Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/3130332e3135332e3135302e302f32342d3234203d3e20313430343637.roa
File:                     3130332e3135332e3135302e302f32342d3234203d3e20313430343637.roa (raw, json)
Hash identifier:          1a16GMwOcOCsjYtXlZLoq81/WntEbXylQSYsmM31kuc=
Subject key identifier:   6D:7B:FE:05:36:7C:7B:EE:A8:BD:0B:F0:CD:D8:F7:13:D6:F9:FD:0E
Certificate issuer:       /CN=47CBAD1A648715C5E867F1A2ED3558688608EE19
Certificate serial:       2D7FF83E8D159B1F96D92F6C2BB7FDE2C61D0323
Authority key identifier: 47:CB:AD:1A:64:87:15:C5:E8:67:F1:A2:ED:35:58:68:86:08:EE:19
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47CBAD1A648715C5E867F1A2ED3558688608EE19.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/3130332e3135332e3135302e302f32342d3234203d3e20313430343637.roa
Signing time:             Mon 05 May 2025 09:00:00 +0000
ROA not before:           Mon 05 May 2025 08:55:00 +0000
ROA not after:            Mon 04 May 2026 09:00:00 +0000
asID:                     140467
IP address blocks:        103.153.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.crl
                          rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47CBAD1A648715C5E867F1A2ED3558688608EE19.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 05:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:7f:f8:3e:8d:15:9b:1f:96:d9:2f:6c:2b:b7:fd:e2:c6:1d:03:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47CBAD1A648715C5E867F1A2ED3558688608EE19
        Validity
            Not Before: May  5 08:55:00 2025 GMT
            Not After : May  4 09:00:00 2026 GMT
        Subject: CN=6D7BFE05367C7BEEA8BD0BF0CDD8F713D6F9FD0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a8:7b:ef:38:1f:c1:44:68:7d:fb:bc:e9:0c:
                    f2:d3:32:51:94:7c:83:56:0f:2e:fd:fe:78:41:33:
                    cd:f4:8c:a6:69:db:06:22:35:d4:79:b1:5c:16:6f:
                    4a:02:87:bc:ef:21:99:d2:c0:7e:50:62:8e:52:c6:
                    91:ef:b9:2a:b7:05:3b:a6:0a:38:90:f2:97:42:24:
                    7a:22:7a:a3:40:c8:17:5b:42:48:ff:3e:d9:c4:8b:
                    5d:80:f4:00:2a:ca:f2:95:b4:a6:ed:c7:f8:20:59:
                    cf:4d:ce:5d:37:7f:d7:9c:03:6f:88:19:2a:27:69:
                    f3:d8:57:42:df:17:0d:65:64:44:9c:77:ba:53:4f:
                    69:2f:b8:c5:84:e8:09:3c:fa:7d:89:f1:58:fc:17:
                    df:5b:75:bf:17:00:fa:87:28:f1:e3:0a:c6:76:79:
                    f7:bd:b4:19:c3:e4:27:06:00:72:2d:eb:d2:3b:dd:
                    e0:e8:6e:e7:3b:ea:92:49:97:e6:0f:e1:5a:58:67:
                    0a:39:ee:83:94:1a:dc:e1:c7:70:be:ce:dd:92:87:
                    ab:34:66:de:d4:f1:25:17:03:f6:cd:b7:7a:23:c8:
                    ff:35:ed:1e:d5:d2:1e:9a:02:69:e5:a0:f0:6e:f8:
                    1a:a6:82:1c:c6:2c:2f:2f:ab:39:71:ff:b7:1e:20:
                    33:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:7B:FE:05:36:7C:7B:EE:A8:BD:0B:F0:CD:D8:F7:13:D6:F9:FD:0E
            X509v3 Authority Key Identifier:
                keyid:47:CB:AD:1A:64:87:15:C5:E8:67:F1:A2:ED:35:58:68:86:08:EE:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47CBAD1A648715C5E867F1A2ED3558688608EE19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/3130332e3135332e3135302e302f32342d3234203d3e20313430343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:a3:7b:14:2a:d4:10:21:cf:4f:8c:e2:60:a6:fa:57:b7:c8:
         d3:73:38:b4:13:f0:73:dc:22:f1:11:23:92:61:14:f7:7e:8e:
         81:b4:40:7e:fa:25:a7:c1:89:68:9c:56:6c:50:29:23:8a:3a:
         84:63:5e:6c:cd:9f:de:18:68:56:96:f1:9c:5c:4d:8b:26:3c:
         b9:b8:fa:9a:31:1f:89:3a:4e:2f:a2:c0:e1:26:1a:5c:0a:bb:
         9a:ce:40:5d:ea:df:f3:33:fd:89:e4:e0:79:00:b0:48:d8:36:
         97:b7:9e:1a:64:82:e0:2e:d2:24:a0:61:8e:28:95:73:aa:b6:
         2c:c9:ce:02:94:6f:1c:40:c6:ec:e5:aa:95:82:16:28:04:77:
         df:9c:fd:fa:b0:27:4a:1e:48:99:89:96:a4:70:19:ee:3e:25:
         60:34:85:c1:25:e9:2d:05:bd:a8:9a:99:a3:46:36:aa:9f:5d:
         77:88:65:90:69:ff:87:66:03:76:36:80:31:97:7b:4e:f4:de:
         86:48:98:1a:ba:8a:0f:5b:63:81:ea:84:05:0d:ef:14:e0:41:
         e8:bf:d7:15:ec:70:d6:cb:69:ce:de:7d:b1:75:68:34:99:27:
         1b:b2:80:a0:49:23:34:88:0b:f5:5f:e7:2b:fb:ab:0c:80:6f:
         ff:87:51:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:22:06 2025 by rpki-client