Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/3130332e3135312e39342e302f32342d3234203d3e203137353338.roa
File:                     3130332e3135312e39342e302f32342d3234203d3e203137353338.roa (raw, json)
Hash identifier:          g0wg8Deehkfr6iJjF1icldun4thvTysDD1uiOyWBYM4=
Subject key identifier:   AF:C5:05:61:56:A7:BA:20:1F:6B:73:8E:BB:4F:4E:22:1E:45:D5:1A
Certificate issuer:       /CN=6A75F95EA11C3F984C5C610FE9222026394BA8E9
Certificate serial:       68F8507CE528B9D56EFB296F497526208D884519
Authority key identifier: 6A:75:F9:5E:A1:1C:3F:98:4C:5C:61:0F:E9:22:20:26:39:4B:A8:E9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A75F95EA11C3F984C5C610FE9222026394BA8E9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/3130332e3135312e39342e302f32342d3234203d3e203137353338.roa
Signing time:             Mon 02 Jun 2025 02:04:11 +0000
ROA not before:           Mon 02 Jun 2025 01:59:11 +0000
ROA not after:            Mon 01 Jun 2026 02:04:11 +0000
asID:                     17538
IP address blocks:        103.151.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.crl
                          rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A75F95EA11C3F984C5C610FE9222026394BA8E9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 04:06:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:f8:50:7c:e5:28:b9:d5:6e:fb:29:6f:49:75:26:20:8d:88:45:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A75F95EA11C3F984C5C610FE9222026394BA8E9
        Validity
            Not Before: Jun  2 01:59:11 2025 GMT
            Not After : Jun  1 02:04:11 2026 GMT
        Subject: CN=AFC5056156A7BA201F6B738EBB4F4E221E45D51A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3b:60:8d:0a:10:18:cf:5c:b5:c3:f4:6c:1d:
                    c8:dd:62:29:63:ec:8f:4e:44:e2:36:1e:8c:d0:61:
                    10:4b:39:e6:67:e8:0c:a0:8e:ce:85:fd:3f:ff:d1:
                    7b:41:82:d2:bf:04:f1:db:d6:f2:64:15:c1:ba:ee:
                    99:0f:89:f8:eb:4d:83:35:f1:44:b9:5d:93:ba:72:
                    b7:ab:e0:2a:d2:92:cb:e5:06:00:97:fb:13:b1:62:
                    87:55:31:c3:10:2f:02:5c:f4:02:17:06:dd:a2:aa:
                    39:83:20:2a:57:9b:28:97:4c:86:7f:6b:b5:5f:68:
                    52:91:ab:a1:30:b8:02:3a:25:c3:ab:2a:74:63:05:
                    fa:f8:fd:b1:d4:54:42:c7:76:93:be:11:71:e0:8e:
                    7a:98:63:01:2f:d9:a6:c0:6f:42:56:45:05:b3:9d:
                    c5:17:bd:a6:a7:b4:06:7e:8e:ff:47:fc:0d:a0:d3:
                    79:85:27:bf:62:72:ea:75:f6:e6:5c:62:03:af:37:
                    a4:54:6f:8d:59:44:a7:96:5c:34:98:1b:5b:f1:8d:
                    30:24:77:98:2d:b0:6e:4b:7a:46:1c:73:6c:ec:ef:
                    dc:72:25:cb:1f:82:5a:33:b3:94:d8:16:b7:79:0d:
                    26:39:a8:46:de:c6:9a:cc:64:b3:34:2c:21:76:8c:
                    4c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C5:05:61:56:A7:BA:20:1F:6B:73:8E:BB:4F:4E:22:1E:45:D5:1A
            X509v3 Authority Key Identifier:
                keyid:6A:75:F9:5E:A1:1C:3F:98:4C:5C:61:0F:E9:22:20:26:39:4B:A8:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A75F95EA11C3F984C5C610FE9222026394BA8E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/3130332e3135312e39342e302f32342d3234203d3e203137353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:78:f5:1b:dc:c9:af:ca:a4:86:6a:32:fd:0c:cf:da:db:c6:
         46:50:1c:9c:50:b4:39:f8:4e:07:bb:2d:07:ce:f6:d4:72:a8:
         4e:19:e1:3f:e6:79:b3:d9:cd:1c:8f:78:33:a1:41:20:0d:51:
         e6:3b:c6:70:93:48:02:07:97:c5:ff:7c:90:dd:0d:f8:4f:82:
         80:3f:cb:8a:1f:d9:c2:59:8c:f0:72:f3:9e:41:b0:cf:9d:56:
         e1:4a:e7:0b:03:c9:50:64:e6:74:a2:99:9e:af:c0:b4:be:e6:
         43:70:d8:67:3a:41:ef:ab:d5:c8:55:2d:dc:05:00:e2:4d:ff:
         f1:74:b1:79:6f:a8:1b:76:20:6c:ce:77:70:fc:b6:95:58:31:
         50:c7:5d:c7:88:8b:30:58:4c:24:70:15:0b:9c:9a:0c:cd:83:
         da:4c:68:09:6c:8f:4b:0f:ad:41:42:7e:2e:f7:2e:79:b3:75:
         15:43:0d:7e:44:55:16:cd:a8:13:b6:f1:01:f4:1e:d7:77:0a:
         da:a2:20:5b:5a:31:42:99:ec:b4:5f:d8:c9:cc:e2:1e:a2:7d:
         f8:ef:ec:13:35:5a:8c:7c:2a:be:70:c4:da:9b:e0:e1:14:7b:
         3e:c4:6c:94:aa:a0:59:e8:69:0d:2c:c4:69:83:be:6b:15:38:
         c3:42:64:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:08:05 2025 by rpki-client