Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/3130332e35302e32362e302f32342d3234203d3e203633383639.roa
File:                     3130332e35302e32362e302f32342d3234203d3e203633383639.roa (raw, json)
Hash identifier:          XC5DYejk2ouXNggePM7faKlSdJX+qPYu8hQvOlxyDok=
Subject key identifier:   34:25:1F:E3:C9:E0:D7:E5:21:46:A7:22:71:C4:77:CA:52:C2:95:7C
Certificate issuer:       /CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121
Certificate serial:       0136424D94BC7E20D5844C6F091808B7FFD1324D
Authority key identifier: 6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/3130332e35302e32362e302f32342d3234203d3e203633383639.roa
Signing time:             Mon 02 Jun 2025 01:02:50 +0000
ROA not before:           Mon 02 Jun 2025 00:57:50 +0000
ROA not after:            Mon 01 Jun 2026 01:02:50 +0000
asID:                     63869
IP address blocks:        103.50.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl
                          rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 17:03:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:36:42:4d:94:bc:7e:20:d5:84:4c:6f:09:18:08:b7:ff:d1:32:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121
        Validity
            Not Before: Jun  2 00:57:50 2025 GMT
            Not After : Jun  1 01:02:50 2026 GMT
        Subject: CN=34251FE3C9E0D7E52146A72271C477CA52C2957C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:12:68:b7:46:c4:9b:ae:bd:f9:c8:0a:2c:2f:
                    de:60:c8:fa:34:85:f3:d9:a6:ef:f9:3d:44:05:00:
                    e7:28:74:f2:e6:72:b5:12:16:9d:cd:f6:a0:a9:55:
                    36:7d:82:bf:c5:78:f4:6b:94:98:bb:e2:0b:e5:99:
                    95:1d:e7:32:1c:4f:59:10:ab:5a:7e:b8:f6:b3:2b:
                    10:56:20:e0:72:87:01:5d:da:b5:77:10:88:c3:0e:
                    57:3f:2c:df:5b:4c:2d:cd:c8:e0:4d:ec:75:48:6b:
                    18:40:01:bc:8a:bf:d3:7b:79:3b:57:fe:d3:7d:82:
                    87:39:d4:c4:21:c2:59:39:b3:42:b6:85:97:bf:b6:
                    ba:5a:5f:41:f8:41:51:ee:7a:c4:c9:5d:d6:89:3d:
                    0f:a7:00:ce:09:02:46:a2:ef:f2:0f:07:41:ed:0b:
                    2e:f9:53:55:b0:df:e3:d8:a5:34:fa:86:c0:14:90:
                    75:99:e6:7a:3b:a7:2a:26:c6:28:17:ee:fb:d0:c2:
                    57:fc:d7:36:9f:60:50:02:95:eb:92:6f:31:dd:47:
                    0c:46:9a:32:60:7f:29:ba:2e:50:07:3f:76:8a:b0:
                    33:be:45:a6:a5:97:bd:3d:d0:94:b1:44:75:3b:91:
                    db:42:e5:a2:f6:e1:e9:66:11:dc:02:67:3c:70:ad:
                    b8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:25:1F:E3:C9:E0:D7:E5:21:46:A7:22:71:C4:77:CA:52:C2:95:7C
            X509v3 Authority Key Identifier:
                keyid:6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/3130332e35302e32362e302f32342d3234203d3e203633383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.50.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:06:e3:31:64:88:b1:72:ee:1e:dd:16:65:12:92:34:8f:80:
         86:e3:5f:f6:10:1b:f3:7a:b6:b8:41:ee:83:0c:5d:5b:ff:c3:
         c7:3f:66:2b:46:ae:21:fc:d4:06:ae:59:48:53:70:67:3a:44:
         e9:4d:97:38:43:e1:3c:92:55:d8:5a:ec:2b:47:15:40:8b:74:
         4f:57:22:9a:0e:29:dc:cc:bc:2a:73:2b:47:d8:c1:de:a5:a2:
         7a:45:13:50:aa:45:9b:4f:94:2a:09:05:e0:22:c5:ae:2a:e3:
         a7:11:ae:3a:5a:8c:ac:bf:c9:72:65:c7:37:80:32:78:b8:48:
         27:9e:e4:38:74:7e:dc:a6:5e:fc:51:15:21:92:15:71:dc:bd:
         f2:7d:fd:60:67:a7:cd:c4:77:8a:e7:45:a5:da:a4:13:d5:47:
         29:b9:ce:0c:36:d6:6a:68:a9:02:94:e7:c3:33:58:8f:ce:e7:
         73:6b:65:c7:ca:04:51:7b:c7:e1:82:82:27:82:05:6f:3a:45:
         ce:42:26:99:f2:1f:d1:71:e4:77:cf:ef:2a:55:cd:10:7e:31:
         66:83:aa:0e:3b:e3:3d:8c:0a:17:a7:34:05:1c:9e:ee:78:51:
         14:02:e6:52:a2:16:7c:41:3a:4a:98:a6:8d:4b:40:38:f5:56:
         f6:da:02:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:03:02 2025 by rpki-client