Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/3130332e372e3232362e302f32332d3233203d3e203539313335.roa
File:                     3130332e372e3232362e302f32332d3233203d3e203539313335.roa (raw, json)
Hash identifier:          /qz+/FrTyvqN+lKfQMLM9vGRBCrWv6ZRIa9kSi7cy5M=
Subject key identifier:   77:CB:DA:8C:78:E0:21:50:09:40:8F:23:71:7B:E2:68:32:21:6E:D1
Certificate issuer:       /CN=754AE571E3432B20E78045BE7B2C99E39E0F1873
Certificate serial:       132A9C4E19749152497F6B7BD59B41921514FDEE
Authority key identifier: 75:4A:E5:71:E3:43:2B:20:E7:80:45:BE:7B:2C:99:E3:9E:0F:18:73
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/3130332e372e3232362e302f32332d3233203d3e203539313335.roa
Signing time:             Tue 18 Mar 2025 11:00:00 +0000
ROA not before:           Tue 18 Mar 2025 10:55:00 +0000
ROA not after:            Tue 17 Mar 2026 11:00:00 +0000
asID:                     59135
IP address blocks:        103.7.226.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.crl
                          rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Apr 2025 17:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:2a:9c:4e:19:74:91:52:49:7f:6b:7b:d5:9b:41:92:15:14:fd:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=754AE571E3432B20E78045BE7B2C99E39E0F1873
        Validity
            Not Before: Mar 18 10:55:00 2025 GMT
            Not After : Mar 17 11:00:00 2026 GMT
        Subject: CN=77CBDA8C78E0215009408F23717BE26832216ED1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e1:4c:87:9b:ee:d6:b9:15:25:80:43:f4:50:
                    c6:a7:ed:82:9a:85:4e:b4:26:cb:a4:bc:a2:71:0d:
                    5c:5a:96:9a:21:2d:eb:a0:dc:89:12:34:a5:7f:3a:
                    12:7f:2f:e7:84:38:9f:ce:6b:e1:75:fe:25:ad:2d:
                    0d:fe:28:66:ad:a0:94:92:9e:da:ba:f9:49:aa:b8:
                    a9:4f:36:cc:e1:05:51:21:36:7e:f0:7c:a6:43:a8:
                    f3:07:09:24:f6:3d:7f:5b:e5:66:4c:e0:5e:5c:a6:
                    e8:10:2b:ad:2a:13:ac:59:18:09:21:4e:5f:11:ad:
                    0d:cf:a3:00:ae:9d:f7:2b:c5:35:e9:df:be:d0:02:
                    28:25:c5:d3:c9:95:69:d3:4a:f0:f4:d8:30:8b:b7:
                    1e:45:24:61:30:a4:27:19:15:b9:32:2f:b6:f6:cb:
                    34:c7:88:68:4c:75:e7:7a:7a:b3:3a:a1:39:99:50:
                    0e:ae:1b:0f:1f:d5:14:dc:74:15:e5:97:d5:65:5a:
                    6c:6f:7b:c7:70:f9:8a:ff:ae:c9:0e:e4:da:1c:a1:
                    50:b8:e9:79:d7:5a:c1:a2:05:d0:4d:6b:3f:db:38:
                    08:3e:36:cc:79:95:b3:83:ef:f4:f1:12:46:fe:7f:
                    ff:2b:58:08:c2:66:ba:ec:50:ce:24:b9:67:c3:c4:
                    e6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:CB:DA:8C:78:E0:21:50:09:40:8F:23:71:7B:E2:68:32:21:6E:D1
            X509v3 Authority Key Identifier:
                keyid:75:4A:E5:71:E3:43:2B:20:E7:80:45:BE:7B:2C:99:E3:9E:0F:18:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/3130332e372e3232362e302f32332d3233203d3e203539313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:dd:83:6a:f2:d2:cb:c0:76:3d:0d:69:35:c7:da:f0:4e:25:
         58:a6:f4:d3:7e:ad:40:13:6d:6e:d2:d6:73:74:9c:34:86:92:
         f7:92:e3:57:fa:32:f4:ec:15:88:b2:dc:29:ba:d1:49:56:47:
         59:5d:3b:8d:db:b3:d5:02:a3:2d:6d:cc:c5:69:fa:7a:2e:d5:
         07:14:06:3e:13:db:6f:48:8e:95:5b:44:d4:27:dc:df:8d:7c:
         32:fd:5f:b6:8f:a3:da:c8:23:66:a4:9a:65:fc:37:f3:0c:e6:
         e9:70:e8:94:c1:37:6a:e1:49:52:69:c0:09:3a:df:86:3f:d4:
         4e:7f:10:b7:73:9b:7a:86:3c:1b:f8:40:40:c4:41:25:51:1c:
         04:35:85:a1:de:08:cd:e9:44:8e:c4:38:f3:df:32:17:83:b6:
         eb:df:23:80:46:54:e5:b2:25:83:ee:42:41:85:da:8d:69:be:
         e2:4c:fa:88:d3:5a:af:3d:b4:1d:da:f5:8b:a3:d0:84:80:3b:
         54:4f:a6:c5:31:eb:3c:0b:1a:50:c4:0f:f3:e1:c2:4a:d1:88:
         41:84:4d:8d:37:57:3b:6b:60:1a:45:53:ea:e3:ad:34:e7:29:
         68:e8:a2:de:35:b3:b3:60:02:c7:a1:35:2f:d4:aa:ca:df:f7:
         e2:8c:a5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:21:22 2025 by rpki-client