Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/3130332e38312e36342e302f32342d3234203d3e20313336303535.roa
File:                     3130332e38312e36342e302f32342d3234203d3e20313336303535.roa (raw, json)
Hash identifier:          y3JEoAzXm85iAZbdeyBRtgaEYRsohXOZAIq9VTQKw9c=
Subject key identifier:   6D:37:68:20:93:35:DB:77:01:79:40:0D:85:1C:1B:55:4D:B7:D5:92
Certificate issuer:       /CN=A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F
Certificate serial:       57A47DE786871F7F7D09B3EDBE3ED137D4F87F42
Authority key identifier: A4:AC:49:C4:F5:5B:F5:D4:AF:3D:42:10:4A:8A:5E:C1:F2:12:3E:6F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/3130332e38312e36342e302f32342d3234203d3e20313336303535.roa
Signing time:             Tue 28 Jan 2025 04:01:30 +0000
ROA not before:           Tue 28 Jan 2025 03:56:30 +0000
ROA not after:            Tue 27 Jan 2026 04:01:30 +0000
asID:                     136055
IP address blocks:        103.81.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl
                          rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 02:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:a4:7d:e7:86:87:1f:7f:7d:09:b3:ed:be:3e:d1:37:d4:f8:7f:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F
        Validity
            Not Before: Jan 28 03:56:30 2025 GMT
            Not After : Jan 27 04:01:30 2026 GMT
        Subject: CN=6D3768209335DB770179400D851C1B554DB7D592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a4:ef:f9:8e:bf:4c:60:bb:84:b8:70:c1:e3:
                    39:aa:14:0e:ee:81:d6:03:86:49:3b:87:13:4c:60:
                    68:e4:e9:ca:e9:69:28:a0:c9:da:6d:5b:77:33:fd:
                    a0:de:b0:1c:b4:83:50:cd:4a:40:a4:f3:64:97:94:
                    2f:86:9d:e0:d3:5e:91:9a:69:4d:76:c3:1e:9e:cb:
                    ed:5f:2d:00:dc:29:67:b1:ae:0c:2b:56:94:35:f2:
                    12:7a:fd:cd:0d:f4:d1:20:52:e8:00:e0:bf:41:75:
                    36:99:cd:c3:05:41:c8:ea:59:d7:19:76:32:8a:05:
                    3d:9a:72:b7:bf:7a:db:22:a0:05:65:b6:14:4b:80:
                    65:62:b1:88:24:11:fa:2f:e1:3f:ce:c9:05:fe:d3:
                    d8:30:be:29:51:e2:ae:5b:e1:46:b7:f9:45:49:07:
                    a1:38:dd:2d:67:0f:b3:27:11:8a:b4:fd:42:0d:71:
                    8f:21:18:8b:cf:25:7e:8f:91:21:43:6e:7b:75:d5:
                    a1:01:9d:a5:c5:48:91:c2:cf:1b:e1:5f:fb:ad:02:
                    f5:0a:fc:fb:23:3a:2d:45:d1:9f:51:9c:21:36:01:
                    35:61:e3:e7:ec:b6:1f:01:09:54:dc:47:79:3d:23:
                    e0:e5:f0:db:9f:e6:60:96:4d:ec:cb:6e:08:53:a4:
                    0c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:37:68:20:93:35:DB:77:01:79:40:0D:85:1C:1B:55:4D:B7:D5:92
            X509v3 Authority Key Identifier:
                keyid:A4:AC:49:C4:F5:5B:F5:D4:AF:3D:42:10:4A:8A:5E:C1:F2:12:3E:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/3130332e38312e36342e302f32342d3234203d3e20313336303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:2b:90:90:8f:20:58:e0:0d:2c:9a:43:26:ef:1c:86:8c:61:
         c3:df:9d:f0:80:60:63:97:e9:ad:8e:83:df:28:ad:6a:dc:6f:
         bb:4a:bc:e2:44:02:56:08:4f:18:f4:be:9b:e0:49:6f:83:50:
         c3:cc:22:97:a2:92:fb:f9:8c:7c:4f:ab:d6:db:90:0e:8e:51:
         d9:d7:68:bb:35:ce:7e:55:bb:cd:6c:3e:8a:9b:3b:02:c1:a9:
         4d:38:97:f5:25:1b:54:8e:4e:fc:17:6d:18:a0:87:8c:96:3a:
         95:84:18:3c:d4:08:37:49:e1:37:2f:9d:a1:3b:00:f8:a3:24:
         00:6b:55:92:23:3e:0a:2a:6c:69:bd:4c:64:da:be:95:0c:ab:
         e7:ce:21:45:d3:b0:8f:92:03:8c:45:a3:51:d8:44:13:3d:31:
         23:4e:c3:8b:6e:e8:15:9b:0c:fa:13:8a:e9:4e:97:d4:66:22:
         cf:e0:1f:2a:49:ab:c5:7e:96:0f:5d:df:c2:df:88:50:4f:da:
         38:2a:3e:a3:ad:49:50:0e:2f:17:3a:de:ff:f1:b2:67:8d:4f:
         39:c7:59:cb:14:b5:e8:89:ef:9e:3d:4d:90:4b:f1:c1:9d:cd:
         38:2e:93:45:2a:c8:38:70:99:2c:45:61:79:68:b2:64:34:89:
         18:b4:c5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:04:20 2025 by rpki-client