Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/3130332e3139302e35302e302f32342d3234203d3e2039333431.roa
File:                     3130332e3139302e35302e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          pIxViXZoycBV8A7CIi1fmiiQDu+3Ugcswhk6WPEdvN8=
Subject key identifier:   48:B7:5E:D1:29:1D:01:B4:80:D9:7E:B8:66:A4:1B:D2:6E:C3:32:7D
Certificate issuer:       /CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7
Certificate serial:       4B5835C5EE6595A8CD9714E30260BD06AB556448
Authority key identifier: 19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/3130332e3139302e35302e302f32342d3234203d3e2039333431.roa
Signing time:             Fri 23 May 2025 08:01:05 +0000
ROA not before:           Fri 23 May 2025 07:56:05 +0000
ROA not after:            Fri 22 May 2026 08:01:05 +0000
asID:                     9341
IP address blocks:        103.190.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl
                          rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 23:56:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:58:35:c5:ee:65:95:a8:cd:97:14:e3:02:60:bd:06:ab:55:64:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7
        Validity
            Not Before: May 23 07:56:05 2025 GMT
            Not After : May 22 08:01:05 2026 GMT
        Subject: CN=48B75ED1291D01B480D97EB866A41BD26EC3327D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a7:ec:ad:0d:29:c0:bc:45:e9:4e:20:d2:ef:
                    8d:73:55:df:f9:5b:bc:f1:20:35:41:9d:75:5d:16:
                    bd:31:85:4c:f6:0f:c1:4c:92:b3:3b:4f:82:7e:86:
                    9b:63:2b:cc:83:70:d8:87:3b:88:3d:39:69:e2:74:
                    36:96:b8:fb:fc:68:14:45:3f:f0:7d:94:15:16:2f:
                    84:f3:20:65:0e:4f:d4:a0:82:ed:b4:98:b0:c7:97:
                    9f:75:56:06:e0:14:be:f2:c1:f7:d8:a6:d0:ca:5c:
                    54:6d:fe:91:a3:c3:ac:c2:f8:ad:8a:af:e2:d8:45:
                    1e:63:bf:9c:31:8d:0d:8c:11:f4:8f:a3:70:fc:df:
                    a4:b2:1c:5a:18:82:d9:f4:96:ae:3f:42:2f:4d:b9:
                    2b:d6:82:ba:e3:c3:ba:14:da:80:3b:e8:b1:54:9a:
                    bd:fd:4f:68:76:4a:84:7e:6d:ea:3a:4a:3f:e3:27:
                    08:c3:68:22:51:18:f0:fd:20:64:f6:5b:ae:53:84:
                    84:f9:78:34:dd:38:3e:92:61:2d:d0:f4:a4:28:4d:
                    4f:3d:00:ce:ad:2d:33:c2:e8:0a:61:d4:bc:22:61:
                    35:13:04:68:a7:a0:88:57:e3:39:08:20:56:01:08:
                    00:66:c4:5c:a6:f6:bb:a0:3f:43:2a:b2:7b:03:bc:
                    27:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B7:5E:D1:29:1D:01:B4:80:D9:7E:B8:66:A4:1B:D2:6E:C3:32:7D
            X509v3 Authority Key Identifier:
                keyid:19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/3130332e3139302e35302e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:23:64:8d:a7:5a:6c:1f:df:65:f9:f8:2b:5f:a8:b5:8d:aa:
         f3:7e:aa:fb:86:95:a8:4a:6e:e0:8a:7b:4b:5c:f8:53:44:70:
         14:15:a1:d3:6b:79:34:f0:62:fa:be:16:73:9e:08:17:a4:4a:
         67:14:72:dd:89:e5:2f:6a:ab:d6:d5:e2:76:4e:fd:d9:8d:0f:
         3b:aa:e1:d9:ee:e2:69:4d:f4:bc:4c:12:e7:89:3f:51:11:67:
         69:c5:34:4f:e3:a3:60:55:f6:0d:d3:d6:1d:07:b0:41:35:e4:
         de:f0:b1:e8:7b:29:c5:de:48:ef:68:f3:be:e5:8e:66:9b:03:
         30:76:3e:67:89:0e:54:cf:c7:b0:87:f5:b4:51:b2:44:a6:9b:
         9a:cf:a0:78:9d:42:2e:b9:3c:d0:57:6c:92:fe:d0:bf:2d:45:
         fc:e2:9d:44:e1:1e:4a:02:a5:1b:c7:2b:5e:28:4c:f6:1e:bb:
         e9:d6:6e:83:47:1b:35:ef:c0:93:52:15:8f:e1:37:85:cc:50:
         37:d0:4f:a1:45:2e:71:fc:2a:0d:16:4a:fb:5b:2d:bf:ac:82:
         9e:c7:6b:fe:07:ec:14:05:80:71:3d:11:e9:ae:40:f9:02:e3:
         78:ee:45:b5:f7:8f:50:91:03:88:5d:c3:22:d1:12:d3:0d:e2:
         57:ca:cc:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:31:39 2025 by rpki-client