Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/3130332e39372e3232342e302f32342d3234203d3e20313530393233.roa
File:                     3130332e39372e3232342e302f32342d3234203d3e20313530393233.roa (raw, json)
Hash identifier:          huPH2F1DP0fchHSvvNbciHmA7KaDKFRvJu4CVI1hLtw=
Subject key identifier:   CF:88:E8:3C:E5:76:E2:66:1D:5A:1A:E9:6F:74:76:91:A1:A4:B3:E9
Certificate issuer:       /CN=A5BB79678DB1239CD393222080CAAF085BEE737F
Certificate serial:       51FD2A024EB8C6C093820A7D17A81120648180
Authority key identifier: A5:BB:79:67:8D:B1:23:9C:D3:93:22:20:80:CA:AF:08:5B:EE:73:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BB79678DB1239CD393222080CAAF085BEE737F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/3130332e39372e3232342e302f32342d3234203d3e20313530393233.roa
Signing time:             Sun 18 May 2025 17:00:00 +0000
ROA not before:           Sun 18 May 2025 16:55:00 +0000
ROA not after:            Sun 17 May 2026 17:00:00 +0000
asID:                     150923
IP address blocks:        103.97.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.crl
                          rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BB79678DB1239CD393222080CAAF085BEE737F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Jun 2025 02:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:fd:2a:02:4e:b8:c6:c0:93:82:0a:7d:17:a8:11:20:64:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5BB79678DB1239CD393222080CAAF085BEE737F
        Validity
            Not Before: May 18 16:55:00 2025 GMT
            Not After : May 17 17:00:00 2026 GMT
        Subject: CN=CF88E83CE576E2661D5A1AE96F747691A1A4B3E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:56:f5:ee:c3:3f:df:75:d0:26:90:a7:34:31:
                    6a:5b:35:ac:e9:bd:40:b1:c0:cf:df:f2:ca:4e:bb:
                    4c:ca:af:ac:24:af:65:a9:5d:02:87:f2:db:12:0f:
                    9f:08:07:a5:82:36:06:21:33:77:fc:be:d0:a0:48:
                    53:76:3a:4d:47:3c:b6:7c:fb:e0:e7:62:da:e0:ce:
                    3c:86:8f:9f:e2:b5:a5:bc:8a:0b:6b:6f:14:27:65:
                    22:5d:23:8f:51:80:2b:ea:7b:3b:ae:a9:06:4f:b6:
                    5c:42:9f:0b:3d:b4:9a:78:2f:a7:d5:e3:24:df:18:
                    95:69:5a:0e:db:17:fa:2e:d0:a9:71:a5:54:e1:9c:
                    9b:7e:1e:85:91:b4:4f:01:b2:02:c4:50:f0:85:12:
                    46:99:8e:08:ea:b0:ac:6f:be:61:db:70:30:50:0e:
                    31:20:43:ea:b7:23:1c:4e:b5:64:5e:24:66:a8:78:
                    8b:19:0f:82:27:a1:1a:01:30:3e:32:8a:08:e4:d6:
                    96:95:18:b6:b3:1b:eb:64:c0:34:d7:19:d5:cd:6c:
                    9a:16:ae:c1:53:d0:9d:b4:0c:e7:f1:77:1a:3e:cf:
                    23:48:10:f6:c6:0b:00:bc:e0:db:7c:49:b4:ce:3e:
                    df:94:66:c5:19:75:fa:1d:0d:bd:34:35:06:80:eb:
                    d8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:88:E8:3C:E5:76:E2:66:1D:5A:1A:E9:6F:74:76:91:A1:A4:B3:E9
            X509v3 Authority Key Identifier:
                keyid:A5:BB:79:67:8D:B1:23:9C:D3:93:22:20:80:CA:AF:08:5B:EE:73:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BB79678DB1239CD393222080CAAF085BEE737F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/3130332e39372e3232342e302f32342d3234203d3e20313530393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:54:06:c8:1e:2c:e0:c0:c2:6e:88:6c:7d:d6:28:a7:68:d8:
         da:d4:85:19:91:a2:70:42:0c:b5:32:bf:a2:cb:26:81:75:49:
         14:3b:0d:ca:aa:f7:80:e0:86:21:81:b1:57:69:40:20:63:08:
         65:69:c8:4c:97:e0:a3:ae:7e:23:4e:02:f4:27:09:fd:c1:af:
         1d:2a:48:7b:e3:2b:60:a6:a2:58:f0:7b:04:67:a8:bf:89:28:
         0d:57:4b:1a:8f:8f:0e:4a:48:ff:54:11:6f:cc:47:91:0b:3f:
         a7:2d:0e:b9:5f:0a:fb:b0:47:2e:7b:e2:af:92:8c:f4:52:3d:
         1a:f0:82:95:a6:9a:ab:95:8c:c7:a5:a7:b2:33:5c:5d:dd:de:
         3f:73:4a:29:b2:44:f7:27:00:41:cb:e4:86:70:8b:aa:df:9c:
         2f:9c:ec:33:82:5a:d6:9b:0a:33:ca:cb:8b:b3:bf:c2:03:82:
         10:e2:0b:c6:e7:5f:07:f6:56:bc:c6:74:7e:68:46:8b:bc:21:
         cc:a7:c8:d1:32:2e:c1:17:a6:38:f7:b7:d4:bb:51:bf:3a:74:
         f7:e4:fe:cc:ce:34:df:f0:12:7c:9b:d4:8c:19:82:24:91:7b:
         28:4c:ef:24:88:db:75:24:62:56:fa:66:bb:ed:3c:7c:d7:03:
         43:b5:72:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:17:58 2025 by rpki-client