Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/3130332e35312e39382e302f32342d3234203d3e20313530343639.roa
File:                     3130332e35312e39382e302f32342d3234203d3e20313530343639.roa (raw, json)
Hash identifier:          4B7irySfovCa+fs5OrOidwnp7dP+n6xSYZr+/3ur6bs=
Subject key identifier:   07:C9:CD:A5:3E:22:B2:83:4D:56:77:E0:1A:02:69:39:67:E4:80:D3
Certificate issuer:       /CN=245A17CADB2BB2FDC5786C27E5BE959636E7F409
Certificate serial:       1E0DB9DCD5FA9275AD3FB1FAF416A5538EACCE98
Authority key identifier: 24:5A:17:CA:DB:2B:B2:FD:C5:78:6C:27:E5:BE:95:96:36:E7:F4:09
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/3130332e35312e39382e302f32342d3234203d3e20313530343639.roa
Signing time:             Thu 15 May 2025 11:23:56 +0000
ROA not before:           Thu 15 May 2025 11:18:56 +0000
ROA not after:            Thu 14 May 2026 11:23:56 +0000
asID:                     150469
IP address blocks:        103.51.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl
                          rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Jun 2025 03:57:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:0d:b9:dc:d5:fa:92:75:ad:3f:b1:fa:f4:16:a5:53:8e:ac:ce:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=245A17CADB2BB2FDC5786C27E5BE959636E7F409
        Validity
            Not Before: May 15 11:18:56 2025 GMT
            Not After : May 14 11:23:56 2026 GMT
        Subject: CN=07C9CDA53E22B2834D5677E01A02693967E480D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1e:9d:cd:f6:86:b8:31:88:8a:60:ec:a8:3d:
                    43:9f:d0:63:ba:a8:53:13:ee:df:0f:b7:e0:db:32:
                    bd:be:24:f0:79:cf:50:60:30:ab:f2:81:ba:e0:35:
                    e5:0e:de:38:c8:c8:27:f3:e2:db:d9:92:a8:e5:63:
                    ae:cd:7f:43:37:33:0c:4d:4b:88:b5:01:b1:dd:ec:
                    93:59:7e:82:ac:28:71:aa:3b:fb:49:e5:c2:f7:84:
                    7c:82:73:b8:db:b2:e0:2b:7e:e8:ef:5d:b2:35:e4:
                    41:a7:13:d1:4e:2c:0d:7e:14:5e:22:3c:e3:42:49:
                    29:8b:76:9d:1a:15:42:e6:8a:de:5a:61:03:5c:34:
                    03:7d:35:31:50:75:e7:01:fe:bc:9e:ac:21:ca:db:
                    f5:3b:49:c7:be:8d:e7:40:08:e6:fe:2d:29:78:91:
                    53:ef:d2:a1:37:02:c5:fb:cd:95:0d:27:6d:88:53:
                    4b:a9:93:48:ce:02:b4:06:c6:e3:f1:73:05:23:c6:
                    a4:17:99:97:d7:49:05:cb:1d:4b:ce:a9:20:c1:20:
                    d4:53:57:7f:c6:d9:92:ad:f9:e2:e4:8e:ad:49:9f:
                    6d:99:ce:77:19:fb:7f:92:b8:c6:1f:c9:d0:a4:18:
                    ed:af:cb:1b:69:0b:d3:1a:62:9e:14:c1:93:70:a0:
                    c2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C9:CD:A5:3E:22:B2:83:4D:56:77:E0:1A:02:69:39:67:E4:80:D3
            X509v3 Authority Key Identifier:
                keyid:24:5A:17:CA:DB:2B:B2:FD:C5:78:6C:27:E5:BE:95:96:36:E7:F4:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/3130332e35312e39382e302f32342d3234203d3e20313530343639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:1e:8a:62:d2:59:c2:86:56:21:82:dc:a5:5d:ed:e1:b9:a7:
         d9:d9:7b:c3:48:b1:cd:4c:2c:89:c8:37:89:13:7d:f5:a0:6a:
         cd:3f:36:09:16:9b:f7:24:1b:9a:99:0a:a2:3c:08:60:c6:27:
         d9:3d:40:94:82:2d:2c:c2:ee:8b:6a:73:a9:d6:91:62:9d:67:
         73:e0:b0:3d:14:e1:3f:3c:af:15:6b:23:05:77:e2:db:9b:6a:
         b2:50:8f:25:d8:bd:56:3a:1a:db:9d:84:31:5c:1d:d7:57:ed:
         8c:e2:0a:c8:6e:e5:9b:29:36:56:39:40:0c:cb:6a:4d:4f:04:
         fa:45:56:ce:b3:07:ac:13:b3:8d:0a:95:41:ac:87:79:ab:71:
         61:48:49:f9:35:c1:80:af:37:85:98:de:d0:d5:5f:ea:5c:cf:
         25:a1:83:84:5d:cd:4c:a2:3f:0f:bd:09:91:71:c3:b6:54:7d:
         e6:bd:45:92:93:84:bc:7c:99:5e:eb:6b:30:e5:8d:ab:94:e4:
         df:c6:e8:32:5b:bf:c2:cd:a7:32:ff:ea:fd:31:1a:b3:2b:59:
         5c:a5:91:ee:0a:90:00:fe:2f:f2:4d:62:c2:3d:66:ed:dc:f7:
         bf:a9:74:03:ff:94:57:c1:d8:b6:fd:84:1e:d2:f1:a6:7c:ef:
         41:36:d1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 07:48:49 2025 by rpki-client