Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/3130332e3131302e31302e302f32342d3234203d3e20313331373137.roa
File:                     3130332e3131302e31302e302f32342d3234203d3e20313331373137.roa (raw, json)
Hash identifier:          Gcf2m6wvxledkwR1qQNWFpogqDCtyqIrxx7PKSay3xY=
Subject key identifier:   9C:F6:91:CF:14:B6:13:4B:54:60:46:80:D4:FD:41:25:B1:6E:8B:1B
Certificate issuer:       /CN=2FB994CD1282292E6D2907FCECD7F9E472F49985
Certificate serial:       55C9391EC02A10E38F02137F6842041950ACE5B4
Authority key identifier: 2F:B9:94:CD:12:82:29:2E:6D:29:07:FC:EC:D7:F9:E4:72:F4:99:85
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/3130332e3131302e31302e302f32342d3234203d3e20313331373137.roa
Signing time:             Mon 02 Jun 2025 02:04:24 +0000
ROA not before:           Mon 02 Jun 2025 01:59:24 +0000
ROA not after:            Mon 01 Jun 2026 02:04:24 +0000
asID:                     131717
IP address blocks:        103.110.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.crl
                          rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 19:13:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:c9:39:1e:c0:2a:10:e3:8f:02:13:7f:68:42:04:19:50:ac:e5:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FB994CD1282292E6D2907FCECD7F9E472F49985
        Validity
            Not Before: Jun  2 01:59:24 2025 GMT
            Not After : Jun  1 02:04:24 2026 GMT
        Subject: CN=9CF691CF14B6134B54604680D4FD4125B16E8B1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:67:3c:53:91:d1:74:12:f8:d6:66:c6:8e:c0:
                    b6:d4:18:c5:76:71:d6:75:3a:37:b7:76:b9:da:44:
                    5e:6f:29:27:5b:6a:39:dd:12:af:79:0d:18:6e:92:
                    9b:dc:3a:84:ad:87:5a:4c:fa:1f:c9:fc:80:28:c9:
                    d9:c6:d0:61:11:64:af:21:7a:5c:f2:bb:6f:23:19:
                    f3:6c:9b:15:58:2e:2c:f1:e3:ad:b8:ba:b2:05:e8:
                    a4:3b:03:43:33:2e:92:a2:12:6b:ad:22:df:7f:40:
                    ef:bd:51:ab:15:b1:70:01:61:ac:4e:12:c6:6b:92:
                    ef:2f:d7:64:2a:69:da:7b:ad:72:a1:b7:f8:4b:f4:
                    7a:c0:75:2d:45:f3:cd:44:40:2b:d6:a0:10:d2:0c:
                    b4:05:8e:54:ef:c6:53:c4:8e:f4:72:88:cd:5b:8c:
                    4c:b1:7d:5e:fd:45:94:57:c6:86:9f:fc:9e:a1:06:
                    43:c7:7f:03:2e:22:e7:e2:83:cd:98:96:6e:05:9c:
                    33:bb:08:0a:b4:54:20:17:54:b9:d8:5f:3e:3f:74:
                    12:4e:e2:99:e2:39:59:80:a5:fe:8f:85:d6:65:92:
                    9b:dc:50:bb:c9:df:8d:a3:dc:fb:54:46:45:1f:ad:
                    24:22:cf:30:86:3c:1b:91:74:ed:2e:18:c1:c6:96:
                    aa:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F6:91:CF:14:B6:13:4B:54:60:46:80:D4:FD:41:25:B1:6E:8B:1B
            X509v3 Authority Key Identifier:
                keyid:2F:B9:94:CD:12:82:29:2E:6D:29:07:FC:EC:D7:F9:E4:72:F4:99:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/3130332e3131302e31302e302f32342d3234203d3e20313331373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:4b:27:6d:27:62:6c:a0:7c:9a:36:fb:2e:57:e4:19:1d:d2:
         dc:a7:ed:bc:d4:e7:d5:0b:5c:29:a1:e5:d4:37:5c:ae:3e:36:
         a7:d6:c7:d5:4e:17:13:e2:b3:9b:7b:57:16:dc:d1:68:4d:2e:
         52:0b:24:52:4a:b6:75:37:7c:dd:fc:91:9f:6e:dc:d7:13:c2:
         f2:0a:f9:2f:2f:39:46:ef:ba:55:72:5b:57:05:7b:da:27:12:
         51:57:11:54:41:69:c3:bf:d2:f3:83:a9:79:ac:46:06:5f:5f:
         7d:f2:89:2d:a3:c7:4c:77:e4:dc:35:a1:53:d2:c8:16:87:7d:
         61:ba:24:8b:6c:5d:d7:a7:50:fe:4a:a2:a1:ee:f0:92:b7:10:
         59:20:a2:30:fa:42:8a:58:64:ac:b4:49:19:b5:21:36:ef:18:
         ed:33:bb:45:f1:b9:19:79:c1:e1:41:e1:fc:3e:7b:5a:51:45:
         c5:bc:ca:69:84:8e:05:0d:b3:fa:38:6a:67:bf:78:85:e9:1b:
         18:46:28:77:6c:74:59:b4:d5:d2:2f:17:07:0c:43:1d:bc:80:
         56:35:09:e2:ba:5e:2d:69:35:3a:d9:73:77:87:70:35:2e:df:
         32:c6:f2:9d:a8:f6:a4:fb:3d:be:91:ce:21:80:c8:fe:e3:6f:
         35:cb:08:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:06:40 2025 by rpki-client