Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/3130332e36392e36312e302f32342d3234203d3e20313530353239.roa
File:                     3130332e36392e36312e302f32342d3234203d3e20313530353239.roa (raw, json)
Hash identifier:          eG3L50RlSnDUuOVwkVlYnQebEQc3JXkDObYN4u0w6z8=
Subject key identifier:   63:F2:04:FC:AE:C2:D7:EB:92:26:69:98:41:C2:DA:4C:AB:F4:A9:1E
Certificate issuer:       /CN=41820333252DF92B1DBA238F558CC8D822C768EF
Certificate serial:       5D8EE587D09652B9C3B8E63B3CDC5401E974C05A
Authority key identifier: 41:82:03:33:25:2D:F9:2B:1D:BA:23:8F:55:8C:C8:D8:22:C7:68:EF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41820333252DF92B1DBA238F558CC8D822C768EF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/3130332e36392e36312e302f32342d3234203d3e20313530353239.roa
Signing time:             Wed 25 Dec 2024 03:00:00 +0000
ROA not before:           Wed 25 Dec 2024 02:55:00 +0000
ROA not after:            Wed 24 Dec 2025 03:00:00 +0000
asID:                     150529
IP address blocks:        103.69.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.crl
                          rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41820333252DF92B1DBA238F558CC8D822C768EF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 10:37:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:8e:e5:87:d0:96:52:b9:c3:b8:e6:3b:3c:dc:54:01:e9:74:c0:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41820333252DF92B1DBA238F558CC8D822C768EF
        Validity
            Not Before: Dec 25 02:55:00 2024 GMT
            Not After : Dec 24 03:00:00 2025 GMT
        Subject: CN=63F204FCAEC2D7EB9226699841C2DA4CABF4A91E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f2:dd:65:5a:71:16:8b:24:7d:57:bf:f6:54:
                    0d:0a:aa:8c:98:ee:e0:eb:93:a8:b3:aa:6f:f4:0a:
                    90:f5:09:5f:be:56:a8:21:e5:55:07:fe:63:59:10:
                    3e:12:0a:77:e5:65:1d:8c:cf:1b:d6:02:29:9a:32:
                    5b:6b:a5:27:5a:39:96:d9:6c:cc:9a:ac:39:33:8b:
                    27:38:b5:81:f5:59:c9:25:a2:09:7c:da:b8:26:6f:
                    b1:b4:05:94:6f:d4:56:7e:88:da:78:24:b9:b8:53:
                    b7:3d:11:66:d7:0a:9e:8c:df:2a:d4:89:48:86:83:
                    96:be:8a:3b:78:da:54:64:c6:be:2c:e8:08:b8:19:
                    18:46:37:d4:58:c7:0e:77:22:a5:9d:6c:09:90:f6:
                    35:44:92:21:9a:15:b0:a9:ac:2e:e4:1f:d6:a6:da:
                    1b:c7:38:f1:dc:d7:a5:6c:82:d0:f0:a8:fa:a8:1e:
                    55:5f:52:f7:03:b4:58:fc:8d:11:7b:96:86:89:24:
                    5a:da:99:90:ed:83:59:5a:b0:af:2f:7d:1c:39:d4:
                    af:28:35:45:6d:a4:e2:8e:47:6d:33:47:60:2d:3a:
                    c3:ef:16:9a:27:1d:89:36:6f:59:93:2b:b0:75:8d:
                    c6:e1:24:08:47:64:b9:d4:5d:9f:e1:b3:67:59:7a:
                    1b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F2:04:FC:AE:C2:D7:EB:92:26:69:98:41:C2:DA:4C:AB:F4:A9:1E
            X509v3 Authority Key Identifier:
                keyid:41:82:03:33:25:2D:F9:2B:1D:BA:23:8F:55:8C:C8:D8:22:C7:68:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41820333252DF92B1DBA238F558CC8D822C768EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/3130332e36392e36312e302f32342d3234203d3e20313530353239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:d0:e2:fd:54:aa:aa:ff:bb:cb:f9:7a:92:1a:ca:70:51:53:
         e0:20:e3:9e:38:e5:a5:80:d9:c6:84:ad:ff:18:a8:2e:36:22:
         c2:48:ec:c6:81:78:5b:d3:96:25:49:78:da:82:29:19:c6:e6:
         21:03:3c:e5:6b:51:20:67:c0:0c:ea:2a:d3:a3:5c:76:fd:8a:
         32:91:17:53:d1:f5:8c:06:35:b4:6f:27:5d:46:cf:23:2e:96:
         ba:58:c2:29:d1:a1:e2:32:9f:a7:b7:13:85:26:3c:51:e8:7a:
         58:8e:d1:58:fe:fb:8a:91:79:c9:05:66:f2:03:60:78:fb:7d:
         ea:53:59:5c:ad:8a:99:b0:e6:b8:02:8f:f3:5f:f3:7f:48:fd:
         b6:d8:05:15:84:ee:d2:5b:4e:60:7b:6d:69:9e:27:22:c9:8b:
         77:37:98:90:ce:53:fb:7e:ee:10:f0:89:54:3d:50:47:62:b3:
         8f:32:84:9d:da:b7:b1:97:74:58:d8:37:a0:da:f4:7b:e3:82:
         80:39:68:7c:e6:1f:c7:68:b5:05:7a:15:22:4e:85:87:14:a9:
         61:b7:15:11:82:a1:e5:89:82:ed:af:5f:ce:3f:6b:6b:a1:3e:
         ea:2e:92:43:8c:3a:50:f7:75:f9:04:a4:9f:e3:22:eb:de:95:
         37:d9:c6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:04:03 2025 by rpki-client