Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e35302e302f32342d3234203d3e203633353031.roa
File:                     3130332e33392e35302e302f32342d3234203d3e203633353031.roa (raw, json)
Hash identifier:          ydTlUGVcKS4lgES6wItbPdSPQhqyiKodHd5qrBXnRwU=
Subject key identifier:   01:80:D2:24:78:6C:8E:E2:C5:6B:DF:90:0D:9F:97:1F:57:C0:EA:0C
Certificate issuer:       /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial:       70309145012651656AF2D7E85FB98367E10113FD
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e35302e302f32342d3234203d3e203633353031.roa
Signing time:             Sun 25 May 2025 19:00:02 +0000
ROA not before:           Sun 25 May 2025 18:55:02 +0000
ROA not after:            Sun 24 May 2026 19:00:02 +0000
asID:                     63501
IP address blocks:        103.39.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
                          rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 10:41:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:30:91:45:01:26:51:65:6a:f2:d7:e8:5f:b9:83:67:e1:01:13:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
        Validity
            Not Before: May 25 18:55:02 2025 GMT
            Not After : May 24 19:00:02 2026 GMT
        Subject: CN=0180D224786C8EE2C56BDF900D9F971F57C0EA0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c5:84:56:d3:28:95:db:31:17:ad:3d:b2:5b:
                    98:09:29:51:6c:dd:8b:4f:c7:c2:12:7d:a9:fd:50:
                    b3:3e:3a:b6:02:98:98:e8:86:d1:12:ae:d2:3f:9b:
                    0a:1d:61:e2:c1:03:85:33:fc:20:90:24:9c:b6:31:
                    1e:0e:9b:b9:41:71:b3:cf:97:34:ee:e2:b8:61:b5:
                    c3:a0:14:57:3f:a0:b0:ee:b5:7f:fa:54:c2:53:e2:
                    77:78:84:cd:63:97:df:40:7c:d1:34:e5:a3:d1:45:
                    57:22:af:b9:e9:3a:36:b6:dc:29:c5:c2:fb:80:82:
                    3e:c6:1d:f3:46:d2:57:7c:cf:48:39:70:5c:1e:5b:
                    76:e8:a8:09:f9:a3:b8:57:67:26:a4:b0:73:9e:d0:
                    f1:e4:00:e2:95:56:62:3e:24:cc:3b:af:1b:d0:87:
                    d7:9b:bf:b2:ce:0b:11:df:04:76:cf:95:c5:1e:09:
                    2f:f0:e3:09:23:e5:b4:83:40:00:da:39:18:d2:db:
                    5f:ec:f8:d1:e1:ad:fc:c8:75:d6:b1:b8:36:53:19:
                    f2:a1:6a:c1:7b:51:29:20:8b:bd:72:fa:37:a6:8d:
                    d0:af:00:c6:9f:a8:7f:e7:cc:b1:1a:44:0f:d5:eb:
                    94:42:1a:ee:8e:81:15:2b:d2:98:da:ee:54:03:c7:
                    5c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:80:D2:24:78:6C:8E:E2:C5:6B:DF:90:0D:9F:97:1F:57:C0:EA:0C
            X509v3 Authority Key Identifier:
                keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e35302e302f32342d3234203d3e203633353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:1d:b5:7a:35:a7:a2:65:67:84:43:2a:f8:18:c1:67:56:91:
         1a:2a:6f:96:0f:0f:21:97:41:7a:b2:e4:95:b5:f4:b6:49:b4:
         36:2b:af:df:16:a7:66:1f:99:24:e2:53:59:06:2d:fa:c6:34:
         6a:94:75:e8:df:0c:b9:0f:4f:6c:20:fc:b9:97:82:f8:22:8f:
         21:b0:ba:d9:23:d7:da:08:31:88:1a:6a:2d:f0:04:e6:0c:4e:
         3f:ce:77:e8:f5:4b:da:6b:ad:93:19:25:aa:b5:e3:ce:f8:bd:
         d5:48:4e:6f:79:3f:d1:20:a1:03:9a:b3:2f:40:63:e9:52:53:
         2a:7b:4d:9d:1b:71:1f:98:89:34:47:39:29:9c:74:60:36:f6:
         f2:18:98:83:55:82:82:1a:ab:ad:76:94:27:07:3e:90:9a:c2:
         bb:b5:8c:29:8b:24:15:e1:52:a9:00:e6:f6:c5:b9:4f:ae:93:
         ac:9f:25:a2:48:0f:7a:29:85:4b:eb:3a:12:73:28:ba:c6:a7:
         63:8d:91:82:82:5a:a9:d0:23:b6:68:13:55:15:ad:e2:1a:a3:
         09:74:6a:f5:1f:31:4e:c5:62:1a:dc:69:94:76:e4:5b:e8:56:
         bf:12:87:f7:4d:85:7c:e9:e9:bf:a5:9e:68:55:81:d0:74:14:
         ad:b7:35:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:03:15 2025 by rpki-client