Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/3130332e31392e3138332e302f32342d3234203d3e20313332363432.roa
File:                     3130332e31392e3138332e302f32342d3234203d3e20313332363432.roa (raw, json)
Hash identifier:          hpPXUQ5gypmdo+ZfR0ZPUxHpoc6PClgxO5mrZ0mqIsY=
Subject key identifier:   60:B4:50:10:75:E9:FE:B6:9F:79:C7:C9:53:D1:F2:91:32:C7:07:17
Certificate issuer:       /CN=818823B50F8D63E9D953C4B752F04DB0437CA8E9
Certificate serial:       333E70CEF724D454F88361ED9346203C795B6109
Authority key identifier: 81:88:23:B5:0F:8D:63:E9:D9:53:C4:B7:52:F0:4D:B0:43:7C:A8:E9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/3130332e31392e3138332e302f32342d3234203d3e20313332363432.roa
Signing time:             Mon 02 Jun 2025 01:02:27 +0000
ROA not before:           Mon 02 Jun 2025 00:57:27 +0000
ROA not after:            Mon 01 Jun 2026 01:02:27 +0000
asID:                     132642
IP address blocks:        103.19.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.crl
                          rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 01:36:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:3e:70:ce:f7:24:d4:54:f8:83:61:ed:93:46:20:3c:79:5b:61:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818823B50F8D63E9D953C4B752F04DB0437CA8E9
        Validity
            Not Before: Jun  2 00:57:27 2025 GMT
            Not After : Jun  1 01:02:27 2026 GMT
        Subject: CN=60B4501075E9FEB69F79C7C953D1F29132C70717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5d:df:f5:6b:43:33:d3:49:4c:68:2c:57:02:
                    74:15:ee:c5:65:22:4c:a6:db:68:39:41:2e:d9:e4:
                    5c:1d:75:b4:97:42:42:ad:e0:cd:e3:e6:3a:11:1b:
                    5b:3e:4a:29:2f:9f:16:6b:88:eb:22:8a:22:28:d0:
                    d4:1e:6b:86:32:ff:b9:7f:3f:27:61:a4:a3:3b:f5:
                    5e:9e:7e:26:f7:ee:29:7b:bf:5e:37:20:82:5f:f4:
                    10:88:be:7e:b9:f4:d3:21:c7:3d:12:e3:69:c1:9e:
                    51:fb:ab:3f:32:dc:70:ab:c1:da:ef:1f:c6:b7:bb:
                    83:41:ea:75:ed:82:96:d5:d3:ad:2f:16:ab:35:86:
                    6d:5a:9a:55:81:08:c3:fb:f4:34:2e:57:02:5d:5f:
                    c8:42:bc:2c:26:98:43:f3:ae:6b:8b:6b:b3:d3:02:
                    d5:e2:16:12:3a:5d:be:4c:7b:e4:43:88:91:42:d1:
                    1a:03:4f:4e:d7:08:fd:f6:71:f4:a9:9c:85:89:97:
                    63:53:ae:44:56:cd:99:12:50:2f:8c:07:54:31:4d:
                    6c:b2:2b:3e:f6:ea:ae:c1:93:78:cf:a5:80:4a:27:
                    49:b8:16:54:07:fd:2b:77:80:7e:13:e0:b4:a5:bc:
                    33:f8:9d:de:bd:2c:60:32:b6:c8:c9:96:ca:99:8b:
                    2b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B4:50:10:75:E9:FE:B6:9F:79:C7:C9:53:D1:F2:91:32:C7:07:17
            X509v3 Authority Key Identifier:
                keyid:81:88:23:B5:0F:8D:63:E9:D9:53:C4:B7:52:F0:4D:B0:43:7C:A8:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/3130332e31392e3138332e302f32342d3234203d3e20313332363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:62:e2:07:49:00:c6:3c:a6:3d:3c:57:f8:1b:ba:31:de:97:
         9d:91:0a:21:04:d4:1b:65:43:ff:b8:4f:e1:f7:ff:2c:68:86:
         4c:8e:7a:e8:0c:ec:c9:62:d2:0b:2e:cd:35:ac:40:84:33:21:
         67:3e:4d:2f:a0:6c:6a:06:21:fc:63:ca:29:76:4d:06:1b:0b:
         13:cb:7d:01:25:a9:9c:55:14:e3:c8:82:03:92:9b:52:8d:41:
         6e:95:6d:6a:ca:80:d7:a1:26:86:64:e4:df:6b:a8:b6:34:a2:
         82:0c:90:f6:fd:e5:71:0e:e5:00:5f:2c:58:9c:36:58:ff:99:
         60:68:47:5e:89:eb:83:d5:91:0d:f5:9a:30:68:df:9e:03:f1:
         f7:c3:18:f6:d8:f0:48:aa:14:6e:ec:30:48:d8:9c:7d:49:64:
         f9:7f:01:a4:5e:37:6b:66:74:28:ff:b6:65:d5:94:a0:1c:af:
         54:7f:53:8d:9e:a9:88:10:c1:b0:b4:9f:1a:65:97:b6:79:ab:
         2e:68:35:c0:5e:e6:e3:94:95:8d:8e:93:d2:95:dc:24:af:62:
         d4:a8:36:6d:e7:bc:32:da:20:dd:25:b6:f3:5f:b6:c1:3d:11:
         b7:e0:1a:46:0f:8c:40:f3:83:6f:e8:a5:58:47:12:d0:f2:78:
         49:42:39:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:41:36 2025 by rpki-client