Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/3130332e32372e3139332e302f32342d3234203d3e20313530323632.roa
File:                     3130332e32372e3139332e302f32342d3234203d3e20313530323632.roa (raw, json)
Hash identifier:          DIKWNEryKaLoYGYF33QjHgw88mY9IHI7dTm6jY/RF2g=
Subject key identifier:   90:53:CD:A1:8F:94:4B:AB:14:0A:10:DF:90:7F:C2:D8:73:90:AB:D9
Certificate issuer:       /CN=7DA5F7B42931EE3A414B9A5B7996703DF70BD897
Certificate serial:       6981A41A79F0FD27B35CD6CA2EDB61957268FC2A
Authority key identifier: 7D:A5:F7:B4:29:31:EE:3A:41:4B:9A:5B:79:96:70:3D:F7:0B:D8:97
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/3130332e32372e3139332e302f32342d3234203d3e20313530323632.roa
Signing time:             Wed 12 Mar 2025 10:00:03 +0000
ROA not before:           Wed 12 Mar 2025 09:55:03 +0000
ROA not after:            Wed 11 Mar 2026 10:00:03 +0000
asID:                     150262
IP address blocks:        103.27.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.crl
                          rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 04:59:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:81:a4:1a:79:f0:fd:27:b3:5c:d6:ca:2e:db:61:95:72:68:fc:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DA5F7B42931EE3A414B9A5B7996703DF70BD897
        Validity
            Not Before: Mar 12 09:55:03 2025 GMT
            Not After : Mar 11 10:00:03 2026 GMT
        Subject: CN=9053CDA18F944BAB140A10DF907FC2D87390ABD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:23:7b:a5:e7:93:85:c8:d3:c0:3b:58:15:12:
                    e9:8b:a4:e3:fb:cb:a1:21:23:ff:18:4e:4d:89:3a:
                    3c:a8:f8:75:97:53:ab:33:99:dc:54:06:bb:9c:d4:
                    61:e2:ea:05:4a:54:69:63:d4:ca:b9:bb:aa:c0:45:
                    cc:6f:ba:03:a4:f6:c4:c8:fd:26:73:7b:fb:73:46:
                    9f:e3:02:05:5c:30:6e:6a:b3:82:d0:61:14:5d:84:
                    cf:22:9a:50:fc:a6:85:50:5c:6c:49:88:f1:5a:ee:
                    e4:ee:63:e3:a4:38:0b:98:b5:ff:cf:ac:fd:11:35:
                    ea:1d:00:62:a4:fc:f2:5c:8b:c5:b5:19:0a:bf:f6:
                    7a:15:0d:3a:66:3d:38:9c:cf:db:2f:7a:1e:0f:06:
                    a7:8f:a4:f3:16:a5:c0:71:5b:7b:11:38:31:2d:3c:
                    9e:c6:de:10:1f:ef:b8:fd:9d:21:6a:c1:74:f2:88:
                    69:b4:30:a5:61:1a:cd:72:30:7f:66:0e:1a:7a:6f:
                    f3:97:ad:14:c1:7a:ef:fb:a3:b5:90:48:ce:19:8f:
                    64:22:7e:a0:58:21:f8:e6:9d:c6:47:90:f8:d9:04:
                    ee:59:6a:91:54:e9:06:d8:84:9d:1f:e4:2d:46:8e:
                    4e:53:89:1d:8e:20:10:11:0f:bf:ec:86:f0:63:d9:
                    9e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:53:CD:A1:8F:94:4B:AB:14:0A:10:DF:90:7F:C2:D8:73:90:AB:D9
            X509v3 Authority Key Identifier:
                keyid:7D:A5:F7:B4:29:31:EE:3A:41:4B:9A:5B:79:96:70:3D:F7:0B:D8:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/3130332e32372e3139332e302f32342d3234203d3e20313530323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.27.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:b5:2a:df:de:b2:d2:b3:fb:dc:ec:3f:a7:85:b2:75:c7:3a:
         45:dc:07:d8:b5:48:31:a3:10:1a:01:85:cb:6d:85:75:4e:4d:
         c1:29:4b:ee:1f:bf:ba:a3:f9:8c:a4:2e:d9:76:57:d1:c3:0d:
         ac:03:d6:e0:be:ab:51:a8:f0:62:8e:3e:bb:84:d2:78:42:b1:
         bc:21:81:60:37:70:26:e7:d3:2f:37:06:04:b9:07:41:0b:05:
         ed:ab:40:60:7b:b6:9b:9d:99:62:b2:23:e2:94:15:c4:24:4d:
         8f:08:ef:de:e3:51:ae:29:58:9f:cb:68:95:29:dd:d5:59:16:
         3a:86:43:c9:d2:8a:bd:6c:f2:41:8f:28:ca:62:22:47:34:71:
         2f:d0:b1:7c:56:e6:00:18:cb:49:e6:db:8a:2c:09:9c:da:dd:
         b3:bb:06:a2:44:e7:d5:ca:ea:42:70:47:ce:dd:43:01:4d:9f:
         fb:60:f6:2d:b2:ed:9c:ac:a7:ee:b5:e3:4d:89:b3:b1:77:df:
         0c:09:0b:c6:03:3b:57:a2:82:7d:33:6b:5d:8d:eb:95:4c:09:
         a8:07:58:8b:1c:6e:d2:a9:48:73:56:c8:49:dc:9c:97:00:2d:
         89:e4:26:6a:b1:36:43:ff:de:12:01:3d:fb:00:f0:1b:e4:f0:
         25:55:d3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:41:32 2025 by rpki-client