Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/3130332e35312e3135382e302f32342d3234203d3e203538333934.roa
File:                     3130332e35312e3135382e302f32342d3234203d3e203538333934.roa (raw, json)
Hash identifier:          MZpBnWfk42SFeduiN6RL28Su7KTp0RDTjQY3tu04WHo=
Subject key identifier:   26:06:77:71:8F:9B:98:89:4D:5D:E5:D9:11:05:70:27:54:0F:85:02
Certificate issuer:       /CN=77629696624E40462330DA2AF610D32809C89E5A
Certificate serial:       079D1C9EC7C4AA45548B3C739160D3FF8F29F240
Authority key identifier: 77:62:96:96:62:4E:40:46:23:30:DA:2A:F6:10:D3:28:09:C8:9E:5A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77629696624E40462330DA2AF610D32809C89E5A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/3130332e35312e3135382e302f32342d3234203d3e203538333934.roa
Signing time:             Mon 02 Jun 2025 02:04:29 +0000
ROA not before:           Mon 02 Jun 2025 01:59:29 +0000
ROA not after:            Mon 01 Jun 2026 02:04:29 +0000
asID:                     58394
IP address blocks:        103.51.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/77629696624E40462330DA2AF610D32809C89E5A.crl
                          rsync://repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/77629696624E40462330DA2AF610D32809C89E5A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77629696624E40462330DA2AF610D32809C89E5A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Jun 2025 02:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:9d:1c:9e:c7:c4:aa:45:54:8b:3c:73:91:60:d3:ff:8f:29:f2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77629696624E40462330DA2AF610D32809C89E5A
        Validity
            Not Before: Jun  2 01:59:29 2025 GMT
            Not After : Jun  1 02:04:29 2026 GMT
        Subject: CN=260677718F9B98894D5DE5D911057027540F8502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3d:89:ee:8e:cb:23:0f:ca:7c:3e:c0:83:8d:
                    ff:cd:49:df:84:04:91:55:f0:15:97:ff:0a:48:0a:
                    fe:2b:27:1e:e1:44:b7:50:c8:a8:9e:35:d2:da:1e:
                    ba:7a:c1:96:c7:be:b0:e5:37:ba:a5:94:09:9c:f9:
                    0a:fb:8c:86:73:5f:3f:e9:4a:b0:2a:c1:b3:31:8a:
                    2c:48:b1:c5:0a:77:24:4f:5d:bf:cf:d4:e5:f0:ca:
                    aa:73:da:b1:9f:81:e8:b9:ab:f5:46:fc:88:6b:4e:
                    17:af:b2:8e:06:87:af:9b:d0:11:36:a5:50:90:5b:
                    c7:93:57:4d:44:d1:a6:4a:1f:20:95:5e:6f:b9:df:
                    5b:e1:97:f5:78:45:ae:eb:c4:0b:58:b7:b7:ff:ad:
                    a7:a3:8f:96:a9:e9:49:c3:6a:b5:58:90:d9:17:09:
                    2e:e6:60:c8:ad:9a:3b:8a:c3:84:7b:41:f2:b6:01:
                    d3:5f:d6:96:c4:67:cc:3c:6f:08:23:26:83:ac:a9:
                    44:63:0c:99:79:b0:69:b6:70:b7:ae:1c:94:e2:4f:
                    ef:51:3d:d7:2d:d3:61:57:b8:10:ce:2e:52:3c:ec:
                    15:18:c1:0f:7b:e2:f7:ae:87:fa:51:6a:1c:c8:fc:
                    c5:8f:a3:05:ad:6c:a9:8a:88:b1:e8:43:8d:71:cc:
                    b9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:06:77:71:8F:9B:98:89:4D:5D:E5:D9:11:05:70:27:54:0F:85:02
            X509v3 Authority Key Identifier:
                keyid:77:62:96:96:62:4E:40:46:23:30:DA:2A:F6:10:D3:28:09:C8:9E:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/77629696624E40462330DA2AF610D32809C89E5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77629696624E40462330DA2AF610D32809C89E5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/3130332e35312e3135382e302f32342d3234203d3e203538333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:0b:32:92:17:25:58:3a:66:1b:1a:79:0c:0d:9f:fc:70:32:
         e1:b0:d9:e2:56:4a:61:47:ef:12:8a:89:18:30:d4:d1:26:cd:
         c2:0f:3f:c4:c0:ae:d0:df:8f:c3:a1:26:92:27:53:f5:37:20:
         e8:44:78:ce:59:7a:c6:e7:83:1b:c2:04:80:75:cf:77:1e:24:
         e6:75:a4:fe:c0:45:ae:5d:54:62:27:6b:66:7a:9c:77:36:c7:
         57:fc:c7:eb:8b:10:14:5b:96:84:c4:83:8c:43:2f:ba:3c:b5:
         77:3f:1b:77:c9:07:b2:b3:00:df:46:2a:0a:d2:f5:8d:db:fc:
         81:7a:ed:2c:fb:e2:2f:f3:c2:17:07:b9:2a:ce:07:cf:8b:8a:
         a3:d7:fa:62:1f:ae:7b:21:65:bc:92:bd:67:8b:4e:db:2e:67:
         2c:7f:b8:9b:e4:a2:0e:61:75:de:3f:9d:a6:a1:80:3e:06:69:
         0b:18:ca:53:85:92:07:d5:bc:d4:9f:87:25:9c:dc:b6:56:b4:
         53:f8:82:a8:ea:6c:03:b6:08:77:a4:56:b2:28:99:b0:02:7b:
         11:ac:da:ed:a0:de:dd:95:6d:52:97:46:fc:56:97:c2:9b:6a:
         a0:84:af:b2:0a:63:14:c4:64:7b:a4:a4:42:85:23:5c:4d:08:
         e8:9f:24:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:16:35 2025 by rpki-client