Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3130332e3134312e3234342e302f32342d3234203d3e20313339333635.roa
File:                     3130332e3134312e3234342e302f32342d3234203d3e20313339333635.roa (raw, json)
Hash identifier:          4uTLKiRhjulU7GOXHvon2zkM6nMTkkXWkFIniQjvCOg=
Subject key identifier:   82:46:8E:41:4C:EF:18:FD:DD:D8:34:C7:1F:15:96:4D:F4:89:B6:DA
Certificate issuer:       /CN=1BA1ADD734797C0383628A8723DEBADA827B5B02
Certificate serial:       6D59BF0A28E62D45965CAFF1FB04E8C139E0A543
Authority key identifier: 1B:A1:AD:D7:34:79:7C:03:83:62:8A:87:23:DE:BA:DA:82:7B:5B:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3130332e3134312e3234342e302f32342d3234203d3e20313339333635.roa
Signing time:             Tue 18 Feb 2025 16:00:00 +0000
ROA not before:           Tue 18 Feb 2025 15:55:00 +0000
ROA not after:            Tue 17 Feb 2026 16:00:00 +0000
asID:                     139365
IP address blocks:        103.141.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.crl
                          rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Apr 2025 00:22:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:59:bf:0a:28:e6:2d:45:96:5c:af:f1:fb:04:e8:c1:39:e0:a5:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BA1ADD734797C0383628A8723DEBADA827B5B02
        Validity
            Not Before: Feb 18 15:55:00 2025 GMT
            Not After : Feb 17 16:00:00 2026 GMT
        Subject: CN=82468E414CEF18FDDDD834C71F15964DF489B6DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:37:4e:64:0c:c8:4d:7a:a3:d2:79:05:74:d2:
                    08:fb:a8:d0:55:f8:43:4c:5e:93:25:d6:63:72:7b:
                    64:71:98:01:d0:21:de:0b:7e:f4:a1:13:cc:cd:fb:
                    97:4e:b8:e0:a6:19:08:47:7b:99:25:79:94:d4:2f:
                    bb:b2:39:28:bd:c1:ff:90:39:52:52:9e:bb:cb:74:
                    a9:ba:4d:7c:4c:e2:c0:11:4a:e4:19:d1:5a:d5:d9:
                    ab:44:91:97:9a:e3:2a:03:49:28:8f:09:cc:0e:b1:
                    00:b8:6e:2d:74:02:64:51:1d:73:57:9b:2b:d1:86:
                    ab:83:56:0c:5f:c6:af:ec:c9:0a:4f:86:b6:4e:9b:
                    2d:5b:7d:c5:c4:e3:fe:da:eb:da:88:50:c9:5d:0f:
                    d3:73:d7:53:10:95:bf:af:1c:0f:c2:21:ab:93:6c:
                    7c:24:58:e4:ad:72:ca:0c:51:4a:39:ce:19:ca:f6:
                    15:99:c4:53:a9:df:a8:1e:70:36:0e:ce:ff:25:04:
                    af:16:40:f2:0c:3a:ce:a7:fc:38:27:4a:22:ad:e4:
                    91:f1:21:14:7b:6f:85:da:bd:ae:1c:ea:b6:bc:0b:
                    88:c3:8a:93:1b:3b:64:dc:14:8b:0d:57:ea:c7:cf:
                    49:3b:eb:70:40:6c:73:a7:28:e2:25:16:4b:5a:16:
                    00:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:46:8E:41:4C:EF:18:FD:DD:D8:34:C7:1F:15:96:4D:F4:89:B6:DA
            X509v3 Authority Key Identifier:
                keyid:1B:A1:AD:D7:34:79:7C:03:83:62:8A:87:23:DE:BA:DA:82:7B:5B:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3130332e3134312e3234342e302f32342d3234203d3e20313339333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:a4:4c:82:54:06:0a:8d:26:92:94:32:c4:e0:6a:c9:48:d9:
         bd:b8:65:c4:d3:31:7e:3b:89:ea:ec:9b:49:fc:96:64:bd:91:
         e6:a7:70:0d:6f:65:16:ef:77:e3:5c:b2:eb:d6:e2:27:df:1c:
         8c:69:b4:64:65:90:72:14:eb:35:b4:2b:55:cf:83:56:7b:cf:
         81:f0:4a:b1:2e:7b:ac:f5:a5:ed:ba:54:71:ef:3e:2e:eb:02:
         32:4c:15:22:1c:62:d5:f5:2d:be:b2:1d:84:e3:ea:eb:d1:15:
         e5:1a:45:85:a1:a0:7b:f9:f9:91:65:60:2f:e6:0a:4c:71:0d:
         73:11:9c:ec:41:c0:5b:83:ad:b1:ca:b4:7b:e7:ec:7a:36:76:
         4c:2b:c1:d3:84:bf:7d:dd:37:78:b1:2c:3e:85:58:c2:66:ce:
         d7:db:f0:a1:04:c7:6c:2b:52:d2:d8:f9:87:8a:77:19:4c:c1:
         5e:cc:d9:f5:06:55:9e:6b:d5:38:f5:77:10:fe:3e:02:07:e6:
         05:84:61:13:93:e0:f4:61:8f:01:3f:4c:94:4f:29:a6:65:13:
         82:f8:21:0f:4c:3b:c4:d8:b6:eb:b1:b9:10:31:b4:9e:06:63:
         47:9e:9f:3c:29:ab:48:9a:ec:2c:24:7c:2e:99:d1:07:6a:44:
         ba:3e:66:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:54:49 2025 by rpki-client