Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/3130332e3134342e35342e302f32332d3233203d3e20313339343139.roa
File:                     3130332e3134342e35342e302f32332d3233203d3e20313339343139.roa (raw, json)
Hash identifier:          xsHtPC0twOAvhdTcGQCC9MWMZnDVbfTtrjCs4k/py0U=
Subject key identifier:   99:67:E6:78:42:AC:98:C2:90:99:C8:16:81:B6:96:19:64:AE:21:75
Certificate issuer:       /CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E
Certificate serial:       0D3BDAE6BFF31DC00F2F0BDC7E4F2C3E2BED36A8
Authority key identifier: 48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/3130332e3134342e35342e302f32332d3233203d3e20313339343139.roa
Signing time:             Fri 16 May 2025 14:00:00 +0000
ROA not before:           Fri 16 May 2025 13:55:00 +0000
ROA not after:            Fri 15 May 2026 14:00:00 +0000
asID:                     139419
IP address blocks:        103.144.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl
                          rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Jun 2025 02:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:3b:da:e6:bf:f3:1d:c0:0f:2f:0b:dc:7e:4f:2c:3e:2b:ed:36:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E
        Validity
            Not Before: May 16 13:55:00 2025 GMT
            Not After : May 15 14:00:00 2026 GMT
        Subject: CN=9967E67842AC98C29099C81681B6961964AE2175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c6:c1:8b:58:df:a2:28:62:92:02:91:54:55:
                    75:b5:6e:f1:0c:d8:f6:13:40:b9:5f:25:13:32:c8:
                    62:e3:02:ec:40:b0:f8:8d:e6:9d:29:4d:12:d7:dd:
                    7a:97:b4:45:19:c6:1e:2a:21:10:5b:32:3c:52:67:
                    1f:3a:f9:fa:5b:b1:4e:9a:27:d5:13:cd:ca:8e:91:
                    c7:8e:0d:ed:28:9d:fa:b1:35:df:e4:dd:d1:d0:e9:
                    f6:8f:a8:7d:22:a6:32:c5:f4:a6:0b:8f:58:57:62:
                    4d:e6:15:0c:1e:c0:16:40:63:fa:35:4d:51:ab:5c:
                    23:c1:b5:5a:54:cc:13:f9:a3:55:90:0e:fe:fc:c4:
                    b0:43:52:3a:10:06:e5:41:1a:86:3e:81:85:68:e2:
                    87:f8:50:39:f1:44:0f:44:8a:35:58:c2:8b:35:77:
                    71:51:f6:42:5e:47:a5:db:5c:ce:08:58:bf:7f:0d:
                    ea:83:69:b7:f8:7e:74:5d:41:79:e3:6f:7f:13:0d:
                    7d:ca:68:b4:32:2b:67:14:9c:cd:6c:df:4b:b8:47:
                    de:01:3b:f7:a8:d6:33:f5:3c:62:31:33:f3:8c:c3:
                    6a:3f:cc:d3:a3:51:5a:db:6f:e5:93:35:b8:51:d8:
                    dc:47:22:e3:f9:82:b5:fa:54:ce:02:22:8d:64:9b:
                    68:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:67:E6:78:42:AC:98:C2:90:99:C8:16:81:B6:96:19:64:AE:21:75
            X509v3 Authority Key Identifier:
                keyid:48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/3130332e3134342e35342e302f32332d3233203d3e20313339343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:6c:87:e8:86:d6:3c:a5:24:8f:d5:3e:8c:62:8f:f4:31:28:
         d8:06:cf:76:15:e2:a3:64:2a:78:70:e2:aa:f9:79:e5:34:27:
         83:24:73:5c:ca:7d:93:00:df:db:78:de:3d:de:11:a7:66:ad:
         23:72:30:46:2e:88:d9:34:c8:6f:4a:ae:8a:2d:05:43:67:74:
         7f:1a:47:ea:10:2f:cf:03:00:31:b5:16:d5:1d:31:3b:fe:c1:
         29:a3:1c:ec:6f:8c:66:ee:0b:96:0e:59:fc:38:5f:de:fe:95:
         f1:93:75:5a:a0:59:7f:79:34:f4:34:7d:67:37:da:bc:a9:8f:
         ac:06:a7:6d:15:29:b8:a0:28:10:82:77:1f:29:52:a3:11:f6:
         60:76:7a:f7:21:28:25:8d:51:00:a4:75:eb:91:92:58:ed:4c:
         8f:df:42:f8:ed:c3:71:be:97:1c:c8:73:86:ad:a8:b8:ea:fe:
         66:a7:84:c7:91:51:ca:2b:e3:e5:50:f9:31:bc:44:0c:fe:09:
         27:62:a5:76:fa:9c:5c:05:03:72:fd:e0:62:b2:ef:9c:18:39:
         6f:d3:e9:56:70:cc:fb:2f:a4:db:e9:3e:61:17:6c:b8:03:c3:
         6c:09:77:18:1f:b6:73:b2:4c:8e:19:7d:e2:2a:fd:b9:63:05:
         aa:bf:76:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:41:13 2025 by rpki-client