Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/3130332e3139302e35312e302f32342d3234203d3e2039333431.roa
File:                     3130332e3139302e35312e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          Alr3MmF3FComiYShgHs/7REcddrGc/AGrj1Fejo7KUI=
Subject key identifier:   93:BA:BD:A0:3F:15:68:71:CE:3F:0A:FC:A5:96:DF:0B:D1:6E:8E:A4
Certificate issuer:       /CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7
Certificate serial:       2530F8410BF0C34C5124D1B4E56C5A36DE189086
Authority key identifier: 19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/3130332e3139302e35312e302f32342d3234203d3e2039333431.roa
Signing time:             Fri 23 May 2025 08:01:06 +0000
ROA not before:           Fri 23 May 2025 07:56:06 +0000
ROA not after:            Fri 22 May 2026 08:01:06 +0000
asID:                     9341
IP address blocks:        103.190.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl
                          rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 23:56:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:30:f8:41:0b:f0:c3:4c:51:24:d1:b4:e5:6c:5a:36:de:18:90:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7
        Validity
            Not Before: May 23 07:56:06 2025 GMT
            Not After : May 22 08:01:06 2026 GMT
        Subject: CN=93BABDA03F156871CE3F0AFCA596DF0BD16E8EA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:db:f9:05:ba:d9:68:ff:7d:d7:fe:3a:6c:99:
                    67:1a:0e:09:2a:0f:bc:00:80:ec:32:92:0c:5a:75:
                    de:fa:eb:55:5d:d5:ec:a6:18:d6:37:8d:f1:b7:7f:
                    38:88:7a:f6:a9:ab:e9:62:44:fd:86:b7:03:e3:a3:
                    f4:64:f4:6c:c0:3f:87:cb:e0:c3:58:68:40:a2:c7:
                    3a:21:b3:a6:3e:33:3b:5d:d0:d1:cb:b9:02:8d:34:
                    58:52:59:b8:76:96:a7:92:70:83:59:bc:0f:82:b3:
                    0e:ac:f0:b3:95:31:3e:f2:c1:9a:e6:fd:2d:3f:9a:
                    cf:8b:31:99:73:8d:be:1e:eb:c6:ac:28:81:13:95:
                    7f:00:1e:1f:da:9d:32:30:44:cd:ff:32:82:f7:fc:
                    f8:8c:b1:ae:dc:72:b6:fe:86:7a:15:be:99:96:00:
                    cd:9e:d8:f5:90:ed:c1:97:99:f2:02:95:12:c6:9b:
                    a3:08:8f:95:e3:ea:c4:c2:93:10:c7:05:a8:da:97:
                    74:62:74:dd:08:85:ec:cf:23:0e:f7:f3:a7:cb:40:
                    4f:84:25:c2:b0:aa:a5:e8:a6:3c:fe:21:5f:99:6d:
                    26:43:a6:4b:fc:fd:54:82:d9:ec:51:3e:5b:13:ec:
                    00:39:e5:37:64:8c:d6:23:b9:07:ed:c5:f7:f9:de:
                    9a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:BA:BD:A0:3F:15:68:71:CE:3F:0A:FC:A5:96:DF:0B:D1:6E:8E:A4
            X509v3 Authority Key Identifier:
                keyid:19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/3130332e3139302e35312e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:3d:ac:19:9a:a1:94:df:ce:32:97:4e:3b:1d:7c:44:7d:bb:
         3c:ae:d3:69:70:be:5e:47:9a:44:10:f9:99:74:8b:22:66:c4:
         fe:5d:cf:be:07:3c:0c:3c:95:91:7f:a9:ba:7a:c0:d2:e8:c6:
         cf:35:6b:e0:1b:99:f1:bc:38:46:ce:3f:18:ca:07:dc:1a:a6:
         43:e6:a5:84:58:d6:40:ec:41:5d:37:d0:ea:0b:9d:6f:ae:e0:
         5a:96:5a:b8:7a:ff:05:a1:b9:be:80:71:8c:dc:12:4d:43:de:
         b1:4d:db:58:8d:7a:2c:46:01:39:50:96:9c:ae:ff:b2:59:39:
         ea:b9:be:10:6b:80:32:00:04:6c:36:78:74:a5:9b:30:d3:31:
         39:76:0d:c7:c9:1a:a8:48:92:3a:5d:74:0e:b9:68:19:58:ba:
         8e:ea:b5:db:c2:48:08:bc:4a:bd:65:41:5f:8b:1b:9a:12:bd:
         15:81:70:94:01:98:3c:2e:21:12:be:ea:73:ef:96:29:71:ab:
         c5:af:7f:f5:c7:ed:d3:50:86:90:4f:ab:35:a0:8b:e4:6c:5e:
         13:6e:43:e5:14:d9:58:1e:d7:99:fb:28:71:7d:c6:24:ae:a7:
         c5:ea:3e:60:de:82:92:d2:ef:be:a0:2f:2f:55:dd:75:30:b0:
         ca:23:28:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:35:16 2025 by rpki-client