Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/3130332e3131322e34352e302f32342d3234203d3e20313332363639.roa
File:                     3130332e3131322e34352e302f32342d3234203d3e20313332363639.roa (raw, json)
Hash identifier:          Z4m+4VYQxa9asx7q0PvLa+6IIDMkLHF/pNBvi09vFpg=
Subject key identifier:   6B:95:6B:C1:98:07:86:FC:41:FD:9A:4A:21:A5:89:58:18:59:5A:BC
Certificate issuer:       /CN=0D0800F1516DA57BD9B9561FFA2A242AEB8F4853
Certificate serial:       47876EF9C28CABF974F2EB58A212DF30B815990F
Authority key identifier: 0D:08:00:F1:51:6D:A5:7B:D9:B9:56:1F:FA:2A:24:2A:EB:8F:48:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/3130332e3131322e34352e302f32342d3234203d3e20313332363639.roa
Signing time:             Tue 25 Feb 2025 09:00:00 +0000
ROA not before:           Tue 25 Feb 2025 08:55:00 +0000
ROA not after:            Tue 24 Feb 2026 09:00:00 +0000
asID:                     132669
IP address blocks:        103.112.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.crl
                          rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 14 Mar 2025 03:45:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:87:6e:f9:c2:8c:ab:f9:74:f2:eb:58:a2:12:df:30:b8:15:99:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D0800F1516DA57BD9B9561FFA2A242AEB8F4853
        Validity
            Not Before: Feb 25 08:55:00 2025 GMT
            Not After : Feb 24 09:00:00 2026 GMT
        Subject: CN=6B956BC1980786FC41FD9A4A21A5895818595ABC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:68:a7:92:eb:c1:53:d2:cf:d6:9d:f3:06:79:
                    37:04:c9:80:bf:95:90:a7:00:fb:1e:00:df:95:dc:
                    03:d9:84:f3:d8:b0:fe:de:14:6d:29:62:2e:ec:a8:
                    e7:9d:e9:ea:a8:e3:49:b1:6a:eb:a3:34:dd:de:5a:
                    ee:8f:e2:b2:75:3b:20:5b:5d:e6:1c:5e:ca:ba:e2:
                    0a:8f:e3:74:62:d4:b3:ed:43:66:26:dd:06:cd:4e:
                    0f:8b:33:f5:f4:c8:11:70:7c:8e:0d:94:56:c8:ae:
                    40:27:70:fe:5c:86:3c:e4:5e:2b:d8:38:89:72:71:
                    9c:b6:ae:d8:8d:b5:19:7d:82:9e:70:25:87:54:5c:
                    b3:b9:76:a5:44:01:69:6c:f8:64:2a:5a:1a:a4:e2:
                    14:35:42:74:5e:fd:db:bb:40:b8:74:ef:b1:b8:dd:
                    5c:6b:88:19:3c:09:21:d5:06:a1:18:9e:4e:2d:42:
                    52:80:71:5f:ef:01:47:03:59:62:30:85:bf:a4:92:
                    5b:ee:4a:1e:6d:9d:78:7a:52:80:4f:54:af:0d:a0:
                    28:2a:fc:7e:31:5c:9c:52:b8:56:ad:b3:a9:44:d2:
                    bb:30:54:8d:bb:d7:e8:19:7a:bd:17:d3:d5:23:2e:
                    fc:89:0d:22:c1:81:a2:71:6b:a9:c8:54:ed:02:fa:
                    d3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:95:6B:C1:98:07:86:FC:41:FD:9A:4A:21:A5:89:58:18:59:5A:BC
            X509v3 Authority Key Identifier:
                keyid:0D:08:00:F1:51:6D:A5:7B:D9:B9:56:1F:FA:2A:24:2A:EB:8F:48:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/3130332e3131322e34352e302f32342d3234203d3e20313332363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:32:1b:d3:6b:d7:39:e8:bc:fd:87:a1:29:65:07:5a:33:cf:
         25:55:19:00:28:d6:ab:3a:fe:2e:a7:61:ba:77:7a:e4:32:d0:
         5d:99:cf:1a:78:06:1c:99:b9:9c:07:0f:27:d8:da:bb:45:6a:
         e1:bc:71:db:ce:56:e4:08:0b:12:5f:c7:98:a5:dd:e4:60:d2:
         23:54:91:bd:74:7a:ce:92:66:b3:73:cc:ca:63:6f:b7:43:b4:
         d9:e7:81:70:20:f3:d3:2b:c9:e0:f3:99:5e:5e:88:bc:32:50:
         16:05:2a:6c:59:8f:eb:2b:68:04:bd:fa:37:aa:52:3c:67:71:
         5c:a1:e0:88:09:e9:8a:bb:3d:9c:33:bb:76:46:83:9c:df:3a:
         79:22:5b:92:57:88:38:52:39:ea:d9:41:94:b7:fc:8f:9e:2c:
         dc:73:30:49:2f:f4:1f:47:4b:ea:8f:a6:b9:03:23:a3:ff:c3:
         c0:ca:68:2e:20:24:72:b0:b7:c8:43:bc:58:34:ec:cc:49:2c:
         17:6f:a4:fb:f5:fe:12:9e:ae:9d:d2:51:ed:41:2d:ea:4f:87:
         28:31:2c:f3:ef:c8:d4:d2:21:99:15:46:d9:29:b0:01:96:3e:
         7b:92:e0:13:43:92:c7:fa:de:dc:58:38:d0:ca:dc:96:e7:6a:
         52:ca:5a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:02:41 2025 by rpki-client