Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/3130332e38312e3130302e302f32342d3234203d3e203538343735.roa
File:                     3130332e38312e3130302e302f32342d3234203d3e203538343735.roa (raw, json)
Hash identifier:          mIENuohk3umzRQDncadC8qS6i8YFvlmS0VCKjyWedT8=
Subject key identifier:   CE:B6:09:C2:E4:37:3A:7D:13:95:FE:01:31:CD:8D:CA:68:C8:14:EF
Certificate issuer:       /CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98
Certificate serial:       5B2CC0474126FE16131C157FCE80C76B5A568B29
Authority key identifier: A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/3130332e38312e3130302e302f32342d3234203d3e203538343735.roa
Signing time:             Mon 02 Jun 2025 02:04:56 +0000
ROA not before:           Mon 02 Jun 2025 01:59:56 +0000
ROA not after:            Mon 01 Jun 2026 02:04:56 +0000
asID:                     58475
IP address blocks:        103.81.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl
                          rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 21:31:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:2c:c0:47:41:26:fe:16:13:1c:15:7f:ce:80:c7:6b:5a:56:8b:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98
        Validity
            Not Before: Jun  2 01:59:56 2025 GMT
            Not After : Jun  1 02:04:56 2026 GMT
        Subject: CN=CEB609C2E4373A7D1395FE0131CD8DCA68C814EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6d:f2:61:91:54:ab:40:d4:22:33:16:92:46:
                    9a:2c:10:00:18:3f:6a:90:b9:0b:a3:18:6b:c0:a7:
                    f8:b2:30:d6:16:4b:3a:ef:8f:ac:ab:cd:13:cc:e0:
                    57:65:d3:42:09:57:b0:31:ab:ee:95:76:12:6b:95:
                    44:ff:21:3e:3a:1b:3e:38:f4:6c:9c:0f:32:16:47:
                    8a:c2:7f:51:58:c7:10:a0:38:1c:cc:0b:45:0f:53:
                    a7:59:72:00:d0:de:26:f6:03:e3:f1:cf:24:ae:1a:
                    18:16:50:79:2e:0a:7e:f5:15:26:54:59:1c:98:ad:
                    20:20:ac:49:92:14:ac:4e:ea:7f:b7:1b:7b:23:71:
                    de:30:e3:0f:bf:0d:c0:e5:dd:54:3d:a7:99:95:b6:
                    2b:34:95:8e:02:0c:91:18:c3:6a:b5:b5:20:64:8c:
                    84:e2:86:f7:ed:21:28:0c:b5:73:3d:c8:ce:b0:25:
                    19:ac:3e:fd:09:19:c2:fa:4f:d0:21:87:07:42:2d:
                    cd:a5:00:cb:ae:ca:70:9f:40:61:06:88:33:ed:25:
                    df:50:a4:c8:63:a6:50:29:60:e1:5f:72:19:51:5a:
                    59:b8:c4:04:ba:da:28:5d:d1:76:24:40:ca:ad:12:
                    8c:c7:ed:51:3d:9b:e7:df:97:b3:e8:91:01:27:30:
                    41:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B6:09:C2:E4:37:3A:7D:13:95:FE:01:31:CD:8D:CA:68:C8:14:EF
            X509v3 Authority Key Identifier:
                keyid:A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/3130332e38312e3130302e302f32342d3234203d3e203538343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:57:80:c4:08:2e:c8:f2:e0:3c:24:bd:f1:95:22:fe:23:21:
         f3:4e:8c:18:0c:48:71:12:e2:14:2c:79:b6:a3:b9:f4:9c:55:
         ef:44:38:ac:43:77:41:89:81:e9:f3:9d:f8:8e:44:b0:94:ad:
         20:78:4e:ff:ef:5a:c9:82:07:02:9a:73:13:af:fe:c9:21:5a:
         d5:71:62:aa:bd:13:ea:fc:db:fc:56:6e:04:b5:f7:4c:62:1e:
         34:0b:7c:fe:ac:a0:d7:57:57:c4:d1:46:7d:d3:01:a8:1e:dc:
         7c:a2:cb:fb:b0:b6:b2:7f:63:fc:34:19:21:3c:f9:8a:ac:25:
         84:5c:8e:60:f4:c9:10:c8:7c:21:91:b6:37:2b:ea:08:fc:2f:
         50:5a:04:d9:54:79:33:92:45:a9:74:ee:dd:77:4a:1f:f6:01:
         54:fe:df:2c:4b:0f:57:77:7b:da:10:4f:10:3f:c1:44:fe:97:
         b1:a9:ca:3b:a6:79:06:dd:65:4a:a5:ec:10:d9:9e:5e:c9:92:
         19:01:23:0f:ac:a0:2f:7c:16:ed:52:d8:11:bc:9c:60:5b:90:
         09:20:e8:8c:20:be:18:b0:d4:32:e3:21:f4:1c:0b:2f:6f:3d:
         93:e9:15:1b:54:67:f5:2f:36:43:c5:2b:4c:4f:bf:d3:31:e5:
         e6:ee:06:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:17:35 2025 by rpki-client