Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/3130332e3134352e33342e302f32342d3234203d3e20313339343439.roa
File:                     3130332e3134352e33342e302f32342d3234203d3e20313339343439.roa (raw, json)
Hash identifier:          6sNUHy3rsTArTsGqkY6I4FLyCbpPnknKrCUS7UYl4FU=
Subject key identifier:   3C:FF:98:3C:08:A9:D6:F4:8E:CB:8D:69:1E:11:1B:02:06:EE:96:F7
Certificate issuer:       /CN=D681DB990E904642A480AE9546646329FF5D0162
Certificate serial:       10A77712D4F74F011BC559938833863858437B5A
Authority key identifier: D6:81:DB:99:0E:90:46:42:A4:80:AE:95:46:64:63:29:FF:5D:01:62
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/3130332e3134352e33342e302f32342d3234203d3e20313339343439.roa
Signing time:             Tue 18 Feb 2025 00:00:01 +0000
ROA not before:           Mon 17 Feb 2025 23:55:01 +0000
ROA not after:            Tue 17 Feb 2026 00:00:01 +0000
asID:                     139449
IP address blocks:        103.145.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.crl
                          rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 03:42:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:a7:77:12:d4:f7:4f:01:1b:c5:59:93:88:33:86:38:58:43:7b:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D681DB990E904642A480AE9546646329FF5D0162
        Validity
            Not Before: Feb 17 23:55:01 2025 GMT
            Not After : Feb 17 00:00:01 2026 GMT
        Subject: CN=3CFF983C08A9D6F48ECB8D691E111B0206EE96F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:13:83:b1:51:41:c7:f4:c5:84:9b:ca:dc:5b:
                    f6:fb:72:29:52:72:64:be:24:9b:db:20:c9:6c:76:
                    56:17:c2:4e:eb:bc:b7:74:cc:a0:a0:28:b4:29:8d:
                    87:94:bf:be:90:0c:3c:29:0c:a9:34:ae:75:6c:18:
                    a4:48:1f:78:bb:8b:87:18:95:ff:36:5e:74:b5:73:
                    03:60:49:4e:2e:6d:6b:2b:d9:70:1c:8d:a9:0b:4b:
                    1d:2c:74:c9:2a:67:34:fb:33:03:4d:9a:d9:32:7b:
                    79:a9:1b:35:cd:15:8a:cc:f7:35:57:2e:8a:b1:a4:
                    b3:98:26:9b:79:ef:c1:87:dc:d5:ad:84:05:77:8a:
                    4e:7d:32:0e:94:9a:1d:5f:50:02:ba:a7:43:61:86:
                    7f:b0:06:a7:ae:a3:b5:bb:cb:a6:84:04:b7:5a:27:
                    04:ed:ff:2c:f2:5d:cf:b1:93:7b:83:a7:ad:ee:30:
                    99:15:8f:47:6c:09:cc:0d:51:f8:96:77:d5:93:56:
                    26:2e:14:ef:eb:96:85:70:ef:11:8b:f3:3f:30:04:
                    78:7a:79:c0:d5:c8:b4:e8:3f:92:ba:17:82:e6:2d:
                    e4:3a:a0:6c:0c:63:7c:73:04:1b:b9:3e:0b:6d:9f:
                    30:99:70:0d:84:69:3a:79:5b:87:5d:91:e0:48:5d:
                    7f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:FF:98:3C:08:A9:D6:F4:8E:CB:8D:69:1E:11:1B:02:06:EE:96:F7
            X509v3 Authority Key Identifier:
                keyid:D6:81:DB:99:0E:90:46:42:A4:80:AE:95:46:64:63:29:FF:5D:01:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/3130332e3134352e33342e302f32342d3234203d3e20313339343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:64:1f:79:a9:d3:31:4f:60:0c:a1:87:3e:bb:7a:ec:50:35:
         c2:27:72:99:f6:6c:b5:02:ee:8a:22:3a:a9:0a:25:00:b6:b6:
         67:0d:f1:37:c4:f3:e3:1e:c2:ec:5d:c0:a2:c2:1c:22:a5:5d:
         93:9c:ad:4c:2d:ac:76:be:1a:a4:0d:14:86:4e:3a:a3:b2:09:
         0a:1f:bf:70:8f:76:16:83:67:68:74:10:f8:7e:2d:a9:79:15:
         a0:cc:3a:b2:c3:73:4b:0a:26:04:3f:69:a5:12:1e:32:d0:65:
         13:b2:16:84:ec:f2:b7:73:7c:1d:8c:93:11:ca:26:f2:97:f4:
         53:19:e9:81:19:1d:fd:df:bc:10:25:22:50:09:58:9c:d7:09:
         f5:2c:85:7e:15:6c:5c:da:f6:01:21:7e:5c:e5:a8:5d:f0:04:
         f5:c0:ad:58:37:42:8c:8e:2e:2c:3d:0c:25:36:09:7d:08:ad:
         09:f9:41:78:ec:01:e0:e8:88:ad:2b:79:0c:e6:3a:6a:c9:c1:
         96:1a:80:ea:e3:df:d2:10:72:7d:04:a5:7f:dc:92:9a:f4:fb:
         e6:6f:e1:da:b8:26:c9:35:10:e9:d3:71:d9:8d:59:c0:7e:10:
         7a:8f:59:d5:c4:1f:bf:d8:94:9f:8a:2f:f4:de:95:93:e2:6a:
         2d:45:cd:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:32:39 2025 by rpki-client