Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31312e33312e302f32342d3234203d3e203538353532.roa
File:                     3130332e31312e33312e302f32342d3234203d3e203538353532.roa (raw, json)
Hash identifier:          tV+T+XPyIJMfOvfBKnBHOhpYm1xtbd6pTA13zlO4NLI=
Subject key identifier:   1E:52:E0:7B:A9:32:15:41:6B:48:F7:3B:C3:CC:23:9C:FC:B6:55:27
Certificate issuer:       /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6
Certificate serial:       54B7A33C13B6FCE40BB9CE99BE56973AC9303734
Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31312e33312e302f32342d3234203d3e203538353532.roa
Signing time:             Mon 02 Jun 2025 01:03:11 +0000
ROA not before:           Mon 02 Jun 2025 00:58:11 +0000
ROA not after:            Mon 01 Jun 2026 01:03:11 +0000
asID:                     58552
IP address blocks:        103.11.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl
                          rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 07:29:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:b7:a3:3c:13:b6:fc:e4:0b:b9:ce:99:be:56:97:3a:c9:30:37:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6
        Validity
            Not Before: Jun  2 00:58:11 2025 GMT
            Not After : Jun  1 01:03:11 2026 GMT
        Subject: CN=1E52E07BA93215416B48F73BC3CC239CFCB65527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:9e:88:91:cd:8d:94:78:91:44:8d:86:01:c6:
                    a6:8e:71:bf:73:e4:1a:cd:30:0e:5e:18:3b:19:17:
                    c4:fd:a1:96:85:40:e1:1e:4e:68:94:88:b4:83:58:
                    43:e9:57:1c:fc:8b:25:ec:78:65:ea:33:45:6d:fd:
                    db:c0:61:83:79:bd:b6:f2:02:c6:c1:e3:c6:77:63:
                    e4:2a:6e:cb:eb:7f:ae:a3:45:a9:af:f3:6c:6a:76:
                    75:a8:7f:f3:b2:79:5c:6f:ab:6c:e4:32:4d:7e:4a:
                    ef:00:ff:ed:c0:af:56:d7:d7:6d:c3:10:0c:a0:26:
                    a4:e7:23:8b:d3:d1:e1:d0:a7:3a:1f:67:f3:88:21:
                    ec:b3:60:5b:bc:f8:8d:62:9a:61:14:8f:5d:96:d2:
                    f5:3e:f8:65:b7:67:c3:06:ea:4e:be:32:d5:9a:57:
                    be:26:ec:d8:3c:25:3b:1f:4f:23:6e:7e:7d:c8:7d:
                    db:de:b3:2b:d3:7f:58:45:26:5c:c4:41:d4:06:9c:
                    0d:7d:db:f3:a9:33:af:77:e2:aa:6e:ef:7c:f0:af:
                    1f:b3:2e:2f:f0:9f:1f:24:60:fd:a5:fa:f4:95:76:
                    ad:fe:42:ef:26:e6:f1:48:df:c6:1a:26:6f:1a:ae:
                    21:fe:f3:61:bf:04:62:e6:b9:ff:ef:b7:af:41:d6:
                    18:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:52:E0:7B:A9:32:15:41:6B:48:F7:3B:C3:CC:23:9C:FC:B6:55:27
            X509v3 Authority Key Identifier:
                keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31312e33312e302f32342d3234203d3e203538353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:f8:0c:2e:2c:75:a9:af:a4:de:d0:4a:62:65:57:04:c5:48:
         56:9b:e0:1e:5a:a8:5d:1f:50:a9:33:9d:39:a7:2d:03:67:55:
         a8:9a:c7:fa:d9:41:46:63:8f:02:fd:82:7e:d6:33:cd:26:d4:
         6a:e1:10:6d:59:19:27:d3:68:49:e2:7b:ac:a3:ef:4b:76:dc:
         17:ef:6e:93:ac:ee:b0:1a:51:bc:e1:73:9e:ff:77:5d:e8:95:
         dc:b9:ba:83:ea:09:c7:ef:de:e3:3f:ea:21:7e:f1:06:26:99:
         64:b3:40:f5:e8:9a:33:94:6f:26:e8:23:f7:ec:14:3f:d3:9b:
         e9:6e:4b:8c:a8:5d:27:d3:f4:b5:90:f3:fa:45:e5:a6:05:97:
         9e:ce:02:76:5a:2d:88:84:89:30:af:5a:e7:07:c0:a3:c5:af:
         5d:a2:5e:01:ad:f3:5e:93:61:70:6c:39:89:d1:c3:7a:6e:83:
         83:52:be:8c:5d:b8:54:54:8d:8f:79:a1:ef:1c:e5:d9:e0:da:
         01:ea:8c:f6:f4:e7:0c:8a:3e:16:a0:15:9e:15:c7:7a:33:3b:
         b7:ba:32:7f:fb:2e:07:c7:15:bd:43:c6:c3:d9:b4:be:a7:9e:
         00:88:49:ae:a9:cf:6e:f7:7e:30:c7:8f:e2:39:cb:ec:8f:f0:
         65:08:96:09
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUVLejPBO2/OQLuc6ZvlaXOskwNzQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FF
NEQ1RkRFNjAeFw0yNTA2MDIwMDU4MTFaFw0yNjA2MDEwMTAzMTFaMDMxMTAvBgNV
BAMTKDFFNTJFMDdCQTkzMjE1NDE2QjQ4RjczQkMzQ0MyMzlDRkNCNjU1MjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmnoiRzY2UeJFEjYYBxqaOcb9z
5BrNMA5eGDsZF8T9oZaFQOEeTmiUiLSDWEPpVxz8iyXseGXqM0Vt/dvAYYN5vbby
AsbB48Z3Y+Qqbsvrf66jRamv82xqdnWof/OyeVxvq2zkMk1+Su8A/+3Ar1bX123D
EAygJqTnI4vT0eHQpzofZ/OIIeyzYFu8+I1immEUj12W0vU++GW3Z8MG6k6+MtWa
V74m7Ng8JTsfTyNufn3IfdvesyvTf1hFJlzEQdQGnA192/OpM6934qpu73zwrx+z
Li/wnx8kYP2l+vSVdq3+Qu8m5vFI38YaJm8ariH+82G/BGLmuf/vt69B1hifAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUHlLge6kyFUFrSPc7w8wjnPy2VScwHwYDVR0j
BBgwFoAUr0tY1LFlMLn2kZ2/T1PcOuTV/eYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
ZDIyN2RiZS00YTFjLTQwYjAtOTRhNi03OTNiZGJkYTM3NzcvMC9BRjRCNThENEIx
NjUzMEI5RjY5MTlEQkY0RjUzREMzQUU0RDVGREU2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FFNEQ1
RkRFNi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05
NGE2LTc5M2JkYmRhMzc3Ny8wLzMxMzAzMzJlMzEzMTJlMzMzMTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM1MzgzNTM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnCx8wDQYJKoZIhvcN
AQELBQADggEBAB/4DC4sdamvpN7QSmJlVwTFSFab4B5aqF0fUKkznTmnLQNnVaia
x/rZQUZjjwL9gn7WM80m1GrhEG1ZGSfTaEnie6yj70t23BfvbpOs7rAaUbzhc57/
d13oldy5uoPqCcfv3uM/6iF+8QYmmWSzQPXomjOUbyboI/fsFD/Tm+luS4yoXSfT
9LWQ8/pF5aYFl57OAnZaLYiEiTCvWucHwKPFr12iXgGt816TYXBsOYnRw3pug4NS
voxduFRUjY95oe8c5dng2gHqjPb05wyKPhagFZ4Vx3ozO7e6Mn/7LgfHFb1DxsPZ
tL6nngCISa6pz273fjDHj+I5y+yP8GUIlgk=
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:53:28 2025 by rpki-client