Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/3130332e35332e302e302f32322d3234203d3e203633383733.roa
File:                     3130332e35332e302e302f32322d3234203d3e203633383733.roa (raw, json)
Hash identifier:          EL5dwlPuAnRs0Kif8+4P+OmtMjmZ41AfT1OvSsOeIrQ=
Subject key identifier:   7E:B9:C7:CB:3D:FA:B3:6F:FC:19:6B:40:10:E2:BD:E7:B9:1F:F0:CD
Certificate issuer:       /CN=6E740E0191A423D6D9A0908C8B778DD2416F842E
Certificate serial:       566B2D74ADDA3CAFD113F3B75A59A288D873187D
Authority key identifier: 6E:74:0E:01:91:A4:23:D6:D9:A0:90:8C:8B:77:8D:D2:41:6F:84:2E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E740E0191A423D6D9A0908C8B778DD2416F842E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/3130332e35332e302e302f32322d3234203d3e203633383733.roa
Signing time:             Mon 02 Jun 2025 02:04:40 +0000
ROA not before:           Mon 02 Jun 2025 01:59:40 +0000
ROA not after:            Mon 01 Jun 2026 02:04:40 +0000
asID:                     63873
IP address blocks:        103.53.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6E740E0191A423D6D9A0908C8B778DD2416F842E.crl
                          rsync://repo-rpki.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6E740E0191A423D6D9A0908C8B778DD2416F842E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E740E0191A423D6D9A0908C8B778DD2416F842E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 03:25:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:6b:2d:74:ad:da:3c:af:d1:13:f3:b7:5a:59:a2:88:d8:73:18:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E740E0191A423D6D9A0908C8B778DD2416F842E
        Validity
            Not Before: Jun  2 01:59:40 2025 GMT
            Not After : Jun  1 02:04:40 2026 GMT
        Subject: CN=7EB9C7CB3DFAB36FFC196B4010E2BDE7B91FF0CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:51:66:6b:75:40:3b:f2:55:91:0a:5d:41:33:
                    1c:d2:f6:95:c0:72:81:2c:b7:36:fa:39:6e:89:51:
                    2c:ae:6f:88:08:24:e3:60:f5:aa:10:2e:28:ad:32:
                    0d:67:b9:10:78:6e:61:94:68:7a:ab:dd:9d:66:b6:
                    cf:1b:bc:10:63:13:e3:4e:46:8e:73:81:30:b9:3c:
                    46:1b:b9:54:82:87:92:39:1b:4f:34:23:a2:19:9b:
                    e1:4f:48:0e:84:ed:db:ab:cf:e2:cc:80:fe:3a:37:
                    36:40:26:4b:1a:01:7b:4a:53:01:06:d2:57:f3:19:
                    56:74:7a:75:0c:a8:c7:80:9a:63:82:10:f8:7d:ff:
                    ef:45:8f:1b:23:fc:19:4b:55:0e:00:07:e7:64:4f:
                    12:05:45:19:43:2f:22:1f:0c:12:ef:d0:4d:75:b9:
                    89:99:f5:36:db:3e:9a:61:58:1b:46:58:f3:0c:82:
                    a7:26:fa:c3:22:f8:48:d9:49:5c:f1:ae:d0:07:0a:
                    71:4e:d7:c1:f9:fc:d6:a0:13:7f:f6:f4:76:7a:2c:
                    5b:b3:cb:ef:8f:e6:63:94:80:23:3a:ba:d1:63:53:
                    1e:eb:4b:dd:83:6b:a5:b8:05:3a:bd:9b:67:ab:bf:
                    f2:ed:54:36:0b:c0:5b:0b:32:af:02:be:2e:e1:1b:
                    f6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B9:C7:CB:3D:FA:B3:6F:FC:19:6B:40:10:E2:BD:E7:B9:1F:F0:CD
            X509v3 Authority Key Identifier:
                keyid:6E:74:0E:01:91:A4:23:D6:D9:A0:90:8C:8B:77:8D:D2:41:6F:84:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6E740E0191A423D6D9A0908C8B778DD2416F842E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E740E0191A423D6D9A0908C8B778DD2416F842E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/3130332e35332e302e302f32322d3234203d3e203633383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.53.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:c3:b2:8e:5e:ce:e7:a4:0d:09:52:9a:3b:4d:fa:dd:83:88:
         8c:43:f6:78:28:72:0d:27:57:bc:d9:7e:25:be:13:50:8e:9e:
         74:f8:f2:b6:5f:11:bb:2c:9c:8a:43:db:b8:9d:31:1c:fd:89:
         a3:de:49:eb:a4:10:ed:64:ba:00:e3:1e:0a:af:36:16:b0:b9:
         b3:5c:e7:ff:f4:55:d1:1d:d8:e7:aa:0f:8a:19:43:51:d4:a1:
         69:3e:c1:b6:3b:e9:8c:12:ab:9b:63:9a:22:74:e6:c0:af:ce:
         6a:81:ac:6b:45:bd:f0:83:c1:65:6d:7e:9e:61:98:f7:b9:45:
         8c:60:79:42:ae:ca:96:9c:cf:f0:d6:a9:05:b5:48:09:3a:a1:
         c3:4a:8c:66:60:26:9f:c0:c5:c8:41:ac:6c:c7:2f:a6:1c:17:
         2f:c0:19:68:d7:d4:60:db:82:95:43:fb:b4:f8:36:bf:46:ff:
         2f:1a:29:8d:b6:da:02:fe:bf:6f:69:3f:55:64:e7:1e:bb:ff:
         9a:8b:33:77:1a:22:d0:7c:67:22:fc:39:1f:ca:48:76:4d:1a:
         c1:0e:90:63:05:88:ad:22:57:ff:e5:98:7b:73:85:36:94:d2:
         b4:8f:8e:c3:68:4e:57:95:bd:39:d5:40:13:11:cf:42:5c:c6:
         21:03:16:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:36:12 2025 by rpki-client