Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/3130332e35352e3232362e302f32342d3234203d3e20313530343839.roa
File:                     3130332e35352e3232362e302f32342d3234203d3e20313530343839.roa (raw, json)
Hash identifier:          M98dO/m+ycrBeg1CtOIteFJftV3RCXQ2eLl/At2g8+Q=
Subject key identifier:   F5:D6:64:0C:15:1B:BD:38:A0:E7:1C:05:AA:93:6E:F0:39:C2:CD:F6
Certificate issuer:       /CN=27992B841C717A90B3FDBD81B476F3FF9045212D
Certificate serial:       A92C8ACF9554397A618413A0C1F2624EAE3351
Authority key identifier: 27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/3130332e35352e3232362e302f32342d3234203d3e20313530343839.roa
Signing time:             Sun 24 Nov 2024 08:00:01 +0000
ROA not before:           Sun 24 Nov 2024 07:55:01 +0000
ROA not after:            Sun 23 Nov 2025 08:00:01 +0000
asID:                     150489
IP address blocks:        103.55.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.crl
                          rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Apr 2025 10:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a9:2c:8a:cf:95:54:39:7a:61:84:13:a0:c1:f2:62:4e:ae:33:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27992B841C717A90B3FDBD81B476F3FF9045212D
        Validity
            Not Before: Nov 24 07:55:01 2024 GMT
            Not After : Nov 23 08:00:01 2025 GMT
        Subject: CN=F5D6640C151BBD38A0E71C05AA936EF039C2CDF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:34:8a:23:ea:03:b7:2d:0a:ea:8e:86:1d:53:
                    a0:e6:b8:57:c3:2d:71:19:7d:38:1c:31:ec:d5:1c:
                    cb:3a:e4:0e:46:70:0e:ac:ec:84:74:01:22:e2:0b:
                    c4:9f:70:52:a5:9c:39:8b:b8:32:b5:43:e1:5c:3c:
                    2b:e4:3e:b4:fa:da:5e:56:97:45:ed:d7:c5:25:eb:
                    2a:83:c8:f3:e5:34:14:45:87:e3:0d:65:23:20:6e:
                    76:e8:eb:a4:93:9f:92:19:a0:c1:31:47:99:d1:d7:
                    e6:83:b9:aa:ab:dc:91:c5:2a:3d:f7:24:53:52:d5:
                    73:a9:1e:2b:b3:a2:41:de:98:de:ac:30:d3:b6:52:
                    b2:60:07:b5:c9:67:aa:f5:b7:6b:dc:37:5b:91:df:
                    50:d4:54:df:31:6b:81:7a:0b:4c:f6:85:c3:62:b5:
                    04:4a:29:28:95:e2:ba:56:c7:83:07:75:d5:6c:6b:
                    d0:3b:6b:5c:f4:b4:5b:a3:a5:4a:d8:87:56:e2:04:
                    9e:4b:75:e0:59:70:c1:43:fe:5e:08:ad:5b:de:ec:
                    57:aa:dd:da:6b:e8:ac:ef:95:59:81:2f:2f:34:e1:
                    b7:da:9d:86:56:83:71:6d:04:a9:ca:ec:6e:6b:4c:
                    a0:a9:54:3a:cb:23:68:a9:9d:7a:a3:d1:45:b0:6c:
                    85:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:D6:64:0C:15:1B:BD:38:A0:E7:1C:05:AA:93:6E:F0:39:C2:CD:F6
            X509v3 Authority Key Identifier:
                keyid:27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/3130332e35352e3232362e302f32342d3234203d3e20313530343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:f8:68:4b:50:75:98:2a:6d:31:c8:63:38:27:a7:31:1a:d0:
         20:61:19:76:f3:67:da:3d:19:57:b7:61:f1:ed:88:7d:c0:0b:
         07:fc:54:01:0f:eb:2e:51:40:ea:7d:f8:6e:fa:10:47:45:59:
         12:00:f9:70:06:fb:e2:ef:67:7f:7e:5d:04:1d:01:d9:e2:32:
         1a:0c:7a:2c:25:5b:af:41:09:04:63:a3:db:b8:55:44:88:a3:
         56:2e:4d:ca:59:ec:a1:d7:5e:e1:3d:20:20:54:f5:00:4a:41:
         ba:61:70:24:bb:64:c1:46:38:0f:46:7c:4c:7c:7f:5a:1e:91:
         2b:74:0e:da:ec:58:83:c7:8c:87:aa:d6:46:6b:53:b3:3c:29:
         77:ad:76:fa:d1:6e:40:aa:f0:88:8a:16:70:19:84:19:31:68:
         9e:2a:39:c3:f0:52:b7:ee:ef:a6:5f:2e:47:2c:08:d4:95:90:
         ff:71:cf:e7:f6:ef:28:00:b3:3c:32:ea:88:7f:95:ee:4d:62:
         84:05:97:df:9f:e6:a9:a5:99:45:97:00:82:d1:47:ed:94:bf:
         44:ac:22:f1:5f:08:28:5d:57:20:ab:c3:68:74:0f:fc:22:4b:
         90:a1:fa:07:26:84:c0:c1:b8:b6:52:58:15:5c:fc:84:cc:79:
         b3:6d:18:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:27:50 2025 by rpki-client