Route Origin Authorization

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/2/3130332e3134342e3137362e302f32332d3234203d3e203533333536.roa
File:                     3130332e3134342e3137362e302f32332d3234203d3e203533333536.roa (raw, json)
Hash identifier:          ElcHnFM/UCxOj4yIfbMit+4xP8v3M/ns7VwTsSsiYxA=
Subject key identifier:   3D:50:09:CC:88:65:D7:09:E8:D4:D7:39:E4:20:9F:9B:9D:2A:A1:6B
Certificate issuer:       /CN=A912C8360000/serialNumber=5D35939557110CC43429AE301F7CEF0E5889942B
Certificate serial:       5F636FC8EE40665C6FC40855E11E00B96A64AFEB
Authority key identifier: 5D:35:93:95:57:11:0C:C4:34:29:AE:30:1F:7C:EF:0E:58:89:94:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/3130332e3134342e3137362e302f32332d3234203d3e203533333536.roa
Signing time:             Tue 19 May 2026 04:03:16 +0000
ROA not before:           Tue 19 May 2026 03:58:16 +0000
ROA not after:            Tue 18 May 2027 04:03:16 +0000
asID:                     53356
IP address blocks:        103.144.176.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 02:27:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:63:6f:c8:ee:40:66:5c:6f:c4:08:55:e1:1e:00:b9:6a:64:af:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C8360000, serialNumber=5D35939557110CC43429AE301F7CEF0E5889942B
        Validity
            Not Before: May 19 03:58:16 2026 GMT
            Not After : May 18 04:03:16 2027 GMT
        Subject: CN=3D5009CC8865D709E8D4D739E4209F9B9D2AA16B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:14:ac:e5:1d:54:62:1e:bf:e7:f7:0f:b5:71:
                    2b:69:02:31:37:bc:ee:0a:2d:7c:4d:0d:0b:7b:26:
                    34:03:e3:0b:3e:cf:d6:55:7b:8f:12:7a:a0:80:67:
                    93:50:59:63:3b:34:f0:fb:f1:19:6e:ee:90:97:a5:
                    5c:91:99:8c:5b:14:4e:f4:ec:3a:28:18:3c:de:31:
                    eb:52:87:46:27:ce:e5:13:4b:62:df:e3:89:69:29:
                    b3:3a:d1:f0:cd:fd:8d:63:86:e8:ec:b2:a6:48:b1:
                    6c:15:b2:da:2b:79:5e:f9:8a:02:1e:1c:1d:8c:c5:
                    7d:78:f1:93:e5:d3:ce:9f:f6:be:01:f1:0b:6c:be:
                    cc:08:61:11:a1:5a:0b:e6:e0:2a:cb:a7:57:af:a1:
                    d8:1b:93:b6:ad:00:97:e5:68:3d:9e:1b:25:f1:fa:
                    e3:fb:3f:83:e5:28:5c:d6:1f:1f:d8:ab:80:3e:4e:
                    e7:f7:22:1b:1f:e8:eb:fa:88:b7:74:95:82:1f:55:
                    d0:d9:58:95:f0:02:e2:78:92:25:57:0e:a1:e2:79:
                    e6:5c:4f:3d:7f:8c:eb:93:af:7e:4b:b0:38:ef:2b:
                    57:a0:6e:33:6a:49:14:ff:3c:bb:4d:ba:be:53:77:
                    8e:14:5e:4f:c1:e0:f5:46:bf:89:48:92:d5:14:3e:
                    cb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:50:09:CC:88:65:D7:09:E8:D4:D7:39:E4:20:9F:9B:9D:2A:A1:6B
            X509v3 Authority Key Identifier:
                keyid:5D:35:93:95:57:11:0C:C4:34:29:AE:30:1F:7C:EF:0E:58:89:94:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/3130332e3134342e3137362e302f32332d3234203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:8b:e6:cb:4d:81:18:f7:0e:ad:b4:9d:25:e0:7d:ec:69:18:
         15:ee:b1:53:1c:9b:fe:ad:ff:da:da:9b:f1:db:e5:1f:5b:98:
         e4:3c:52:09:bc:d1:3f:7a:0e:af:41:31:4e:b4:50:3a:f1:70:
         87:10:4e:b3:99:f0:5c:ff:67:8d:75:36:11:10:99:fc:ad:93:
         9b:d3:77:bd:11:62:c8:06:5d:49:fb:6b:4d:82:dd:be:eb:94:
         f1:9c:bc:54:e8:ef:ee:f9:03:b6:49:66:cc:6a:21:3a:72:3f:
         89:c4:23:65:1c:7a:30:22:bf:4f:49:b0:04:76:bf:78:7d:f5:
         ba:d6:1f:91:03:1a:7d:ba:c9:9d:b9:1a:c6:16:20:4a:b8:62:
         bb:62:38:63:5e:72:f8:e0:29:19:d0:65:79:4a:b6:16:6d:0d:
         fc:af:d1:cd:a5:e8:78:34:24:24:5d:22:8d:96:71:6c:3f:37:
         7a:05:c5:70:b5:e5:fd:a7:30:59:cc:1e:a5:7e:4e:d2:87:8a:
         3d:64:d1:0d:b2:33:d6:11:e6:d4:64:ac:2d:45:05:b5:fd:a1:
         59:3d:11:ab:df:62:81:eb:25:fa:58:df:7c:54:1f:ab:71:89:
         e9:fb:44:ad:23:d0:13:d2:64:cc:9d:8b:b4:ab:d3:22:f8:2d:
         4c:23:58:eb
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgIUX2NvyO5AZlxvxAhV4R4AuWpkr+swDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMkM4MzYwMDAwMTEwLwYDVQQFEyg1RDM1OTM5NTU3
MTEwQ0M0MzQyOUFFMzAxRjdDRUYwRTU4ODk5NDJCMB4XDTI2MDUxOTAzNTgxNloX
DTI3MDUxODA0MDMxNlowMzExMC8GA1UEAxMoM0Q1MDA5Q0M4ODY1RDcwOUU4RDRE
NzM5RTQyMDlGOUI5RDJBQTE2QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALoUrOUdVGIev+f3D7VxK2kCMTe87gotfE0NC3smNAPjCz7P1lV7jxJ6oIBn
k1BZYzs08PvxGW7ukJelXJGZjFsUTvTsOigYPN4x61KHRifO5RNLYt/jiWkpszrR
8M39jWOG6OyypkixbBWy2it5XvmKAh4cHYzFfXjxk+XTzp/2vgHxC2y+zAhhEaFa
C+bgKsunV6+h2BuTtq0Al+VoPZ4bJfH64/s/g+UoXNYfH9irgD5O5/ciGx/o6/qI
t3SVgh9V0NlYlfAC4niSJVcOoeJ55lxPPX+M65OvfkuwOO8rV6BuM2pJFP88u026
vlN3jhReT8Hg9Ua/iUiS1RQ+yykCAwEAAaOCAhIwggIOMB0GA1UdDgQWBBQ9UAnM
iGXXCejU1znkIJ+bnSqhazAfBgNVHSMEGDAWgBRdNZOVVxEMxDQprjAffO8OWImU
KzAOBgNVHQ8BAf8EBAMCB4AwcQYDVR0fBGowaDBmoGSgYoZgcnN5bmM6Ly9ycGtp
LmFkbWluLmZyZWVyYW5nZWNsb3VkLmNvbS9yZXBvL0ZSQy1DQS8yLzVEMzU5Mzk1
NTcxMTBDQzQzNDI5QUUzMDFGN0NFRjBFNTg4OTk0MkIuY3JsMH4GCCsGAQUFBwEB
BHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0
b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL1hUV1RsVmNSRE1R
MEthNHdIM3p2RGxpSmxDcy5jZXIwgY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUH
MAuGcHJzeW5jOi8vcnBraS5hZG1pbi5mcmVlcmFuZ2VjbG91ZC5jb20vcmVwby9G
UkMtQ0EvMi8zMTMwMzMyZTMxMzQzNDJlMzEzNzM2MmUzMDJmMzIzMzJkMzIzNDIw
M2QzZTIwMzUzMzMzMzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWeQsDANBgkqhkiG9w0BAQsFAAOC
AQEAU4vmy02BGPcOrbSdJeB97GkYFe6xUxyb/q3/2tqb8dvlH1uY5DxSCbzRP3oO
r0ExTrRQOvFwhxBOs5nwXP9njXU2ERCZ/K2Tm9N3vRFiyAZdSftrTYLdvuuU8Zy8
VOjv7vkDtklmzGohOnI/icQjZRx6MCK/T0mwBHa/eH31utYfkQMafbrJnbkaxhYg
Srhiu2I4Y15y+OApGdBleUq2Fm0N/K/RzaXoeDQkJF0ijZZxbD83egXFcLXl/acw
WcwepX5O0oeKPWTRDbIz1hHm1GSsLUUFtf2hWT0Rq99igesl+ljffFQfq3GJ6ftE
rSPQE9JkzJ2LtKvTIvgtTCNY6w==
-----END CERTIFICATE-----
Generated at Thu Jun 4 11:08:52 2026 by rpki-client