Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3130332e3138332e35392e302f32342d3234203d3e20313439343039.roa
File:                     3130332e3138332e35392e302f32342d3234203d3e20313439343039.roa (raw, json)
Hash identifier:          vMllDWXQKOFp/LXz2039GVQEOHmucr5NlyL4beN8AaE=
Subject key identifier:   6A:78:7C:CA:F7:BC:C2:B9:F9:BF:0C:14:59:40:40:7F:89:68:48:25
Certificate issuer:       /CN=D1553F19BBD3B70719E720005FDB3145CC910A1F
Certificate serial:       5E68EE898743402130F48ED7ECA806188F71CDD1
Authority key identifier: D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3130332e3138332e35392e302f32342d3234203d3e20313439343039.roa
Signing time:             Wed 19 Feb 2025 04:00:02 +0000
ROA not before:           Wed 19 Feb 2025 03:55:02 +0000
ROA not after:            Wed 18 Feb 2026 04:00:02 +0000
asID:                     149409
IP address blocks:        103.183.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.crl
                          rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Apr 2025 00:15:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:68:ee:89:87:43:40:21:30:f4:8e:d7:ec:a8:06:18:8f:71:cd:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1553F19BBD3B70719E720005FDB3145CC910A1F
        Validity
            Not Before: Feb 19 03:55:02 2025 GMT
            Not After : Feb 18 04:00:02 2026 GMT
        Subject: CN=6A787CCAF7BCC2B9F9BF0C145940407F89684825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e3:a4:86:47:fc:96:a3:e4:85:f0:b0:5f:7b:
                    9a:8a:26:4a:ee:b7:2c:6b:50:46:94:b4:0c:8f:41:
                    64:fe:01:67:c6:93:89:83:2d:dc:e5:18:27:c6:a1:
                    d5:5c:d4:28:54:e3:e3:22:35:ae:d6:5a:32:03:49:
                    28:c8:6b:84:60:85:04:d4:56:19:95:a6:a2:96:b6:
                    99:a7:f6:90:5a:ff:75:88:bc:f0:b7:34:b2:94:56:
                    e3:f9:14:8d:82:19:4d:16:53:2b:87:c5:0d:8d:19:
                    55:18:4f:08:aa:84:42:d8:09:81:94:9d:98:c4:25:
                    9b:4a:c3:f2:3d:c4:6e:6d:03:60:4d:53:d8:79:1b:
                    4c:ad:59:9c:bb:fb:12:df:57:3a:62:6a:c7:af:1d:
                    f4:a1:2e:3a:b3:2f:5f:85:cd:b9:b7:ca:e7:8c:84:
                    5f:bb:e6:b7:ce:2b:15:ad:4b:eb:d9:8a:00:2c:76:
                    5e:e3:23:42:57:44:68:67:ad:66:ea:42:d8:d8:00:
                    d9:04:79:c5:00:c2:ca:af:78:eb:c6:35:3a:1f:52:
                    5a:2b:7d:5e:0a:e3:91:0f:b7:95:7b:62:82:10:84:
                    e4:fe:35:4b:73:81:06:c2:c9:0f:21:0b:dd:30:d8:
                    51:f4:a8:e6:0a:c5:c0:79:7b:cb:a8:ad:78:c9:93:
                    b5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:78:7C:CA:F7:BC:C2:B9:F9:BF:0C:14:59:40:40:7F:89:68:48:25
            X509v3 Authority Key Identifier:
                keyid:D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3130332e3138332e35392e302f32342d3234203d3e20313439343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:6f:91:1a:e6:c7:2c:f0:05:92:1a:54:c0:93:62:c9:84:0f:
         a7:ae:a5:d8:32:b0:53:5e:b6:9b:cb:1a:7b:13:dd:d1:09:96:
         aa:8d:99:48:32:95:39:61:45:0c:66:9b:29:ef:7e:7d:04:9d:
         31:fc:43:bb:2e:a4:88:44:09:9d:69:e3:ca:c5:4b:7c:46:25:
         6d:d2:44:5c:ec:00:3b:43:7e:2b:05:6d:78:41:5f:71:bf:91:
         dc:31:79:8d:1b:7b:63:b3:08:9c:fe:ac:17:e3:dc:83:03:6d:
         e5:38:73:70:f8:36:5a:6c:87:c4:b9:ae:2d:31:3e:49:d0:19:
         09:43:ec:e5:c4:ab:bf:67:eb:65:bf:b2:45:b2:68:18:dd:50:
         c5:99:ba:de:a7:79:fd:83:15:1e:37:9d:ca:1b:a6:03:9d:df:
         73:08:7d:e5:77:24:87:7e:18:82:58:fc:27:4c:1e:24:2d:2f:
         38:18:71:20:85:a1:27:63:f7:52:48:34:98:9d:29:00:4b:a3:
         8f:19:8c:42:cf:e2:f2:7a:e5:2b:52:13:15:fb:f2:3b:d9:30:
         69:23:2e:35:f2:b9:10:d3:0c:1b:14:3f:b0:ca:40:d2:00:f0:
         cc:7e:d8:8c:d0:5d:52:f2:c1:f5:df:9a:f1:31:fb:b0:55:99:
         43:a5:42:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:42:19 2025 by rpki-client