Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/3130332e34342e3134392e302f32342d3234203d3e20313333383033.roa
File:                     3130332e34342e3134392e302f32342d3234203d3e20313333383033.roa (raw, json)
Hash identifier:          +izo906qJR0//zszVUjaR0jf7ZrrEtZEmo5pUlJJNLQ=
Subject key identifier:   B6:4F:BA:D9:40:7B:76:07:46:C2:13:34:95:1B:24:FC:2A:B4:0F:CA
Certificate issuer:       /CN=7FAD2077691F807236683910594F23BA68280CD9
Certificate serial:       5331EAAEFA90F98E518683C55EB9703EA88E5375
Authority key identifier: 7F:AD:20:77:69:1F:80:72:36:68:39:10:59:4F:23:BA:68:28:0C:D9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FAD2077691F807236683910594F23BA68280CD9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/3130332e34342e3134392e302f32342d3234203d3e20313333383033.roa
Signing time:             Mon 02 Jun 2025 02:04:37 +0000
ROA not before:           Mon 02 Jun 2025 01:59:37 +0000
ROA not after:            Mon 01 Jun 2026 02:04:37 +0000
asID:                     133803
IP address blocks:        103.44.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.crl
                          rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FAD2077691F807236683910594F23BA68280CD9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 07:58:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:31:ea:ae:fa:90:f9:8e:51:86:83:c5:5e:b9:70:3e:a8:8e:53:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FAD2077691F807236683910594F23BA68280CD9
        Validity
            Not Before: Jun  2 01:59:37 2025 GMT
            Not After : Jun  1 02:04:37 2026 GMT
        Subject: CN=B64FBAD9407B760746C21334951B24FC2AB40FCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8a:ac:76:fe:12:dc:7c:11:bb:16:25:6f:1e:
                    c6:22:73:4e:cf:b6:d9:00:77:c7:05:86:64:1f:b3:
                    0b:88:15:ff:16:f2:ba:7b:cd:b1:d4:1c:d4:9f:48:
                    c3:2c:39:86:31:b6:3b:2c:04:9c:3e:f4:11:fb:23:
                    dc:10:34:e3:77:90:00:ea:4e:6e:7c:71:e2:4b:75:
                    a0:86:ea:29:41:70:37:49:17:a9:30:db:c0:f5:13:
                    f3:c6:41:8a:2e:77:ea:4a:03:4d:76:c9:c7:1d:8d:
                    2f:4f:93:9b:7a:ef:b3:f4:86:c0:97:0a:00:14:ae:
                    4e:9e:a8:bb:08:76:f1:3c:6f:ba:0e:1c:56:3d:ef:
                    d0:87:b2:4d:48:c6:56:fe:f3:8a:c3:8d:c1:7e:d4:
                    2f:c3:ba:46:2e:f4:d8:cd:ee:3b:9a:e9:f1:8d:d8:
                    66:7e:31:ec:74:96:74:34:6c:62:4f:4c:e7:4e:df:
                    07:79:ea:5f:d4:fb:35:3c:17:f5:95:14:42:59:61:
                    15:e0:ad:b4:da:76:81:0a:9f:13:ec:f5:b4:05:c1:
                    7b:63:6b:23:3e:99:66:ca:71:69:d4:66:fa:0d:34:
                    ea:25:aa:64:b9:00:b1:28:a7:8b:44:35:e9:f7:6d:
                    15:fb:cd:97:27:fa:08:04:98:a7:10:a4:3c:a9:67:
                    37:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:4F:BA:D9:40:7B:76:07:46:C2:13:34:95:1B:24:FC:2A:B4:0F:CA
            X509v3 Authority Key Identifier:
                keyid:7F:AD:20:77:69:1F:80:72:36:68:39:10:59:4F:23:BA:68:28:0C:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FAD2077691F807236683910594F23BA68280CD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/3130332e34342e3134392e302f32342d3234203d3e20313333383033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.44.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:0a:27:42:7b:e9:4f:8e:a9:ae:3d:c0:17:a2:66:c7:6a:09:
         2e:69:f1:a5:51:6a:1e:66:fc:c6:c4:76:57:10:02:54:e8:fc:
         a7:cf:38:56:52:92:f2:82:a5:75:18:cf:5f:24:86:bc:99:6d:
         f7:06:87:0e:47:54:36:56:91:9d:b8:80:fc:8a:9a:2d:65:c6:
         a7:45:6c:e5:02:f5:a1:36:a7:a1:d7:af:cb:2a:b6:91:9b:6a:
         b6:78:ed:fa:7f:12:27:91:69:63:54:f4:e1:2d:95:4a:1c:ba:
         ef:2c:1c:07:ae:4f:d0:ba:21:1d:73:48:65:17:42:bf:d1:2a:
         1d:29:b1:1f:45:70:d1:0c:85:b4:95:65:9e:10:f1:0c:1f:fe:
         97:50:6a:52:ae:47:77:71:0b:eb:0b:98:81:07:a0:e1:ac:af:
         9b:6e:14:8a:04:33:06:72:01:d5:1a:08:85:92:6d:30:57:3f:
         8d:ac:cf:9e:0e:84:d2:c4:5a:7a:20:e1:5f:9b:0b:c9:08:1e:
         9f:6b:77:b2:fc:a9:ef:de:2c:44:06:61:54:a4:57:4e:33:0a:
         ac:4b:93:b0:36:75:63:89:7a:10:32:91:29:c5:2a:c2:38:05:
         f2:33:8e:64:e2:83:cf:71:91:2c:6f:8e:70:bf:5d:1f:ee:c9:
         b1:05:ec:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:15:53 2025 by rpki-client