Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/3130332e33312e3235312e302f32342d3234203d3e203538343737.roa
File:                     3130332e33312e3235312e302f32342d3234203d3e203538343737.roa (raw, json)
Hash identifier:          LSvRzZKZqA3NwdEC9iho4W4LPDyE6x1z3v9TKwhHRg0=
Subject key identifier:   DC:13:64:0E:03:76:50:B4:91:70:D2:68:11:6A:1B:6A:B4:B7:9F:9D
Certificate issuer:       /CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6
Certificate serial:       413022CFC3765FA961A74B4D7837A37D8FCB5717
Authority key identifier: 10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/3130332e33312e3235312e302f32342d3234203d3e203538343737.roa
Signing time:             Mon 02 Jun 2025 02:04:30 +0000
ROA not before:           Mon 02 Jun 2025 01:59:30 +0000
ROA not after:            Mon 01 Jun 2026 02:04:30 +0000
asID:                     58477
IP address blocks:        103.31.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl
                          rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 20:25:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:30:22:cf:c3:76:5f:a9:61:a7:4b:4d:78:37:a3:7d:8f:cb:57:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6
        Validity
            Not Before: Jun  2 01:59:30 2025 GMT
            Not After : Jun  1 02:04:30 2026 GMT
        Subject: CN=DC13640E037650B49170D268116A1B6AB4B79F9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d5:22:ed:73:54:61:ff:78:e2:1b:b9:91:7c:
                    cc:50:70:2e:5f:8d:23:fc:2f:44:16:bb:97:63:2c:
                    47:f8:32:71:1b:e9:25:f9:36:5c:16:59:fd:c3:51:
                    9e:b6:b1:c9:3e:f8:eb:22:ee:8a:45:fe:72:2a:aa:
                    0b:f7:64:75:4e:73:e0:50:1c:67:7b:30:7d:78:51:
                    a4:e2:48:d7:ae:35:f5:63:a4:b8:8a:1a:9c:4b:ff:
                    a8:59:8e:0f:49:05:5a:e2:78:95:e1:fe:f7:d3:c9:
                    46:75:e2:26:01:63:79:93:87:52:9c:40:c6:cb:15:
                    91:75:1e:24:10:33:5c:d8:a5:69:88:e4:2c:34:0a:
                    db:e2:4b:54:26:fd:d8:df:4e:79:1b:a7:31:88:ce:
                    21:f2:76:c7:2c:c1:ef:9e:03:9f:3e:d7:cf:e6:2c:
                    f9:81:96:e3:27:76:26:20:0e:92:4c:da:b8:9f:35:
                    32:e2:f6:08:62:a3:57:5f:c0:64:04:d7:b6:41:a8:
                    69:af:5b:cd:48:f9:4a:8a:3a:fe:da:81:a2:89:d5:
                    7e:bc:0f:fc:19:e4:e0:fd:ea:c8:82:71:f8:29:62:
                    44:08:53:e8:d1:66:41:75:68:50:d8:08:fd:80:81:
                    12:7c:00:ca:2b:3a:4c:41:f6:ee:df:a2:c1:de:13:
                    89:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:13:64:0E:03:76:50:B4:91:70:D2:68:11:6A:1B:6A:B4:B7:9F:9D
            X509v3 Authority Key Identifier:
                keyid:10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/3130332e33312e3235312e302f32342d3234203d3e203538343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:a4:73:31:f1:2a:18:a2:7a:1b:8f:70:76:d3:39:a0:64:ae:
         15:28:05:14:fc:d0:5b:ed:60:5d:1f:3c:7e:a4:6e:83:8f:93:
         ec:f6:fa:94:f7:c4:ae:e3:e1:9c:d3:38:a6:e4:8d:a2:1e:5a:
         3c:8f:46:a4:d2:c9:84:a3:7f:8e:d5:00:0a:09:c1:19:d3:f2:
         77:7b:11:70:95:0b:03:59:8b:45:4e:c8:97:84:44:dd:c9:40:
         dd:45:ec:2e:a7:c8:c9:07:ab:dd:1d:cf:be:f8:6f:9e:cb:3f:
         62:ff:4d:6e:4d:88:ca:b3:66:4b:5c:20:c7:c5:e0:55:33:fd:
         45:06:61:38:a4:95:75:fe:f2:83:aa:3e:a3:fe:13:88:09:3a:
         d3:e2:e7:00:79:32:2f:8c:97:1b:cb:bd:f0:b7:d4:71:35:84:
         a7:7d:5e:2c:d3:4c:5d:69:01:a4:ea:6a:68:14:29:78:fd:5c:
         55:05:11:76:22:f1:9b:47:f2:cd:41:24:f0:29:61:19:ad:7e:
         b8:73:d4:68:56:45:29:fd:a7:3a:7e:e2:4c:19:86:87:c4:0a:
         e2:46:05:f1:53:7e:30:11:17:e6:d4:42:1c:bb:56:6a:00:f2:
         cb:99:1e:d4:5b:66:b0:14:29:c3:4a:b3:85:12:ff:e9:30:f5:
         bf:79:4e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:59:44 2025 by rpki-client