Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/3130332e3131302e33342e302f32332d3234203d3e20313530393336.roa
File:                     3130332e3131302e33342e302f32332d3234203d3e20313530393336.roa (raw, json)
Hash identifier:          2f4uu7IrkIZq7UTq+ptH1NLF5HW0iMlWBn9DqvPnp4U=
Subject key identifier:   1B:0F:0E:C4:6F:C2:C0:82:0B:2E:15:8C:1C:1F:F1:CE:FE:DB:41:DB
Certificate issuer:       /CN=E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12
Certificate serial:       140387F2BC25DDC84BEC9610D5A83CFC3298A0A8
Authority key identifier: E1:F7:E7:39:D5:E9:2C:EF:AA:F8:DB:4F:DE:24:B4:02:DF:2F:5F:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/3130332e3131302e33342e302f32332d3234203d3e20313530393336.roa
Signing time:             Thu 22 May 2025 02:00:00 +0000
ROA not before:           Thu 22 May 2025 01:55:00 +0000
ROA not after:            Thu 21 May 2026 02:00:00 +0000
asID:                     150936
IP address blocks:        103.110.34.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.crl
                          rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 15:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:03:87:f2:bc:25:dd:c8:4b:ec:96:10:d5:a8:3c:fc:32:98:a0:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12
        Validity
            Not Before: May 22 01:55:00 2025 GMT
            Not After : May 21 02:00:00 2026 GMT
        Subject: CN=1B0F0EC46FC2C0820B2E158C1C1FF1CEFEDB41DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:75:a5:b9:02:9b:78:7f:bf:f1:e9:89:a4:12:
                    bf:5a:47:95:9f:2e:53:cc:46:ec:7f:72:de:0d:18:
                    d5:7e:f4:69:39:c1:37:bc:63:6f:ad:f7:c0:36:29:
                    fe:02:e4:7b:7f:09:d0:4b:52:24:db:76:b9:9d:8a:
                    c9:ae:3d:49:59:8c:f1:8c:c2:41:9c:aa:4c:d9:95:
                    54:81:5c:13:f8:0f:b5:64:88:97:5d:06:33:fc:6b:
                    63:01:f7:71:ea:b8:d0:e3:f3:19:36:28:e3:7c:f2:
                    c5:92:08:9c:a4:ce:be:91:80:47:d8:62:34:e2:c6:
                    48:32:3e:f3:24:47:7e:4d:04:c4:b2:67:6d:ca:9e:
                    05:55:fa:25:61:c7:c6:67:91:bf:a2:50:35:27:51:
                    77:10:d8:5f:52:d5:90:a1:13:9d:84:cc:ab:d3:4f:
                    12:66:53:e6:25:c8:bd:b1:aa:40:71:71:ce:e3:13:
                    f3:5f:9e:8c:f6:7e:77:38:bc:e0:89:7a:29:d1:b8:
                    ec:8a:a6:70:10:16:09:b0:ac:09:0c:82:56:92:0d:
                    b9:4f:2f:f2:5f:a5:17:56:7c:e4:5f:5e:9d:3c:19:
                    86:9c:3b:4e:d1:ae:4b:b7:fc:55:38:b0:cc:17:18:
                    6b:83:23:cd:2c:91:2e:94:96:46:70:68:44:18:86:
                    f6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:0F:0E:C4:6F:C2:C0:82:0B:2E:15:8C:1C:1F:F1:CE:FE:DB:41:DB
            X509v3 Authority Key Identifier:
                keyid:E1:F7:E7:39:D5:E9:2C:EF:AA:F8:DB:4F:DE:24:B4:02:DF:2F:5F:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/3130332e3131302e33342e302f32332d3234203d3e20313530393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:1c:26:80:6d:d0:55:0e:d9:59:95:42:7e:d3:fa:83:13:7a:
         06:9a:ad:85:a2:ee:7c:98:64:f1:88:a7:3b:36:3d:c1:f9:b5:
         16:de:76:3e:2c:9f:34:5d:47:fb:09:cb:96:8a:44:bd:9f:dc:
         96:5b:ab:e7:1e:5f:0a:8b:f2:a7:c2:eb:fd:12:7c:2b:f2:44:
         a8:e5:d2:ab:97:49:83:35:15:7f:2d:80:9e:cc:29:e7:ce:a7:
         30:74:17:26:df:55:d9:cf:8d:51:8c:71:9c:74:00:26:5c:d2:
         60:92:1b:0d:ce:e4:bb:39:32:25:99:b7:e0:db:ab:d8:91:e5:
         1a:48:5e:71:09:2c:e3:45:0e:c9:5d:d4:bf:dd:b5:4d:bc:ec:
         6b:6a:7c:b2:c8:5f:0b:10:12:ec:56:c7:b5:b3:e2:75:be:7b:
         14:bb:ff:ef:3e:e4:5a:e4:05:72:55:09:da:07:e9:6c:58:f1:
         51:8a:99:b7:e1:d4:02:2a:07:f8:94:64:f6:4d:04:e9:4a:eb:
         ac:69:7c:11:a0:c0:d6:8c:4d:e2:83:88:bc:46:2b:8b:a6:ba:
         06:76:5d:16:db:e2:b9:f1:60:dd:a3:18:5c:b3:d6:1e:12:e3:
         cc:00:97:05:39:59:33:3f:7c:3f:d9:08:8f:3b:7c:58:15:e8:
         2d:77:26:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:49:13 2025 by rpki-client