Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/3130332e3130342e3133332e302f32342d3234203d3e20313333383233.roa
File:                     3130332e3130342e3133332e302f32342d3234203d3e20313333383233.roa (raw, json)
Hash identifier:          nHLhFUO3/d1KOlnJCoDhfh5DYlPgmeAohfDNtzLOH9U=
Subject key identifier:   1D:47:B4:52:26:40:31:88:D5:73:C7:58:01:BA:00:B9:43:8C:CB:FA
Certificate issuer:       /CN=229F9618AE3F0667EC17C977F266B2BE74C81AB7
Certificate serial:       49021EB871D33951ABB76C31124F9043FD562A53
Authority key identifier: 22:9F:96:18:AE:3F:06:67:EC:17:C9:77:F2:66:B2:BE:74:C8:1A:B7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/3130332e3130342e3133332e302f32342d3234203d3e20313333383233.roa
Signing time:             Fri 07 Mar 2025 07:20:34 +0000
ROA not before:           Fri 07 Mar 2025 07:15:34 +0000
ROA not after:            Fri 06 Mar 2026 07:20:34 +0000
asID:                     133823
IP address blocks:        103.104.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.crl
                          rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 17 Mar 2025 11:08:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:02:1e:b8:71:d3:39:51:ab:b7:6c:31:12:4f:90:43:fd:56:2a:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=229F9618AE3F0667EC17C977F266B2BE74C81AB7
        Validity
            Not Before: Mar  7 07:15:34 2025 GMT
            Not After : Mar  6 07:20:34 2026 GMT
        Subject: CN=1D47B45226403188D573C75801BA00B9438CCBFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:50:24:69:20:42:94:47:ad:6a:48:e7:b7:70:
                    a5:14:0d:14:8b:c5:9f:4b:a0:d6:2d:f2:78:43:49:
                    ea:56:7d:e7:d1:2b:d9:b1:0e:e0:4f:bd:46:a8:af:
                    b6:f1:1d:0a:42:47:ba:98:d5:3f:61:66:c8:24:f2:
                    e4:15:ed:1c:45:80:3f:d3:18:d7:fb:ef:27:5a:08:
                    5d:2f:b0:c3:36:d9:05:bc:21:5d:75:b6:6f:19:ee:
                    04:ef:26:f9:61:b0:7f:16:f8:f1:e6:cc:95:b8:ad:
                    ef:95:ad:b7:bb:54:60:f7:26:42:ee:e7:ea:cd:51:
                    7b:db:dc:6f:a2:c4:e0:e6:50:56:33:6d:3b:a2:e9:
                    3d:ba:8d:89:02:4e:93:6a:80:fa:07:a7:93:e2:2e:
                    89:35:a5:97:60:18:3c:e2:e7:cf:af:86:43:f2:4a:
                    42:0b:cc:3a:ca:6a:14:cb:61:72:6c:d0:79:75:b0:
                    89:e5:40:e1:ef:da:0b:d0:d1:48:c3:19:2b:d2:1d:
                    30:17:5c:d9:20:b1:e2:45:74:44:15:14:c6:7d:22:
                    fb:05:fb:9b:f8:35:09:a3:3e:c9:af:de:c7:1d:8c:
                    90:fe:07:4c:76:2d:cc:cd:22:32:22:1b:fb:e9:af:
                    bd:32:64:a1:70:aa:39:36:ba:3c:4a:27:2c:a3:e2:
                    1e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:47:B4:52:26:40:31:88:D5:73:C7:58:01:BA:00:B9:43:8C:CB:FA
            X509v3 Authority Key Identifier:
                keyid:22:9F:96:18:AE:3F:06:67:EC:17:C9:77:F2:66:B2:BE:74:C8:1A:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/3130332e3130342e3133332e302f32342d3234203d3e20313333383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:73:e3:b3:cd:3d:a5:c5:c7:f1:56:e7:20:c9:de:d1:6f:e6:
         25:42:01:55:ed:64:39:40:1d:f8:69:7c:54:72:7c:2b:8f:c4:
         dc:65:12:c8:f7:aa:63:b3:45:33:91:87:5f:d2:52:ee:9d:71:
         66:57:64:be:e2:f8:e4:a0:d9:92:26:ff:2d:8d:d9:48:ae:17:
         7e:56:cd:46:66:c0:ef:1a:d5:f1:b6:59:3a:e9:4d:8b:14:ad:
         aa:a2:ae:1c:a9:51:88:fe:3d:21:13:fc:67:df:a8:b4:4f:84:
         d3:64:60:4b:2c:51:e4:9e:ec:79:2a:4a:85:3b:3e:fb:7f:99:
         ae:41:aa:ea:50:39:f8:d4:a7:d2:b6:4e:85:d4:c4:ce:09:72:
         40:f6:9b:71:9c:47:ab:4f:dc:26:7a:15:e7:34:5d:8a:1f:31:
         52:de:2f:07:72:27:1c:d7:7a:82:8a:44:cb:4c:ab:11:eb:bc:
         fe:02:c4:f3:48:2c:2d:d9:31:2d:15:00:d5:70:36:bd:fd:bd:
         2a:72:38:ba:d6:36:90:d1:1e:89:c4:13:c7:0c:3a:6e:5c:a9:
         33:b9:dc:42:79:7b:28:b1:fc:8e:97:73:cb:c2:2b:64:a2:76:
         f5:65:a3:2f:6b:7a:05:d5:30:39:0e:94:cf:37:a5:c4:39:1f:
         cd:9e:24:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 15 05:50:40 2025 by rpki-client