Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139352e302f32342d3234203d3e203538333831.roa
File:                     3136332e35332e3139352e302f32342d3234203d3e203538333831.roa (raw, json)
Hash identifier:          hvbDj3oW0Ulg1k85u9jkPnoGdFUSrxAWB+C8nIEEK6o=
Subject key identifier:   3A:2E:06:55:A1:70:AF:A1:B9:12:31:F5:1D:5C:CE:D8:CC:C3:0C:F9
Certificate issuer:       /CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
Certificate serial:       5D4F60B2D510ACDE3753FD68ADB07995277AEA6D
Authority key identifier: E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139352e302f32342d3234203d3e203538333831.roa
Signing time:             Wed 02 Apr 2025 17:00:02 +0000
ROA not before:           Wed 02 Apr 2025 16:55:02 +0000
ROA not after:            Wed 01 Apr 2026 17:00:02 +0000
asID:                     58381
IP address blocks:        163.53.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl
                          rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Apr 2025 04:17:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:4f:60:b2:d5:10:ac:de:37:53:fd:68:ad:b0:79:95:27:7a:ea:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
        Validity
            Not Before: Apr  2 16:55:02 2025 GMT
            Not After : Apr  1 17:00:02 2026 GMT
        Subject: CN=3A2E0655A170AFA1B91231F51D5CCED8CCC30CF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:20:aa:b2:37:15:0a:35:ae:b8:40:27:1c:e2:
                    a6:45:bf:ba:fa:05:55:f7:47:68:9c:5d:75:4f:c0:
                    56:23:a3:30:e6:a0:11:26:3e:99:70:af:a3:1f:6d:
                    90:b8:a0:44:1d:cb:9a:c6:ff:98:c7:5f:a1:d5:c2:
                    12:41:06:e1:35:b0:20:e7:78:85:c8:97:3a:b6:94:
                    a3:e5:73:48:f8:b0:36:22:e2:9d:f9:13:92:d8:5d:
                    99:46:3e:5e:49:11:a5:22:2e:67:b5:ee:1c:d9:8c:
                    56:bd:8b:84:cb:74:d8:a1:e9:e5:86:7d:74:6b:8b:
                    37:48:47:63:54:8f:da:0f:23:dc:b1:22:4d:49:5d:
                    53:11:ee:b4:49:fb:dc:1a:59:c6:66:39:e0:62:8e:
                    0c:10:89:49:ea:64:82:d0:e3:9a:49:2b:9f:11:51:
                    e4:c8:72:ea:a3:ba:ec:a5:46:14:f6:89:3f:5f:05:
                    f3:7d:ad:89:4e:89:1d:5c:44:b1:13:3b:42:dc:b2:
                    92:bc:42:af:18:f1:2c:45:c0:4c:8a:e3:1c:40:0f:
                    0d:88:77:2e:ac:e0:b6:b7:ee:de:b9:8e:bd:1e:10:
                    79:eb:a4:a9:0b:85:02:97:91:41:5a:8a:83:eb:17:
                    ba:96:e0:27:00:37:b5:49:1c:2a:d1:22:3e:a2:f3:
                    c0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:2E:06:55:A1:70:AF:A1:B9:12:31:F5:1D:5C:CE:D8:CC:C3:0C:F9
            X509v3 Authority Key Identifier:
                keyid:E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139352e302f32342d3234203d3e203538333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.53.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:12:b7:92:65:2e:88:2a:dd:ae:99:03:a5:2b:a5:07:33:09:
         22:28:0b:56:9f:40:6a:96:e7:6f:f8:07:38:f6:42:63:77:05:
         dd:3c:67:51:e1:c8:24:6c:40:70:d5:27:d0:e5:f2:b2:c7:83:
         b1:fe:a7:a2:4c:19:5a:b4:29:a8:35:ff:2a:ba:56:7a:3b:ad:
         65:69:cd:66:fd:c3:5b:08:2e:eb:8a:9a:1b:8c:f0:22:58:f9:
         1e:d8:cc:5e:08:48:d3:bf:6b:a8:9c:bb:3c:cb:06:a2:b1:c6:
         7d:1b:bb:dd:c0:f5:04:dd:ce:fe:33:ef:59:0a:39:5a:4e:03:
         18:d4:9d:f6:28:70:c9:2d:4d:61:2a:d6:84:dd:fb:7c:c7:c1:
         ae:d4:22:7f:d2:39:12:d0:d2:8c:c5:33:b9:53:c2:bf:11:99:
         17:5a:f3:8c:ee:d2:d8:8e:cb:35:42:9d:db:a8:ba:2c:c0:a9:
         73:49:05:3d:b8:bd:7f:7e:16:6b:60:e4:3d:7a:54:e2:47:1c:
         cb:bd:d8:55:a0:fd:67:27:1e:8b:0d:c5:97:61:0f:4f:c8:33:
         91:99:92:05:1b:b4:1c:5a:1a:2f:ef:52:fd:7f:3e:66:ac:a6:
         7a:4a:e0:f4:e0:47:78:31:63:7a:4a:27:da:af:ff:6c:f5:a1:
         7b:11:45:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:54:18 2025 by rpki-client