Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e34392e302f32342d3234203d3e203633353031.roa
File:                     3130332e33392e34392e302f32342d3234203d3e203633353031.roa (raw, json)
Hash identifier:          OEBLHuyL5IROg19Rd6fTCNXQysEWyH6x7ERzb5RgAZU=
Subject key identifier:   95:91:FB:85:2E:58:BA:8D:E7:31:B4:3D:94:99:E1:2B:59:8F:B9:01
Certificate issuer:       /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial:       43CCFAF54C21CBE03EA75EFE32EE96527C79B73A
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e34392e302f32342d3234203d3e203633353031.roa
Signing time:             Sun 25 May 2025 17:00:02 +0000
ROA not before:           Sun 25 May 2025 16:55:02 +0000
ROA not after:            Sun 24 May 2026 17:00:02 +0000
asID:                     63501
IP address blocks:        103.39.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
                          rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 02:20:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:cc:fa:f5:4c:21:cb:e0:3e:a7:5e:fe:32:ee:96:52:7c:79:b7:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
        Validity
            Not Before: May 25 16:55:02 2025 GMT
            Not After : May 24 17:00:02 2026 GMT
        Subject: CN=9591FB852E58BA8DE731B43D9499E12B598FB901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8e:2a:30:30:df:18:1c:b1:0e:ee:c2:7f:3f:
                    db:36:43:01:42:fc:b6:82:27:b7:d4:4a:6f:f9:da:
                    1e:1c:ca:86:b5:68:a0:cd:b3:f5:4e:03:85:cd:cb:
                    6b:78:bd:a5:8b:1a:01:93:93:8a:bf:3e:1d:28:a1:
                    a4:de:4e:55:89:27:67:c7:a1:4d:b7:01:e3:6e:12:
                    ad:0d:73:f0:8b:6a:71:19:fc:0b:98:25:b5:1f:ad:
                    bc:32:77:3a:21:7b:b1:be:08:d1:2e:05:7f:db:73:
                    b7:cd:c1:f6:0d:f9:6b:03:8e:e2:63:7e:d2:32:58:
                    22:e6:c8:db:c6:c6:41:53:2f:31:93:c3:0f:a7:65:
                    94:69:b2:59:d3:8c:c3:de:ac:c8:bf:33:c7:25:ac:
                    50:fa:f3:1e:4a:87:3d:18:02:c6:02:10:07:27:42:
                    e8:af:d7:d2:78:33:51:6a:9f:73:51:40:94:39:70:
                    e3:aa:b8:39:28:13:a7:7c:6b:a5:12:d7:61:32:6b:
                    4f:b6:4c:f0:e8:d6:a9:1e:6a:e0:ff:6a:bf:79:4a:
                    ac:fa:8a:ca:36:bc:00:70:fb:f0:1e:28:2a:7d:ee:
                    01:f0:98:95:b3:59:8a:f0:5d:98:67:b6:5f:a0:c0:
                    ca:08:dc:69:ae:e4:72:ae:71:56:c4:99:7a:9c:83:
                    8f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:91:FB:85:2E:58:BA:8D:E7:31:B4:3D:94:99:E1:2B:59:8F:B9:01
            X509v3 Authority Key Identifier:
                keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e34392e302f32342d3234203d3e203633353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:9d:86:1b:12:1d:cb:9a:ec:09:22:25:28:82:4e:d2:e1:51:
         8b:c3:e6:45:4b:a7:1a:ca:3e:7a:6b:3a:68:b5:b6:a9:cb:f3:
         59:27:0e:a4:93:06:d9:3a:5f:c8:27:05:83:bb:e1:de:5c:60:
         16:13:6c:83:12:f2:60:85:36:51:aa:be:ca:67:9b:40:b6:43:
         b0:d9:e1:a7:32:99:59:d2:cc:35:67:85:73:d9:f8:83:a6:7f:
         1e:34:b2:8b:80:4a:d0:f2:dc:b6:a8:58:bc:64:36:97:33:d0:
         99:98:59:f9:3e:fb:b2:1c:52:29:a4:32:c2:63:19:97:37:8f:
         b5:d6:68:4d:1e:0d:33:4c:93:00:ff:89:ea:ab:a3:aa:30:35:
         a1:ae:92:c9:a5:85:8f:8c:5e:d3:0c:a8:71:99:e5:47:b1:96:
         6e:2a:c2:81:34:14:56:ab:f5:29:26:6c:4c:ab:a4:69:75:49:
         a3:5f:88:e9:ba:5e:8e:de:3e:69:d8:d1:e9:d1:bf:78:e0:d9:
         d8:8d:b7:ab:65:e0:41:72:64:9a:99:bd:2f:ee:fa:12:53:1c:
         92:2b:95:0e:3e:19:36:a7:2b:48:b1:d4:b5:11:04:6b:35:38:
         eb:03:71:79:64:2a:44:20:35:46:32:02:d9:b1:d1:79:87:c8:
         a8:0b:49:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:03:15 2025 by rpki-client