Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/3130332e3134312e3235342e302f32342d3234203d3e20313331373639.roa
File:                     3130332e3134312e3235342e302f32342d3234203d3e20313331373639.roa (raw, json)
Hash identifier:          3jV7osfpuzM2RdznZ0/4uwu+i/NyUjZA48yClTEGD1w=
Subject key identifier:   83:1F:D8:DB:4B:0E:43:14:71:1F:81:98:53:98:33:D0:94:03:13:8B
Certificate issuer:       /CN=B1015FDC3ABDC9EC594F6E8A82A116F769CA5665
Certificate serial:       1CA886CA17D145FD169D6389A643DE98763349C4
Authority key identifier: B1:01:5F:DC:3A:BD:C9:EC:59:4F:6E:8A:82:A1:16:F7:69:CA:56:65
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/3130332e3134312e3235342e302f32342d3234203d3e20313331373639.roa
Signing time:             Mon 03 Feb 2025 09:02:22 +0000
ROA not before:           Mon 03 Feb 2025 08:57:22 +0000
ROA not after:            Mon 02 Feb 2026 09:02:22 +0000
asID:                     131769
IP address blocks:        103.141.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.crl
                          rsync://repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Apr 2025 21:33:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:a8:86:ca:17:d1:45:fd:16:9d:63:89:a6:43:de:98:76:33:49:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1015FDC3ABDC9EC594F6E8A82A116F769CA5665
        Validity
            Not Before: Feb  3 08:57:22 2025 GMT
            Not After : Feb  2 09:02:22 2026 GMT
        Subject: CN=831FD8DB4B0E4314711F8198539833D09403138B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d1:e9:55:29:81:2c:f0:93:3b:d1:d7:61:e5:
                    77:85:43:16:02:86:c9:de:5a:e0:ef:75:40:d2:40:
                    c5:70:ea:b3:4a:4f:78:85:87:0f:d8:4a:3a:b1:25:
                    d8:35:04:f9:86:54:5f:05:d0:00:70:e1:e3:a7:17:
                    6b:72:7b:38:04:7d:b7:f6:c9:bc:65:da:22:39:22:
                    da:70:26:db:86:2e:34:59:7a:81:1f:81:2f:41:93:
                    c6:b6:0b:63:04:56:3a:1d:fb:45:03:ce:fa:09:cf:
                    d4:72:f6:a5:62:a5:7b:f0:61:42:89:c6:4d:45:a3:
                    cb:ec:40:fa:26:b1:0a:2b:25:76:aa:3b:f5:ef:ce:
                    a6:94:f8:2a:ef:26:22:78:26:4f:2f:27:ee:7b:ad:
                    b0:8c:fb:61:6f:26:bf:0e:d7:0f:91:9d:cb:fb:da:
                    f9:e8:3e:1b:81:89:5c:e2:34:7d:58:60:8b:36:e7:
                    50:5e:67:8c:16:a5:0d:55:f2:c0:1e:aa:6c:6b:e8:
                    15:60:ed:7a:c3:ed:16:1a:3e:5d:9f:f4:6e:ca:4e:
                    20:3e:82:5b:b2:69:57:63:67:a5:88:ea:b9:e8:8a:
                    e9:a9:f0:20:4f:a8:ca:29:8a:af:21:3d:82:27:b4:
                    eb:7c:94:49:c4:7f:9d:79:03:7b:6f:6c:2d:b6:af:
                    a3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:1F:D8:DB:4B:0E:43:14:71:1F:81:98:53:98:33:D0:94:03:13:8B
            X509v3 Authority Key Identifier:
                keyid:B1:01:5F:DC:3A:BD:C9:EC:59:4F:6E:8A:82:A1:16:F7:69:CA:56:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1015FDC3ABDC9EC594F6E8A82A116F769CA5665.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ed850a8-abb9-4482-a5bc-54d79eb7f323/0/3130332e3134312e3235342e302f32342d3234203d3e20313331373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:97:ae:29:d7:f9:81:41:92:28:46:2b:3b:9e:ab:26:8a:33:
         7a:43:d5:af:ef:71:8a:55:d5:59:38:d4:d5:6f:81:70:66:b0:
         c5:c4:4a:c0:51:d2:05:30:9b:a3:f4:8f:89:e9:30:5e:48:25:
         77:99:b5:ad:dc:24:ea:19:41:98:0c:f5:d5:96:c2:a6:b5:f8:
         c3:a3:6b:a4:f9:8d:1e:b9:c4:6a:16:e4:91:74:a4:ec:09:cd:
         a4:28:66:10:40:d4:ec:54:a2:ee:3d:09:79:05:7f:25:9c:97:
         b2:04:36:49:c6:af:73:cf:68:19:60:09:d7:5e:e4:3b:39:78:
         29:26:4a:a1:de:87:e7:af:01:1b:cf:1d:fa:0a:9e:98:89:4c:
         c2:8e:ef:27:13:d6:80:9e:fe:c6:53:11:f7:22:60:ba:3b:c0:
         5e:86:58:4f:fe:e6:0b:d9:a0:89:e0:dd:fe:30:43:fe:a9:e5:
         ff:05:76:f0:fc:87:42:3a:4c:93:c1:05:59:c5:54:bf:5f:c7:
         f4:cb:33:d3:52:26:0c:50:9c:3e:ef:16:9b:ce:bb:67:bd:44:
         03:91:5d:e6:9c:77:27:05:78:fe:cd:21:0a:c8:16:f5:c7:74:
         59:44:43:72:73:e2:94:64:1d:a4:1e:8b:3f:95:f7:04:57:a9:
         d2:4c:e1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:02:41 2025 by rpki-client