Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3130332e3138342e35302e302f32332d3234203d3e20313439363732.roa
File:                     3130332e3138342e35302e302f32332d3234203d3e20313439363732.roa (raw, json)
Hash identifier:          wmIuzk0Oh9311GQSErNLF7rj7zFPZyoKari4za10W8M=
Subject key identifier:   5B:76:93:96:9D:6D:60:89:EC:4B:56:DD:F9:C4:98:BF:81:7E:A5:5D
Certificate issuer:       /CN=64285236074D6BC2BB384B2D544C7F545C16CF31
Certificate serial:       557936A916F1DD3FECC4ADA4460AAB16E0686310
Authority key identifier: 64:28:52:36:07:4D:6B:C2:BB:38:4B:2D:54:4C:7F:54:5C:16:CF:31
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64285236074D6BC2BB384B2D544C7F545C16CF31.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3130332e3138342e35302e302f32332d3234203d3e20313439363732.roa
Signing time:             Thu 13 Mar 2025 10:00:38 +0000
ROA not before:           Thu 13 Mar 2025 09:55:38 +0000
ROA not after:            Thu 12 Mar 2026 10:00:38 +0000
asID:                     149672
IP address blocks:        103.184.50.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.crl
                          rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64285236074D6BC2BB384B2D544C7F545C16CF31.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 10:37:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:79:36:a9:16:f1:dd:3f:ec:c4:ad:a4:46:0a:ab:16:e0:68:63:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64285236074D6BC2BB384B2D544C7F545C16CF31
        Validity
            Not Before: Mar 13 09:55:38 2025 GMT
            Not After : Mar 12 10:00:38 2026 GMT
        Subject: CN=5B7693969D6D6089EC4B56DDF9C498BF817EA55D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ff:d9:f2:a3:78:26:79:62:b1:f3:8a:74:bb:
                    3a:f3:a2:7a:ba:ae:28:0b:95:89:25:38:a1:6a:29:
                    23:24:3c:fe:71:7b:27:c4:99:58:aa:9b:da:52:cb:
                    6b:a7:c0:ed:29:3b:9b:69:99:f6:de:fc:f2:e6:76:
                    27:ea:03:ee:4a:03:6b:28:1b:02:c6:50:4a:d6:dc:
                    a8:cb:79:1a:4d:e6:02:a9:bd:5c:b0:bd:e0:b9:70:
                    ee:27:d3:c0:d3:bd:7a:f7:8b:8d:92:ca:49:0e:4e:
                    60:2a:97:41:72:a0:a0:76:50:e8:41:8e:d1:89:5c:
                    f7:7c:86:ca:b0:04:9e:88:2a:ac:ff:ca:a0:dd:e4:
                    4e:66:32:f5:4b:9c:59:9d:ea:8a:a9:07:90:dc:44:
                    22:4e:79:c1:c7:b6:47:3c:22:3d:88:f3:ae:3c:b4:
                    49:cb:92:19:82:e1:ca:d5:e4:2c:31:48:bb:89:ba:
                    63:1b:0a:c9:66:3f:9f:08:ec:7c:9e:cd:10:e1:4a:
                    e9:6e:28:da:e8:08:15:85:8f:9c:d2:95:01:3c:4c:
                    4e:c3:a3:c5:f0:2f:f4:fe:e0:59:93:2b:27:a1:7f:
                    c6:bb:77:33:dd:c3:e0:64:06:57:b4:0b:8c:6c:16:
                    5d:ba:b6:81:ba:50:a9:46:af:ae:ff:ff:6e:22:09:
                    17:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:76:93:96:9D:6D:60:89:EC:4B:56:DD:F9:C4:98:BF:81:7E:A5:5D
            X509v3 Authority Key Identifier:
                keyid:64:28:52:36:07:4D:6B:C2:BB:38:4B:2D:54:4C:7F:54:5C:16:CF:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64285236074D6BC2BB384B2D544C7F545C16CF31.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3130332e3138342e35302e302f32332d3234203d3e20313439363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:dc:95:c6:35:28:69:94:b3:ac:91:e3:55:61:f6:53:55:9e:
         92:ca:1b:07:53:77:19:53:d6:50:87:f6:23:e4:34:d0:a9:2f:
         93:35:b2:44:a2:bb:98:e0:66:e1:69:cf:06:92:50:c0:ba:16:
         14:d0:20:25:b4:4a:9f:36:52:18:5a:49:7c:4e:50:72:48:a1:
         32:e7:0f:ff:10:72:ae:60:93:d9:95:6a:0f:35:e2:23:13:9a:
         2a:53:f4:1f:52:1b:68:e5:d4:6a:f2:f1:1c:31:bd:2a:1d:96:
         ea:ea:c1:6c:02:53:ed:05:76:05:9b:dd:b4:ad:31:3d:4e:e2:
         7a:95:2f:b9:e0:7f:78:4b:84:f5:45:55:42:ce:8b:c2:9b:8f:
         34:45:64:8a:dd:d6:66:0d:1f:a3:c5:88:ff:16:0d:39:2c:f7:
         9e:15:3a:8d:fc:04:b5:7c:ed:60:8e:35:45:d7:2e:c2:20:3e:
         e5:6a:fd:f2:2d:89:3e:52:b7:54:d4:02:ef:70:b6:ad:ff:8a:
         ac:51:c3:8c:89:c5:b2:77:32:74:e7:c4:61:ee:aa:c0:70:4d:
         c3:a2:1b:ff:71:78:60:9c:62:b1:f1:d1:e6:27:1c:22:ba:04:
         08:f0:5e:15:f0:15:fe:05:58:72:fa:37:d1:7e:c8:cd:29:38:
         19:bb:db:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:04:50 2025 by rpki-client