Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/3130332e342e38302e302f32332d3233203d3e20313530323034.roa
File:                     3130332e342e38302e302f32332d3233203d3e20313530323034.roa (raw, json)
Hash identifier:          AgLvlSE1smWWR/jE1YysJDc3mDL4n9sETXp5KZ0HtjU=
Subject key identifier:   17:C3:90:2B:46:6F:F7:B4:AA:EA:70:1E:F4:A8:C0:85:81:1C:3B:10
Certificate issuer:       /CN=0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E
Certificate serial:       1A42B3BCDB421BB8C248FD2FA300442EE7CDCEF3
Authority key identifier: 0E:2E:7A:9C:F1:1C:69:2E:C8:E5:6F:03:52:7B:DF:92:FA:00:1A:4E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/3130332e342e38302e302f32332d3233203d3e20313530323034.roa
Signing time:             Tue 21 Jan 2025 07:00:00 +0000
ROA not before:           Tue 21 Jan 2025 06:55:00 +0000
ROA not after:            Tue 20 Jan 2026 07:00:00 +0000
asID:                     150204
IP address blocks:        103.4.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.crl
                          rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 06:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:42:b3:bc:db:42:1b:b8:c2:48:fd:2f:a3:00:44:2e:e7:cd:ce:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E
        Validity
            Not Before: Jan 21 06:55:00 2025 GMT
            Not After : Jan 20 07:00:00 2026 GMT
        Subject: CN=17C3902B466FF7B4AAEA701EF4A8C085811C3B10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0c:8e:8f:fe:dd:dd:15:b1:24:9f:84:d6:e9:
                    c4:16:75:d4:66:60:50:49:e1:2e:fe:a0:de:4a:cd:
                    13:e7:06:5a:14:87:a0:92:72:95:2b:3f:f9:d3:8f:
                    66:46:09:4b:d9:1f:56:55:f7:b2:d2:23:d0:b9:f7:
                    65:98:92:d2:f5:f1:78:ad:2e:c5:ad:b6:8e:60:38:
                    3e:e2:a3:7c:37:7f:55:94:6b:af:a6:19:a1:59:b3:
                    4b:68:47:27:88:ba:db:08:cf:cb:20:dd:52:58:f9:
                    30:4e:cf:05:3d:23:c8:fd:30:d3:31:44:1f:27:53:
                    a7:cd:48:b5:ca:fc:c5:f2:ea:89:a2:a8:da:a6:a2:
                    d0:55:74:6b:45:67:0a:04:7a:6e:e1:5f:ad:1b:d0:
                    35:93:13:99:7c:ba:4b:88:6a:1e:19:e4:70:09:f1:
                    de:77:53:f3:46:64:89:3a:7d:7e:c2:3f:0f:e7:a2:
                    96:20:4d:c5:e1:61:b7:06:a8:73:50:4c:5b:1c:90:
                    50:42:f9:28:36:b0:f1:a8:bc:f9:25:cc:c4:f4:fc:
                    e5:5d:97:9f:df:02:f5:80:51:a3:3c:0a:c2:74:69:
                    01:d8:6b:e4:ed:48:4f:68:77:a5:10:e2:6b:be:24:
                    47:c1:72:ec:df:fc:1b:79:7f:24:bf:59:2f:cb:f3:
                    82:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C3:90:2B:46:6F:F7:B4:AA:EA:70:1E:F4:A8:C0:85:81:1C:3B:10
            X509v3 Authority Key Identifier:
                keyid:0E:2E:7A:9C:F1:1C:69:2E:C8:E5:6F:03:52:7B:DF:92:FA:00:1A:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/3130332e342e38302e302f32332d3233203d3e20313530323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:c8:44:72:3f:91:f5:67:9f:92:19:f6:b6:58:a4:68:ed:35:
         c3:14:6f:d7:f6:f3:6e:35:5f:0c:59:cb:09:9e:f0:65:e7:03:
         df:e5:0c:06:73:f5:d9:19:1e:69:33:25:ce:bd:b2:01:51:18:
         20:36:a6:c5:16:2d:9d:be:01:0f:1f:53:11:68:e8:6e:92:a4:
         56:4c:00:1f:ac:4a:7f:cc:eb:54:ed:4b:39:c8:73:72:3a:5b:
         bd:2b:ae:dc:b6:78:bb:1c:df:9f:29:23:3a:39:29:69:d2:ad:
         88:20:49:e3:3a:2d:2d:e0:40:f1:17:57:96:eb:0b:b1:94:54:
         76:6c:d9:22:dc:3e:e1:45:52:15:cf:aa:53:59:76:be:1f:00:
         27:5f:0b:9b:8b:fe:d9:41:8d:23:18:58:42:29:f9:b8:ee:62:
         23:cc:e4:c2:ae:a1:37:17:23:54:ee:dd:29:4f:3b:f5:94:5f:
         a7:79:dd:21:a5:3e:cd:fd:5e:5f:52:0b:11:6d:45:9b:c5:3f:
         7f:9a:c1:61:40:a9:c1:21:f2:5c:a1:4a:19:4d:20:f0:13:35:
         7e:78:2a:a2:bc:55:36:b5:a8:3c:10:fd:92:11:2d:e8:a6:2c:
         e0:da:21:50:6b:30:65:e3:c3:71:c3:e7:6b:07:e4:4e:f5:d7:
         a3:07:0d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:30:40 2025 by rpki-client