Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/3130332e3135382e32362e302f32342d3234203d3e20313431363735.roa
File:                     3130332e3135382e32362e302f32342d3234203d3e20313431363735.roa (raw, json)
Hash identifier:          ykRWiMSaAsP4Z39Whyu3kvlehUT+9RaQnqBPMyF4FR0=
Subject key identifier:   A6:98:4A:5C:82:FB:8F:0E:72:AE:CB:55:DE:05:11:29:CC:76:49:53
Certificate issuer:       /CN=1952B074D19D5AB562D7EE537AD3059EA097353B
Certificate serial:       51919C0061C6B7A8495966F1E624067E564EC95A
Authority key identifier: 19:52:B0:74:D1:9D:5A:B5:62:D7:EE:53:7A:D3:05:9E:A0:97:35:3B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/3130332e3135382e32362e302f32342d3234203d3e20313431363735.roa
Signing time:             Thu 15 May 2025 02:38:45 +0000
ROA not before:           Thu 15 May 2025 02:33:45 +0000
ROA not after:            Thu 14 May 2026 02:38:45 +0000
asID:                     141675
IP address blocks:        103.158.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.crl
                          rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 13:42:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:91:9c:00:61:c6:b7:a8:49:59:66:f1:e6:24:06:7e:56:4e:c9:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1952B074D19D5AB562D7EE537AD3059EA097353B
        Validity
            Not Before: May 15 02:33:45 2025 GMT
            Not After : May 14 02:38:45 2026 GMT
        Subject: CN=A6984A5C82FB8F0E72AECB55DE051129CC764953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f7:0c:ab:8b:32:3e:b5:84:c6:ce:f6:ef:0e:
                    d6:d3:61:f3:40:45:98:d9:d4:7c:7e:a2:0e:85:bd:
                    78:2e:ad:5a:1c:45:ec:2c:cd:b9:3f:6f:52:41:3e:
                    e8:89:29:2a:b5:10:80:61:62:aa:67:82:94:79:c3:
                    12:22:b0:25:de:bf:d0:60:83:fa:e5:1c:4c:e7:c8:
                    a8:95:62:82:a6:f9:11:b0:fc:19:fd:2d:af:0f:71:
                    87:ce:7f:a7:30:fa:dd:35:fc:79:b6:c2:7e:c4:96:
                    2a:18:36:67:09:53:ca:bb:a9:93:24:e4:24:1e:0b:
                    9a:22:1a:81:32:61:d2:48:1b:ef:22:92:10:17:cd:
                    e3:68:03:41:e6:0b:19:73:43:c8:b0:9f:77:57:af:
                    e9:90:89:e1:de:fe:94:d8:ef:a2:ab:11:94:66:32:
                    76:77:87:7b:e8:c8:34:2b:b9:2f:36:c8:fc:bc:76:
                    ee:af:3e:1b:cb:e4:84:89:1a:a4:59:85:5d:66:95:
                    4e:5b:8f:3b:5f:1d:7b:60:10:e2:bd:a3:19:4b:51:
                    be:70:f2:b0:1e:99:4e:37:ee:f0:1e:91:56:77:00:
                    40:ad:f8:63:0c:25:7b:a6:5a:6b:5b:a9:c6:92:ed:
                    33:54:d5:1e:f3:73:33:7f:2b:0f:d3:a2:82:65:37:
                    d7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:98:4A:5C:82:FB:8F:0E:72:AE:CB:55:DE:05:11:29:CC:76:49:53
            X509v3 Authority Key Identifier:
                keyid:19:52:B0:74:D1:9D:5A:B5:62:D7:EE:53:7A:D3:05:9E:A0:97:35:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/3130332e3135382e32362e302f32342d3234203d3e20313431363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:34:7c:b1:e6:50:e8:bd:ec:37:4e:cd:43:72:ec:53:c2:78:
         f3:17:ae:12:25:82:ea:c3:69:05:b8:99:85:d5:bb:d8:1e:3b:
         36:d3:9a:13:60:b8:a5:19:9b:78:23:32:de:47:91:26:28:42:
         d1:57:c5:3c:a8:b0:b7:e8:3d:2f:59:fc:29:38:9e:fd:82:07:
         57:fb:af:82:80:8e:05:1d:8a:0d:8f:26:d7:7f:b0:7f:86:83:
         43:e3:eb:58:e9:18:ad:20:8f:42:4f:5c:d0:07:d6:09:27:7a:
         aa:2b:95:23:b2:ab:07:9b:2a:b1:b3:5f:ab:e1:1f:8f:1f:ba:
         e2:ce:d3:cb:42:c4:d3:63:a1:60:65:13:db:a3:98:d5:4b:72:
         63:3b:de:3a:ed:b3:ab:6d:f2:16:18:75:1d:71:77:21:47:de:
         ce:7e:e9:4a:b8:1f:cc:b2:1a:c3:c4:1a:88:76:6a:95:4a:2c:
         62:ce:02:97:fe:20:bc:15:6d:e0:0c:2c:84:fb:be:bc:7b:f8:
         51:7f:5c:c5:5c:2a:88:37:e6:c7:a0:e3:82:37:4f:df:10:e3:
         89:4f:00:e1:cd:09:69:02:c2:9e:bc:c1:28:3e:7b:6b:bc:fe:
         88:8f:c8:6f:34:d7:f4:af:9f:c2:8a:ab:1d:8a:47:a3:c3:be:
         a2:e3:ca:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:55:48 2025 by rpki-client