c:02:ec:f9:
                    d1:c4:5a:b4:8c:1d:66:ec:e6:76:c5:97:17:16:cd:
                    ec:1f:51:56:7f:90:59:5d:0a:92:59:a8:c9:f2:ef:
                    2d:43:16:ac:0b:8e:e7:3d:94:ad:b2:de:30:c0:60:
                    38:19:df:a2:8b:55:3e:62:55:34:ea:85:69:f4:6d:
                    ca:79:61:fe:19:af:ac:a3:78:09:7c:e2:52:b0:bf:
                    c4:c5:0b:9a:2b:45:e8:33:91:2c:89:19:8c:7d:b6:
                    4a:23:ed:0d:1f:db:34:9b:50:70:8e:8d:a0:26:f1:
                    c9:2a:69:bc:8d:08:50:3f:bf:5a:20:b3:32:3a:70:
                    6e:ad:0f:d4:29:61:c7:a4:7a:2f:1c:e6:40:82:35:
                    46:e8:b6:97:c6:78:99:1d:e1:03:06:f3:4f:5f:fe:
                    93:ee:e6:ae:81:84:a0:8b:58:cf:cb:dd:8d:ce:90:
                    da:fe:ff:cf:a9:c1:3a:5c:68:9b:f5:92:16:63:45:
                    37:ab:34:71:fc:b7:23:7e:25:09:29:17:8d:16:54:
                    99:50:36:2c:61:4f:9c:b5:44:0d:f9:ce:ba:04:26:
                    d0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C2:E6:E7:60:29:77:9B:50:58:DA:5A:C1:1A:B2:64:BB:56:EB:1A
            X509v3 Authority Key Identifier:
                keyid:BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/3130332e3232362e35302e302f32342d3234203d3e203539323733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.226.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:a8:10:e2:51:bc:74:52:1a:01:93:41:89:0f:da:41:bd:f4:
         8f:88:63:ce:d0:48:6d:38:94:4c:b2:f5:4a:9d:66:94:68:fa:
         9c:82:5b:84:55:21:f3:77:a6:3b:af:92:e9:4a:b5:63:48:72:
         6b:44:a6:c2:24:8f:a2:bb:05:1f:6f:3b:0b:67:8a:39:91:3c:
         cc:fb:2f:3f:38:c4:de:63:b5:6f:85:c6:54:04:fc:36:22:18:
         3f:3a:15:cc:3b:20:2f:61:eb:76:6a:35:c7:9c:c9:46:30:fb:
         22:65:6c:e1:de:a9:4d:40:9b:0d:24:64:0c:71:37:43:fc:ea:
         22:0b:30:e4:a1:5c:e7:77:54:f5:26:ee:33:1f:c4:97:b3:f4:
         bf:a2:83:68:6a:69:50:73:12:e9:30:e6:7d:90:c9:45:9b:db:
         77:f8:33:ec:cc:7e:11:e7:f3:7d:3b:01:2d:24:f9:6f:6d:a3:
         e3:40:d0:75:31:99:86:e7:75:a7:99:b2:7a:b3:9a:07:5b:b3:
         ca:ca:65:93:2f:b4:e5:36:29:85:f5:5b:17:eb:bc:86:7b:c5:
         bc:a8:63:a3:5b:76:af:19:4b:8b:13:85:55:62:7e:09:9a:ed:
         36:7b:38:b6:c4:45:88:b1:62:bc:6d:6e:18:1f:72:3a:c2:f9:
         76:d3:b8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:37:10 2025 by rpki-client