Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133342e302f32342d3234203d3e20313331373439.roa
File:                     3130332e33312e3133342e302f32342d3234203d3e20313331373439.roa (raw, json)
Hash identifier:          uDN60ejcwmufdw9lRATsCm8TNe8pbZTXPxEDJDFJrtI=
Subject key identifier:   8E:BA:32:2F:B3:A5:26:52:E0:EC:AE:BB:4D:26:67:74:45:95:70:DA
Certificate issuer:       /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
Certificate serial:       70067481A2D8E90EE70A119071378869AD64AF0A
Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133342e302f32342d3234203d3e20313331373439.roa
Signing time:             Mon 02 Jun 2025 01:02:42 +0000
ROA not before:           Mon 02 Jun 2025 00:57:42 +0000
ROA not after:            Mon 01 Jun 2026 01:02:42 +0000
asID:                     131749
IP address blocks:        103.31.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl
                          rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 10:05:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:06:74:81:a2:d8:e9:0e:e7:0a:11:90:71:37:88:69:ad:64:af:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
        Validity
            Not Before: Jun  2 00:57:42 2025 GMT
            Not After : Jun  1 01:02:42 2026 GMT
        Subject: CN=8EBA322FB3A52652E0ECAEBB4D266774459570DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:62:2c:91:09:92:00:3a:65:7c:9d:33:57:3a:
                    10:70:09:fe:e6:be:3d:0f:ae:e3:9e:50:04:b4:79:
                    a1:87:8e:9e:37:8f:e3:ff:95:c5:53:11:eb:b2:88:
                    5b:5c:84:20:2e:d5:29:36:ee:e8:29:f2:26:18:a3:
                    2f:40:16:bd:e7:49:8c:d5:1f:5b:9f:e0:4d:27:a4:
                    ca:4a:13:3d:05:1e:e2:22:7a:ae:e8:1a:4e:d3:a3:
                    21:a3:45:97:0d:c9:18:83:04:98:d7:23:35:48:81:
                    28:e6:5a:22:15:bb:56:5a:f2:b2:ea:27:4c:6f:af:
                    7a:33:38:35:95:17:ab:9e:b0:fc:c3:4a:9e:eb:0f:
                    9d:4f:36:c5:59:d7:7d:3f:8f:42:9b:9e:72:15:06:
                    9f:41:22:f5:ac:43:cc:84:61:e8:82:74:8d:f8:b7:
                    0e:63:50:4e:f4:20:c3:ef:9b:4e:f4:e8:e5:d4:01:
                    99:c9:80:ff:86:f5:c7:f3:0f:0a:94:eb:74:8b:46:
                    54:db:68:61:99:cc:a8:42:2f:70:46:86:ee:d8:79:
                    be:d1:ad:7d:a7:49:1a:9c:e3:69:ee:20:ad:e5:ee:
                    9c:a9:01:89:5a:79:d6:16:24:56:64:ec:02:72:75:
                    fb:26:1f:4d:d8:22:08:fe:51:7e:f5:5e:79:b3:d2:
                    02:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:BA:32:2F:B3:A5:26:52:E0:EC:AE:BB:4D:26:67:74:45:95:70:DA
            X509v3 Authority Key Identifier:
                keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133342e302f32342d3234203d3e20313331373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:9e:23:87:4f:7a:e0:e7:2f:25:f8:6e:5e:45:64:c1:d5:e4:
         98:31:74:ce:09:f5:c8:16:59:73:e9:a5:39:45:1e:16:27:69:
         67:31:29:80:42:64:74:18:e4:6e:a0:a9:57:77:1b:7d:8c:00:
         4f:a2:90:b0:84:7a:db:f9:d4:69:ff:36:b1:49:62:32:b6:05:
         96:f9:8e:c4:59:51:0b:0b:0c:a0:ce:92:58:cd:05:0e:5f:3c:
         24:37:6c:9e:52:33:3e:d4:6c:01:26:cf:4e:39:86:b8:24:ff:
         00:b1:08:b0:5a:ae:9b:db:17:86:33:c7:b6:c4:14:42:20:0e:
         5e:b2:16:56:3c:50:d2:2b:02:51:f5:cc:94:38:68:5a:e6:19:
         c2:ce:55:c1:3b:bb:e0:a2:bc:3c:c5:d4:f4:d7:bf:17:e8:39:
         fe:5f:c9:bc:b7:00:f4:b2:c1:7a:57:8b:86:a4:d0:48:6d:9f:
         b9:6a:49:16:74:b9:7e:7b:23:de:9e:ac:63:a3:91:0f:43:15:
         a3:68:68:7d:49:9c:e1:fa:3d:48:09:a9:bd:5a:f2:bb:16:cb:
         25:0c:a5:7a:37:ee:b8:e0:0e:a0:26:11:ce:ef:d0:cc:24:9d:
         29:af:cc:af:22:fa:2a:ca:bd:18:e3:06:f4:25:c6:55:1b:0d:
         b3:7c:98:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:23:30 2025 by rpki-client