Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/3130332e38312e36372e302f32342d3234203d3e20313336303535.roa
File:                     3130332e38312e36372e302f32342d3234203d3e20313336303535.roa (raw, json)
Hash identifier:          H8auSRebds2J33fqyI35g62j14OOISp/2tVGTFdwJS4=
Subject key identifier:   A1:67:65:49:50:43:25:37:F0:1D:AC:82:6A:50:52:0C:29:54:B4:8B
Certificate issuer:       /CN=A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F
Certificate serial:       5751A41AE3A36F42F54CE89CC99AA274E1EC6210
Authority key identifier: A4:AC:49:C4:F5:5B:F5:D4:AF:3D:42:10:4A:8A:5E:C1:F2:12:3E:6F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/3130332e38312e36372e302f32342d3234203d3e20313336303535.roa
Signing time:             Tue 28 Jan 2025 04:01:31 +0000
ROA not before:           Tue 28 Jan 2025 03:56:31 +0000
ROA not after:            Tue 27 Jan 2026 04:01:31 +0000
asID:                     136055
IP address blocks:        103.81.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl
                          rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 02:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:51:a4:1a:e3:a3:6f:42:f5:4c:e8:9c:c9:9a:a2:74:e1:ec:62:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F
        Validity
            Not Before: Jan 28 03:56:31 2025 GMT
            Not After : Jan 27 04:01:31 2026 GMT
        Subject: CN=A167654950432537F01DAC826A50520C2954B48B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4d:e5:e0:6d:40:ec:74:47:19:2e:f5:2c:0f:
                    ae:12:83:cc:77:dd:e8:03:8e:10:ac:51:ff:53:8f:
                    3d:e3:5c:ab:21:52:23:bf:98:46:e3:1f:0b:6f:67:
                    67:e3:ed:9f:31:c5:11:44:0f:69:0c:93:4d:87:72:
                    7e:bd:e7:83:70:23:5b:83:ed:a3:1f:76:26:b6:7e:
                    4b:f7:e8:56:21:43:d8:bc:21:72:3f:3f:b4:96:be:
                    0b:62:06:73:e7:33:ef:44:39:20:0f:6c:5e:99:85:
                    c0:7a:8d:55:0e:d9:e5:81:30:88:57:aa:55:19:8d:
                    c1:e6:6f:c4:b9:5f:62:f0:c5:c0:16:c2:27:4a:de:
                    1d:50:e4:f3:f1:32:c1:7a:48:5f:77:f7:cf:c4:46:
                    4e:3a:22:35:e1:24:28:15:c8:ca:fc:74:c2:34:88:
                    d7:ef:14:d7:0f:19:e7:fc:31:72:27:83:02:45:0e:
                    b0:2d:71:c3:ec:10:77:9e:36:23:26:5c:95:34:1b:
                    98:52:57:aa:71:a2:8c:cd:b1:09:60:e2:2b:a4:87:
                    4d:5d:58:7f:50:0b:60:85:d1:b8:4d:bf:30:95:b0:
                    5f:80:18:b6:bc:5c:ea:d4:3d:85:c9:35:e2:68:8e:
                    76:f2:43:aa:71:9e:2a:ed:8b:fa:92:02:db:38:e8:
                    b7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:67:65:49:50:43:25:37:F0:1D:AC:82:6A:50:52:0C:29:54:B4:8B
            X509v3 Authority Key Identifier:
                keyid:A4:AC:49:C4:F5:5B:F5:D4:AF:3D:42:10:4A:8A:5E:C1:F2:12:3E:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/3130332e38312e36372e302f32342d3234203d3e20313336303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:2a:2b:da:23:51:fe:37:52:fd:fe:c8:6b:07:2a:bd:42:2a:
         e9:19:3e:6d:4f:86:8a:f3:c0:31:5e:9c:a1:0f:f9:ea:5f:a9:
         0f:fb:4a:61:eb:97:96:37:08:eb:5c:b7:1f:c5:38:99:24:08:
         07:dc:fd:de:26:f2:51:94:ac:0a:46:db:84:14:d9:07:34:a6:
         79:a8:5f:1f:4b:f6:ec:aa:0d:0b:75:64:88:63:4a:2e:b8:bb:
         54:a3:81:25:78:ec:75:c4:44:ea:d5:de:8c:80:dc:60:f4:51:
         56:ee:a9:1e:39:5c:8e:cc:11:8a:6f:21:4d:75:fa:42:ff:45:
         c8:53:01:32:c8:2c:5b:31:a1:48:77:05:bf:fc:e4:05:f3:5e:
         27:6f:d1:58:e5:58:f8:93:d4:4f:20:ab:ca:1a:db:c1:a3:96:
         7e:88:ab:82:5e:88:eb:5d:cd:33:4e:61:16:a0:8a:c5:ef:59:
         4b:21:c6:45:7a:8a:83:7f:a3:67:c0:d6:d2:84:dd:cf:e8:1c:
         38:a1:17:e0:9a:91:87:96:0d:ee:23:9b:57:af:00:39:0d:80:
         ae:db:27:a0:0e:18:ac:61:8b:36:46:93:90:09:40:3d:ea:39:
         4f:83:e3:38:c4:49:51:d4:e6:10:70:c7:b9:36:30:a0:e1:47:
         74:47:75:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:57:30 2025 by rpki-client