Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/3130332e32332e3233322e302f32342d3234203d3e203538343735.roa
File:                     3130332e32332e3233322e302f32342d3234203d3e203538343735.roa (raw, json)
Hash identifier:          2twBdEx2IXa/WYH/SthAB9XB81XlR7uh3EYXCN3+9WA=
Subject key identifier:   EF:A4:DA:BF:3A:4D:5A:68:AC:2D:8C:2F:5E:42:B8:BC:22:98:36:A5
Certificate issuer:       /CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98
Certificate serial:       6FE2A0D9CFEF0FF3F02A2F8D827710CC6B48247A
Authority key identifier: A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/3130332e32332e3233322e302f32342d3234203d3e203538343735.roa
Signing time:             Mon 02 Jun 2025 02:04:56 +0000
ROA not before:           Mon 02 Jun 2025 01:59:56 +0000
ROA not after:            Mon 01 Jun 2026 02:04:56 +0000
asID:                     58475
IP address blocks:        103.23.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl
                          rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 21:31:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e2:a0:d9:cf:ef:0f:f3:f0:2a:2f:8d:82:77:10:cc:6b:48:24:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98
        Validity
            Not Before: Jun  2 01:59:56 2025 GMT
            Not After : Jun  1 02:04:56 2026 GMT
        Subject: CN=EFA4DABF3A4D5A68AC2D8C2F5E42B8BC229836A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:91:ed:29:16:d2:6e:4e:7d:fc:75:3b:92:7a:
                    cf:67:8f:bf:2b:af:ea:85:d8:0b:11:a8:d6:54:7f:
                    3d:49:09:ee:f2:d4:72:49:f2:cf:34:15:a1:4e:e1:
                    58:09:f7:7a:e8:20:eb:bd:b3:aa:5c:6b:d5:c5:c7:
                    e8:c6:ac:9e:ae:04:4c:0c:3d:bc:bf:e7:00:84:4c:
                    a0:1c:a3:0c:8a:63:fa:f7:75:99:7a:1d:df:a2:a4:
                    95:1e:3f:ee:8b:6e:2c:cc:67:c2:01:44:c8:de:6b:
                    f0:de:b5:b7:65:9f:65:58:8d:c2:21:c6:80:a4:48:
                    dc:ad:36:13:76:31:b2:0d:be:ee:ad:62:18:94:14:
                    8a:ac:f5:88:01:eb:a2:1a:a2:0a:8e:7f:16:af:22:
                    19:43:49:4f:c2:9e:00:4e:df:2a:4f:98:71:85:a7:
                    e6:52:25:63:68:54:7d:40:73:a2:9c:40:f2:d6:40:
                    eb:ad:d4:be:69:1b:d4:67:9e:43:ae:54:f8:42:12:
                    bc:00:76:39:a5:97:17:86:61:20:c3:19:b8:7c:df:
                    2d:cb:62:2a:dd:fe:c1:0f:4a:a8:2d:85:81:eb:fe:
                    06:f2:cb:cd:49:38:fc:4b:42:4e:0f:ca:58:3c:5a:
                    6c:1a:04:57:68:d3:15:9b:a1:06:23:87:1a:23:50:
                    e8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A4:DA:BF:3A:4D:5A:68:AC:2D:8C:2F:5E:42:B8:BC:22:98:36:A5
            X509v3 Authority Key Identifier:
                keyid:A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/3130332e32332e3233322e302f32342d3234203d3e203538343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:f5:30:34:b3:b7:d0:67:5c:5c:17:7f:51:ff:3e:be:77:a3:
         2d:75:5c:d7:d0:76:59:4f:6e:1b:06:19:80:d6:d7:ea:42:e5:
         e2:75:1d:41:cb:c9:8f:98:01:ba:70:58:e0:2d:19:be:e9:b7:
         8d:fe:e8:1c:8d:c4:57:90:27:1c:5e:6a:65:92:9f:d8:54:aa:
         db:cc:45:f7:50:04:54:9c:78:ea:3c:fb:d1:c3:bc:20:0e:2d:
         b7:1f:84:71:28:fe:d9:94:b6:65:1d:b9:55:bd:fe:e6:92:93:
         c2:f3:4e:99:4c:e8:8f:6d:ff:7b:a9:6b:c3:e8:6d:ac:32:3e:
         94:67:30:32:ee:bc:43:c5:e8:89:8d:3e:64:e7:dd:27:33:b8:
         70:fd:ff:ea:7f:d0:dd:53:75:06:f4:84:2a:e0:2f:fa:02:02:
         53:85:f9:df:cb:bf:9d:65:12:99:bb:6c:cb:d1:86:fd:3f:ea:
         28:7f:0f:6d:c3:c3:df:9c:cd:cd:be:ec:90:f5:6b:75:a2:92:
         78:70:e2:ac:4e:38:d2:b2:62:76:4c:25:0f:a1:56:c4:bc:c8:
         45:1f:61:0a:de:7e:8f:e7:7f:bb:f2:3d:fa:e0:61:85:e7:39:
         f7:7a:36:e9:60:aa:ef:ec:db:bf:79:e8:8a:1e:a3:ed:40:90:
         5c:3d:c9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:45:28 2025 by rpki-client