Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/3130332e3131302e34312e302f32342d3234203d3e20313530343734.roa
File:                     3130332e3131302e34312e302f32342d3234203d3e20313530343734.roa (raw, json)
Hash identifier:          8S2hzEoGIAMl+O4ZMnecbssnEzx/EwJClKGpfzB52fc=
Subject key identifier:   45:0B:50:CD:5E:A8:26:78:CD:C2:A9:9D:AD:8E:C3:62:52:6E:70:F8
Certificate issuer:       /CN=0310C64163DFFAE5A8F4065429C26B631D9834D9
Certificate serial:       7F42FBAB3FD82F2906C4F1DA66A8E8F50637B608
Authority key identifier: 03:10:C6:41:63:DF:FA:E5:A8:F4:06:54:29:C2:6B:63:1D:98:34:D9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0310C64163DFFAE5A8F4065429C26B631D9834D9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/3130332e3131302e34312e302f32342d3234203d3e20313530343734.roa
Signing time:             Mon 16 Dec 2024 10:00:00 +0000
ROA not before:           Mon 16 Dec 2024 09:55:00 +0000
ROA not after:            Mon 15 Dec 2025 10:00:00 +0000
asID:                     150474
IP address blocks:        103.110.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/0310C64163DFFAE5A8F4065429C26B631D9834D9.crl
                          rsync://repo-rpki.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/0310C64163DFFAE5A8F4065429C26B631D9834D9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0310C64163DFFAE5A8F4065429C26B631D9834D9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Apr 2025 14:35:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:42:fb:ab:3f:d8:2f:29:06:c4:f1:da:66:a8:e8:f5:06:37:b6:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0310C64163DFFAE5A8F4065429C26B631D9834D9
        Validity
            Not Before: Dec 16 09:55:00 2024 GMT
            Not After : Dec 15 10:00:00 2025 GMT
        Subject: CN=450B50CD5EA82678CDC2A99DAD8EC362526E70F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:97:9e:ba:51:57:1f:df:08:4c:f9:74:06:0c:
                    e6:5d:31:03:6b:5a:47:08:e3:4b:30:f4:8e:9b:01:
                    0e:92:7d:ef:cf:81:30:d8:2a:d8:7b:e6:1a:82:b5:
                    5a:75:aa:78:f8:51:ac:50:0c:bc:53:7b:19:de:40:
                    f5:93:42:27:83:d5:94:d7:88:be:e3:0a:aa:ec:96:
                    c4:64:1d:a5:82:f4:5f:f8:fe:ec:e3:4f:1e:9a:a8:
                    12:81:68:c1:f6:b7:f1:42:95:8d:60:66:ad:a0:3f:
                    2b:6b:d0:47:a2:a1:60:b3:6c:ae:11:75:bb:a0:91:
                    ca:74:d1:fb:17:d3:80:a3:27:24:4d:4a:00:dc:5d:
                    80:0e:9b:8f:47:c0:42:52:ad:c6:4b:da:60:e0:08:
                    7c:d2:9d:75:10:5d:d6:ac:1f:91:43:78:a0:08:8e:
                    58:aa:1e:c4:7b:41:59:36:aa:a5:3a:d7:8f:08:1a:
                    35:b7:5c:ce:d5:56:63:98:5e:47:1b:1c:7c:5c:a5:
                    23:ec:4c:97:3f:84:2a:19:a3:5a:ed:57:9b:e5:33:
                    ba:a3:a5:53:4f:9e:5c:28:a7:50:5e:ab:38:9b:32:
                    05:4b:3d:34:07:90:57:30:e4:31:72:99:5f:10:3a:
                    58:e1:7f:96:b4:f6:6a:21:01:ca:0a:66:23:21:c5:
                    7e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:0B:50:CD:5E:A8:26:78:CD:C2:A9:9D:AD:8E:C3:62:52:6E:70:F8
            X509v3 Authority Key Identifier:
                keyid:03:10:C6:41:63:DF:FA:E5:A8:F4:06:54:29:C2:6B:63:1D:98:34:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/0310C64163DFFAE5A8F4065429C26B631D9834D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0310C64163DFFAE5A8F4065429C26B631D9834D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/3130332e3131302e34312e302f32342d3234203d3e20313530343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:b9:ac:47:e9:12:a6:7b:28:35:34:24:3e:5d:cd:40:b3:e6:
         c9:2a:f6:ac:d5:44:6a:35:32:da:cb:5f:d6:e2:bd:6e:fb:03:
         c3:78:da:a9:d8:e5:62:39:4c:3c:60:ee:04:25:6c:b8:66:06:
         5e:f1:03:79:55:79:89:bc:7f:c1:b5:98:0e:11:8c:d1:1b:fa:
         71:47:b7:f1:91:7d:c7:dd:08:74:64:26:ec:fd:d2:fd:47:7b:
         26:e6:da:b5:ac:ff:62:39:ea:63:ab:02:4f:2e:88:99:0a:2b:
         f6:6e:a9:45:c2:c8:fb:10:2f:c5:72:1e:cf:08:4e:22:5f:81:
         c0:ea:e2:08:f7:01:a4:54:e5:a4:15:ba:e7:e1:9a:42:ad:88:
         18:f3:83:51:55:f4:75:aa:11:e1:05:c3:91:66:3a:7c:bb:22:
         8a:65:2a:cc:b7:f3:24:12:f9:69:82:35:1d:ec:0b:c8:a5:91:
         86:57:f7:1d:4a:0c:41:b8:ed:ae:5d:bf:a1:f2:f8:ab:48:3c:
         ec:1e:a6:94:12:3c:28:73:c8:76:2c:d9:62:5f:67:18:ba:3a:
         50:1f:d9:08:13:a5:b5:c1:f8:f5:cc:3d:64:72:b9:e4:ac:70:
         b7:21:0d:e1:61:db:81:47:3c:f4:10:3f:f3:10:b9:91:a8:df:
         09:d7:46:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:58:31 2025 by rpki-client