Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/3130332e35302e32352e302f32342d3234203d3e203633383639.roa
File:                     3130332e35302e32352e302f32342d3234203d3e203633383639.roa (raw, json)
Hash identifier:          JbxABL76MkkqswIqSBjIy3QFwClw0Z/ylcfelmeq75g=
Subject key identifier:   75:6B:59:AA:E3:BA:BA:CB:45:FA:DA:22:D1:DA:66:EA:50:19:5F:0D
Certificate issuer:       /CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121
Certificate serial:       34AED4D34D09C73C9E717DCCACD9DB677CC9F6C2
Authority key identifier: 6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/3130332e35302e32352e302f32342d3234203d3e203633383639.roa
Signing time:             Mon 02 Jun 2025 01:02:49 +0000
ROA not before:           Mon 02 Jun 2025 00:57:49 +0000
ROA not after:            Mon 01 Jun 2026 01:02:49 +0000
asID:                     63869
IP address blocks:        103.50.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl
                          rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 17:03:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ae:d4:d3:4d:09:c7:3c:9e:71:7d:cc:ac:d9:db:67:7c:c9:f6:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121
        Validity
            Not Before: Jun  2 00:57:49 2025 GMT
            Not After : Jun  1 01:02:49 2026 GMT
        Subject: CN=756B59AAE3BABACB45FADA22D1DA66EA50195F0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2d:4d:8f:4f:fe:c1:df:45:11:7c:6c:72:42:
                    b3:e1:e0:ca:84:d3:5c:37:80:07:58:eb:55:62:2e:
                    bc:4c:e3:16:d2:ce:43:e1:6b:6f:ff:aa:9d:0e:93:
                    1f:0b:b9:af:55:ee:24:29:13:23:09:db:75:67:8f:
                    0c:fa:4c:13:72:24:2d:71:69:62:ff:0a:5b:d2:a2:
                    d3:cb:1e:dc:42:f9:87:6b:54:08:eb:66:f6:e3:7a:
                    ba:14:51:86:f5:65:31:3a:71:61:85:bc:4a:c1:1b:
                    9f:47:f6:e8:80:a5:0f:a0:ec:00:1f:42:f8:a7:5a:
                    09:0d:59:af:eb:62:41:65:12:f5:86:c9:7d:97:45:
                    64:9d:91:8c:67:f3:de:ef:95:6e:94:7f:0e:dc:c2:
                    49:68:c4:9a:93:0a:73:c2:f3:95:70:6c:cf:0d:50:
                    0b:4e:fb:fd:ce:6e:95:ba:75:c8:ed:a0:7d:19:41:
                    49:a6:95:6a:d6:c0:38:6c:2b:46:ba:0a:c9:33:8e:
                    8f:f0:a4:1b:88:f8:80:63:15:bb:8d:1a:7a:e9:91:
                    49:c8:c7:ee:5d:3b:01:9a:6b:62:33:14:46:c9:76:
                    09:46:67:01:82:2e:6b:29:84:eb:94:9f:ec:2e:8e:
                    08:cc:57:ea:8f:a8:c1:bb:33:92:80:38:8c:50:ee:
                    b4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:6B:59:AA:E3:BA:BA:CB:45:FA:DA:22:D1:DA:66:EA:50:19:5F:0D
            X509v3 Authority Key Identifier:
                keyid:6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/3130332e35302e32352e302f32342d3234203d3e203633383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.50.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:71:3e:7e:7a:48:61:bf:b9:46:ba:76:f4:32:36:4b:dc:0e:
         6e:b0:c7:9d:a2:bf:fd:05:24:33:69:2b:20:c0:4d:81:ba:f6:
         a2:b3:98:5a:9d:e7:f6:f5:65:13:d5:d4:4c:e3:83:fe:48:12:
         3e:3a:35:8b:07:27:13:e3:20:5c:3b:3c:54:a8:fc:08:97:07:
         60:4c:59:31:59:57:e1:d9:b6:9c:bc:4e:15:18:d9:1e:c5:f6:
         aa:30:59:6f:05:67:75:8a:26:f3:24:cc:5d:68:96:c6:68:1c:
         b5:60:3c:bb:47:a4:40:2f:e5:df:c2:46:93:57:b3:4b:d3:7c:
         5b:23:7a:1b:bd:cf:84:de:d8:23:f2:2c:ae:bc:55:a0:90:d3:
         3a:2e:ef:fb:4b:03:ba:b7:76:8f:c5:5b:7e:ff:94:9f:f0:ee:
         4e:56:9a:35:da:83:1c:9f:5e:ae:93:d1:11:0b:29:2b:7f:49:
         59:28:ff:d3:2a:46:2a:8d:04:25:fa:36:de:55:d9:9e:c6:4d:
         30:0a:82:b2:53:6a:d0:0d:1a:0f:5f:8a:a6:4c:90:f4:86:47:
         6a:93:67:bc:9e:a7:3b:60:4a:21:01:e4:a3:5f:56:39:69:e1:
         04:aa:f5:54:fd:9b:22:bd:56:ba:cb:46:44:51:3e:e1:11:da:
         ff:f8:eb:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:55:48 2025 by rpki-client