Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/3130332e3136312e3133312e302f32342d3234203d3e20313431363133.roa
File:                     3130332e3136312e3133312e302f32342d3234203d3e20313431363133.roa (raw, json)
Hash identifier:          k4MdP+pLjawFS04xVNJ5Qw3RpHb/EN1we0LXgjwR3jc=
Subject key identifier:   3D:77:53:AD:B4:F3:6C:D7:A1:4D:2C:01:47:A3:80:01:36:FC:8C:A4
Certificate issuer:       /CN=F256ED0C68D48E70DDBE3473644FDBA420E82FBC
Certificate serial:       15156F592C9185E9F3C88261F141819366B9CCF1
Authority key identifier: F2:56:ED:0C:68:D4:8E:70:DD:BE:34:73:64:4F:DB:A4:20:E8:2F:BC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/3130332e3136312e3133312e302f32342d3234203d3e20313431363133.roa
Signing time:             Tue 26 Nov 2024 11:00:00 +0000
ROA not before:           Tue 26 Nov 2024 10:55:00 +0000
ROA not after:            Tue 25 Nov 2025 11:00:00 +0000
asID:                     141613
IP address blocks:        103.161.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.crl
                          rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Apr 2025 17:42:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:15:6f:59:2c:91:85:e9:f3:c8:82:61:f1:41:81:93:66:b9:cc:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F256ED0C68D48E70DDBE3473644FDBA420E82FBC
        Validity
            Not Before: Nov 26 10:55:00 2024 GMT
            Not After : Nov 25 11:00:00 2025 GMT
        Subject: CN=3D7753ADB4F36CD7A14D2C0147A3800136FC8CA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fc:17:0e:96:a8:40:1b:ca:8c:c3:db:5d:a1:
                    45:97:63:72:1c:4b:db:a4:cb:66:04:3c:97:a3:c6:
                    70:14:6e:6b:2d:38:44:66:9c:e4:06:36:9c:ae:44:
                    eb:5c:b5:17:6d:4d:8b:fd:a6:f9:50:29:2e:f6:c5:
                    65:c5:91:ea:4e:1a:87:02:16:03:42:4c:a7:1a:d5:
                    1f:4b:43:b5:42:78:86:01:74:dc:51:6f:59:cb:9b:
                    c1:0c:7b:2f:82:03:60:f8:da:12:c0:43:2f:dc:41:
                    ac:77:97:6f:7e:b1:55:d9:8c:3e:62:7c:ee:7e:14:
                    0b:ee:60:55:46:de:cc:76:ed:b7:27:c1:c7:b1:b1:
                    50:c6:73:3e:46:c3:7f:de:c4:3c:a1:08:e0:5f:0d:
                    91:a3:9f:ee:f1:c5:54:6b:cf:c4:e0:f4:c0:bb:e8:
                    b9:06:40:66:be:e5:d7:42:55:cd:77:e5:a8:39:e4:
                    e7:c3:fe:7e:4b:50:45:ae:2b:90:31:31:e6:c2:15:
                    3a:36:9a:ee:c8:2a:3a:6c:13:04:8c:fa:12:5d:d8:
                    de:11:ff:88:07:fb:a2:d8:cc:f2:eb:b5:a9:32:62:
                    12:5e:68:5f:0b:13:01:54:1c:5c:81:c5:f1:cb:0a:
                    e9:ea:76:dd:9a:4b:d9:22:34:1d:b5:8b:5e:0d:71:
                    14:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:77:53:AD:B4:F3:6C:D7:A1:4D:2C:01:47:A3:80:01:36:FC:8C:A4
            X509v3 Authority Key Identifier:
                keyid:F2:56:ED:0C:68:D4:8E:70:DD:BE:34:73:64:4F:DB:A4:20:E8:2F:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/3130332e3136312e3133312e302f32342d3234203d3e20313431363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:11:03:6a:3b:ee:3c:1e:f8:fa:b5:25:51:04:c8:56:b4:9f:
         1a:59:56:76:13:6e:d7:57:81:08:67:fb:57:4c:1c:93:7a:72:
         f1:e2:dd:35:d5:f3:7a:48:a5:a7:91:f5:49:4a:cc:48:38:04:
         e1:ad:c6:d9:f8:d9:f1:c5:2e:23:c7:8d:4f:45:51:c3:8b:3a:
         33:c1:eb:52:cf:31:b0:20:23:14:de:8c:d8:42:76:c8:f7:68:
         42:43:aa:db:83:d1:ff:43:dd:ab:ee:b7:16:39:c0:23:fc:3e:
         ee:70:84:6d:bd:66:c5:c0:a3:e5:e5:25:17:c8:2a:5a:9a:25:
         ef:a4:58:1d:88:2b:87:0c:95:db:5f:3e:f2:e9:32:82:64:c7:
         a7:f3:3d:7e:f3:46:68:cb:77:bc:90:87:6f:f4:cd:67:fe:0c:
         d6:33:a7:a4:f7:16:93:76:f8:0a:b1:60:ed:d0:06:30:05:4b:
         0b:8a:e8:d6:8d:02:34:b7:86:a2:66:6e:af:4a:dc:f4:34:ff:
         3e:aa:d1:cc:39:b6:4c:f7:a9:fe:0f:c0:96:b7:39:bc:53:4a:
         91:bd:7f:9b:ab:fd:a0:9e:6e:0a:02:d5:75:26:e9:6e:4f:07:
         ae:bf:25:76:34:31:1a:3a:99:a1:3f:06:72:3b:47:61:9c:8f:
         5c:eb:10:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:18:32 2025 by rpki-client