Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/3130332e38312e36352e302f32342d3234203d3e20313336303535.roa
File:                     3130332e38312e36352e302f32342d3234203d3e20313336303535.roa (raw, json)
Hash identifier:          Pd8St+ikqWO1fGrUN5HXXiSM76VpvJPSZDK4vFya57U=
Subject key identifier:   34:C9:27:90:98:2F:47:80:4E:DD:71:61:64:BD:D4:DA:8C:BB:B1:6D
Certificate issuer:       /CN=A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F
Certificate serial:       0E4E2095AE50FC28C0326901DF0EDF85A2B5EF20
Authority key identifier: A4:AC:49:C4:F5:5B:F5:D4:AF:3D:42:10:4A:8A:5E:C1:F2:12:3E:6F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/3130332e38312e36352e302f32342d3234203d3e20313336303535.roa
Signing time:             Tue 28 Jan 2025 04:01:30 +0000
ROA not before:           Tue 28 Jan 2025 03:56:30 +0000
ROA not after:            Tue 27 Jan 2026 04:01:30 +0000
asID:                     136055
IP address blocks:        103.81.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl
                          rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 02:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:4e:20:95:ae:50:fc:28:c0:32:69:01:df:0e:df:85:a2:b5:ef:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F
        Validity
            Not Before: Jan 28 03:56:30 2025 GMT
            Not After : Jan 27 04:01:30 2026 GMT
        Subject: CN=34C92790982F47804EDD716164BDD4DA8CBBB16D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b8:21:aa:68:af:35:8e:86:56:e8:88:72:14:
                    1b:07:9e:77:14:9c:10:b5:fd:9f:5a:bb:56:45:65:
                    1f:86:66:e5:3d:c8:6e:7a:3d:d8:dc:31:9b:9e:c7:
                    7f:9c:8d:f7:4a:92:6c:8b:8f:d9:df:f0:2f:6b:60:
                    be:2e:61:67:8f:c1:14:38:33:b2:e2:ae:5e:43:49:
                    52:f5:bc:b2:de:1c:be:bc:7c:bf:34:86:ae:73:c2:
                    90:f4:47:de:9f:d6:1d:da:82:9e:cd:2a:9a:ed:11:
                    ad:dd:4f:e0:38:58:40:8a:e3:22:8e:20:6c:23:79:
                    a4:a4:4b:b0:2e:5c:ca:5a:c4:15:ae:45:61:6f:72:
                    cb:31:ab:6a:fd:0b:35:29:24:92:e0:ef:f5:ff:35:
                    55:53:9d:6f:20:ad:ee:55:1b:f8:a7:b5:29:b4:64:
                    21:ab:23:0d:15:0c:5d:a8:6a:8f:b0:2a:b9:be:af:
                    d4:1e:69:98:e7:49:ef:41:6b:94:12:a3:75:6c:22:
                    29:59:f0:4d:2a:6d:3b:95:e4:e9:d2:a2:d9:e1:cd:
                    90:d7:7b:cb:71:9e:dd:a7:ca:3e:43:a4:e9:04:b0:
                    fa:00:7d:26:9e:c0:7f:7e:97:0c:88:89:62:aa:0d:
                    73:a4:8f:4f:b1:ab:2e:6b:18:d3:d9:b8:78:bb:bd:
                    16:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C9:27:90:98:2F:47:80:4E:DD:71:61:64:BD:D4:DA:8C:BB:B1:6D
            X509v3 Authority Key Identifier:
                keyid:A4:AC:49:C4:F5:5B:F5:D4:AF:3D:42:10:4A:8A:5E:C1:F2:12:3E:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/3130332e38312e36352e302f32342d3234203d3e20313336303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:cb:4a:15:c4:ab:d1:46:5f:07:e4:98:1d:b6:6f:76:d5:c2:
         b8:ff:c1:66:5d:0d:1c:2e:68:fa:54:21:a4:0c:4a:9d:fa:a6:
         87:1f:1f:30:67:79:61:1f:29:18:0c:a5:bc:a8:a2:0b:0c:a2:
         61:c7:34:8d:4c:b0:8a:24:32:b6:86:03:47:96:6f:68:bb:a6:
         ae:f9:a3:52:80:9b:1d:9c:0a:95:70:31:0f:bc:6f:26:e6:7f:
         f9:35:e5:07:06:8c:89:66:69:5e:1c:6c:49:16:4a:c9:66:63:
         a5:53:a7:80:cf:03:da:25:01:45:1c:e7:1c:2f:91:d3:2b:91:
         62:2f:e8:6b:2c:a8:44:16:a8:cd:66:25:88:90:6a:60:59:3a:
         91:0b:a1:65:1e:9b:fc:e0:1e:97:41:aa:7c:ee:f9:c4:03:eb:
         c9:71:17:99:64:c0:dd:85:1d:58:cd:0c:1e:67:91:c2:ff:5d:
         db:0d:46:c2:c9:4b:d5:79:bd:fa:fc:29:a1:0f:d8:1b:c8:9c:
         51:b0:e5:67:0e:73:f1:e1:42:71:47:56:40:8e:af:f1:47:8b:
         1f:76:fd:ae:8d:b9:36:d8:3c:54:8c:b0:5e:04:e6:01:2b:a1:
         45:6f:08:4a:55:2b:4c:ba:b8:21:37:36:24:c9:22:86:35:95:
         47:1b:66:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:53:26 2025 by rpki-client