Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/3130332e35302e32372e302f32342d3234203d3e203633383639.roa
File:                     3130332e35302e32372e302f32342d3234203d3e203633383639.roa (raw, json)
Hash identifier:          CMxLGqk+5iIxSLstgSUEPMheQZBFi/aQaQ40AR/6xck=
Subject key identifier:   21:7D:2D:09:4A:2C:28:91:B4:C7:2B:2F:2E:A3:DF:5E:0E:89:AB:EF
Certificate issuer:       /CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121
Certificate serial:       37C2C5CC5CB74544E8990B8B5D8C54C2A1E167A7
Authority key identifier: 6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/3130332e35302e32372e302f32342d3234203d3e203633383639.roa
Signing time:             Mon 02 Jun 2025 01:02:49 +0000
ROA not before:           Mon 02 Jun 2025 00:57:49 +0000
ROA not after:            Mon 01 Jun 2026 01:02:49 +0000
asID:                     63869
IP address blocks:        103.50.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl
                          rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 17:03:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:c2:c5:cc:5c:b7:45:44:e8:99:0b:8b:5d:8c:54:c2:a1:e1:67:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121
        Validity
            Not Before: Jun  2 00:57:49 2025 GMT
            Not After : Jun  1 01:02:49 2026 GMT
        Subject: CN=217D2D094A2C2891B4C72B2F2EA3DF5E0E89ABEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:46:a5:c1:8e:30:32:ac:a7:22:8d:93:de:ec:
                    40:ee:3d:d3:fa:53:20:8e:3f:da:d8:91:86:d3:85:
                    4e:f7:75:9c:02:05:c4:2d:de:4a:e3:f3:9c:5f:76:
                    17:d8:22:40:20:95:f9:e6:98:5d:b7:ab:b1:ca:97:
                    66:29:a4:ae:19:f0:4b:34:b4:6c:fe:ad:f3:c2:d1:
                    5d:bc:ad:43:f5:a7:f6:ba:cf:05:e6:51:8f:ee:62:
                    7a:a5:39:b2:ed:8f:4e:10:b7:35:73:5d:3b:3e:b7:
                    66:db:b3:50:38:5b:4a:e4:67:06:83:20:17:04:12:
                    0c:c7:c9:17:6e:d1:6d:4b:6d:c1:83:ab:15:eb:17:
                    6a:bd:bc:59:1c:0a:3b:94:e5:01:43:95:92:19:88:
                    ac:57:71:6c:3b:f5:f1:3f:b1:a6:72:1f:54:5d:80:
                    89:20:5c:a2:3b:6c:9b:22:90:c1:ff:b9:4c:2a:85:
                    7e:9a:fd:3f:af:67:41:c9:6b:b4:9c:b2:5b:37:24:
                    70:75:10:2c:72:4e:6a:14:45:c4:5c:d5:8c:59:a7:
                    73:87:c5:46:37:d9:a0:d1:0f:49:22:cc:66:f6:1c:
                    24:16:88:e1:4b:66:4c:13:fb:00:8f:8c:4c:bc:6c:
                    d3:eb:95:35:6f:2e:4b:de:ce:df:01:3b:9c:ea:bf:
                    60:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:7D:2D:09:4A:2C:28:91:B4:C7:2B:2F:2E:A3:DF:5E:0E:89:AB:EF
            X509v3 Authority Key Identifier:
                keyid:6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/3130332e35302e32372e302f32342d3234203d3e203633383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.50.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:35:49:27:e4:94:17:38:22:17:be:38:00:3c:ef:1b:0a:6b:
         b8:a4:67:bf:a7:1b:12:d0:bc:34:c9:7b:6c:a0:59:7b:cf:fd:
         42:5f:30:92:3d:c0:d2:d6:a2:52:a4:54:a8:6b:40:d8:68:c3:
         b0:d1:17:0e:ae:7a:70:5e:7b:f9:d4:0a:4a:81:26:2a:fb:f5:
         99:f4:a1:a9:ad:93:00:81:c8:be:43:26:bc:9f:58:27:4e:41:
         bb:b0:8d:fc:e7:b9:a9:18:3f:fd:01:cd:2c:ca:85:6b:3a:5e:
         60:98:20:06:e6:eb:9a:29:1f:89:b4:4e:ae:1f:42:ce:38:2f:
         55:af:40:90:ef:53:ff:2b:e8:bb:47:1d:11:28:b5:8b:94:3b:
         da:c0:09:b0:d3:da:83:8b:ee:a9:01:cc:8f:ac:fe:aa:90:01:
         18:ca:72:63:7c:c1:b6:ca:91:70:f4:69:14:63:0a:f8:f4:be:
         61:32:bf:df:8c:8c:5a:6a:33:d0:01:09:22:39:44:63:eb:04:
         6f:0a:58:35:bc:0c:b7:06:1a:13:fb:49:08:1a:aa:6a:41:55:
         12:78:c5:6c:ad:64:6f:7a:94:73:28:1f:dd:28:1f:1b:20:4e:
         6f:dc:71:e0:fa:18:2e:0c:90:df:b4:6c:1d:1d:d0:2d:c6:ee:
         31:04:60:3d
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUN8LFzFy3RUTomQuLXYxUwqHhZ6cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkMxNTk3NjA3QTBDM0VBQzNFMzBDRjQ4RkYzMUJBRkQ3
MUQyRDEyMTAeFw0yNTA2MDIwMDU3NDlaFw0yNjA2MDEwMTAyNDlaMDMxMTAvBgNV
BAMTKDIxN0QyRDA5NEEyQzI4OTFCNEM3MkIyRjJFQTNERjVFMEU4OUFCRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzRqXBjjAyrKcijZPe7EDuPdP6
UyCOP9rYkYbThU73dZwCBcQt3krj85xfdhfYIkAglfnmmF23q7HKl2YppK4Z8Es0
tGz+rfPC0V28rUP1p/a6zwXmUY/uYnqlObLtj04QtzVzXTs+t2bbs1A4W0rkZwaD
IBcEEgzHyRdu0W1LbcGDqxXrF2q9vFkcCjuU5QFDlZIZiKxXcWw79fE/saZyH1Rd
gIkgXKI7bJsikMH/uUwqhX6a/T+vZ0HJa7Scsls3JHB1ECxyTmoURcRc1YxZp3OH
xUY32aDRD0kizGb2HCQWiOFLZkwT+wCPjEy8bNPrlTVvLkvezt8BO5zqv2DLAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUIX0tCUosKJG0xysvLqPfXg6Jq+8wHwYDVR0j
BBgwFoAUbBWXYHoMPqw+MM9I/zG6/XHS0SEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
NzY2ODU0MS1kNmM2LTQwOWUtOGFkMS01ZTg5YTRiMjg1MGUvMC82QzE1OTc2MDdB
MEMzRUFDM0UzMENGNDhGRjMxQkFGRDcxRDJEMTIxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkMxNTk3NjA3QTBDM0VBQzNFMzBDRjQ4RkYzMUJBRkQ3MUQy
RDEyMS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM3NjY4NTQxLWQ2YzYtNDA5ZS04
YWQxLTVlODlhNGIyODUwZS8wLzMxMzAzMzJlMzUzMDJlMzIzNzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM2MzMzODM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnMhswDQYJKoZIhvcN
AQELBQADggEBALo1SSfklBc4Ihe+OAA87xsKa7ikZ7+nGxLQvDTJe2ygWXvP/UJf
MJI9wNLWolKkVKhrQNhow7DRFw6uenBee/nUCkqBJir79Zn0oamtkwCByL5DJryf
WCdOQbuwjfznuakYP/0BzSzKhWs6XmCYIAbm65opH4m0Tq4fQs44L1WvQJDvU/8r
6LtHHREotYuUO9rACbDT2oOL7qkBzI+s/qqQARjKcmN8wbbKkXD0aRRjCvj0vmEy
v9+MjFpqM9ABCSI5RGPrBG8KWDW8DLcGGhP7SQgaqmpBVRJ4xWytZG96lHMoH90o
HxsgTm/cceD6GC4MkN+0bB0d0C3G7jEEYD0=
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:51:28 2025 by rpki-client