Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/3130332e34312e3234382e302f32342d3234203d3e20313530323736.roa
File:                     3130332e34312e3234382e302f32342d3234203d3e20313530323736.roa (raw, json)
Hash identifier:          sdEV/rX6xPiB6f5qiFa9ouK5Ut6ycF59qx3vu3jtOiw=
Subject key identifier:   DC:09:04:93:EE:86:B4:A0:FA:50:22:AE:72:1E:06:45:8E:DD:2E:5F
Certificate issuer:       /CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA
Certificate serial:       0A2D92247162DE47200234C9904C774A97197FCD
Authority key identifier: D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/3130332e34312e3234382e302f32342d3234203d3e20313530323736.roa
Signing time:             Wed 19 Mar 2025 05:54:49 +0000
ROA not before:           Wed 19 Mar 2025 05:49:49 +0000
ROA not after:            Wed 18 Mar 2026 05:54:49 +0000
asID:                     150276
IP address blocks:        103.41.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl
                          rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Apr 2025 22:47:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:2d:92:24:71:62:de:47:20:02:34:c9:90:4c:77:4a:97:19:7f:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA
        Validity
            Not Before: Mar 19 05:49:49 2025 GMT
            Not After : Mar 18 05:54:49 2026 GMT
        Subject: CN=DC090493EE86B4A0FA5022AE721E06458EDD2E5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fc:03:47:1c:11:fe:ea:d6:39:21:5e:fc:e8:
                    d1:36:8d:70:1a:f9:ea:34:58:e5:c2:5a:92:c6:9c:
                    f7:b0:83:11:94:54:06:ff:3e:97:d8:d1:c1:1d:56:
                    e1:07:cb:3f:74:69:f8:c0:86:22:13:40:48:c9:70:
                    a9:af:ad:e2:86:c2:2d:31:2a:d3:fb:ac:27:63:02:
                    c2:99:d8:ae:79:11:19:64:11:32:bd:c2:44:92:b8:
                    84:f7:1b:e8:5f:68:77:b6:da:ce:30:69:75:24:b7:
                    b6:11:ce:23:f7:a7:f0:6c:41:1b:a8:02:cc:0f:f8:
                    bc:6a:e2:55:6b:c1:88:52:73:82:d1:03:12:b2:5b:
                    fe:79:66:e2:c5:e2:70:8c:85:f5:7a:6d:e2:16:6c:
                    1a:fc:c7:45:60:e1:5a:db:2c:3a:d4:00:b0:00:88:
                    9c:17:a3:0e:02:12:8b:fc:65:e0:e7:91:83:93:1b:
                    d7:22:5d:63:39:59:c6:5a:2e:71:2a:83:84:1e:39:
                    e6:7a:e8:2c:b3:52:ec:48:2b:c4:50:93:b9:8c:21:
                    fc:ab:36:20:58:7d:ae:c3:17:8c:10:58:0f:d1:4f:
                    9f:f8:cf:2a:53:0d:d4:06:7b:22:92:58:79:83:01:
                    33:05:9f:1d:42:83:30:5e:e4:a1:d2:3a:aa:98:98:
                    35:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:09:04:93:EE:86:B4:A0:FA:50:22:AE:72:1E:06:45:8E:DD:2E:5F
            X509v3 Authority Key Identifier:
                keyid:D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/3130332e34312e3234382e302f32342d3234203d3e20313530323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.41.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:c0:36:0e:69:a3:85:35:c4:5e:8d:84:d8:33:d2:6c:91:5f:
         da:e5:ed:3a:78:32:6d:50:00:52:8e:94:69:02:4a:76:bc:c5:
         bb:b6:1b:68:ed:69:bb:4a:25:7d:bd:5c:22:f2:2d:2e:a9:7c:
         ff:30:a3:ad:26:53:33:50:47:85:3f:b0:34:0b:50:c9:4e:e3:
         39:c6:30:c6:e3:8d:d5:fa:18:a7:b3:72:2e:fe:22:ea:6d:fd:
         ee:34:41:e6:39:35:62:78:76:37:ca:1b:7f:07:cc:25:6b:43:
         bb:d8:36:4d:40:62:e0:2c:f4:71:4e:6d:3f:c9:f0:ab:fe:02:
         25:b8:7c:2e:5b:24:01:e4:19:37:61:94:c7:22:39:73:a8:7d:
         2d:b3:17:8f:a7:bf:ff:61:cc:f3:7d:02:33:ac:8c:ea:68:34:
         e4:53:45:08:a1:99:21:9c:d7:24:29:20:cb:c0:b6:03:a9:e8:
         93:03:bf:aa:06:79:07:4f:03:04:fb:86:4d:78:b6:84:dc:cb:
         6f:f1:cc:45:b3:59:12:d4:ad:4f:f4:70:42:be:ca:30:7b:a0:
         48:bc:17:46:37:79:18:f2:1e:93:2d:bc:b2:70:61:3c:5c:a4:
         0e:84:5e:27:7f:a7:9f:4d:28:70:ed:2a:25:93:d2:98:d7:d6:
         7a:9f:fe:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:44:32 2025 by rpki-client