Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/3130332e3131342e35332e302f32342d3234203d3e20313337333439.roa
File:                     3130332e3131342e35332e302f32342d3234203d3e20313337333439.roa (raw, json)
Hash identifier:          L0aGyUwEYHJDyRetS6plSaGHfNVoM/NqZGtNJzzztcc=
Subject key identifier:   D7:51:06:14:D8:4A:0A:7E:A8:D0:28:13:DE:0F:84:D4:FB:16:11:16
Certificate issuer:       /CN=EADA0AEE51F3910B50A065D57D946E3EAFA8BD11
Certificate serial:       37CEB11C0E26882EE272F4524DF3702987E296B4
Authority key identifier: EA:DA:0A:EE:51:F3:91:0B:50:A0:65:D5:7D:94:6E:3E:AF:A8:BD:11
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/3130332e3131342e35332e302f32342d3234203d3e20313337333439.roa
Signing time:             Fri 31 Jan 2025 02:00:06 +0000
ROA not before:           Fri 31 Jan 2025 01:55:06 +0000
ROA not after:            Fri 30 Jan 2026 02:00:06 +0000
asID:                     137349
IP address blocks:        103.114.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.crl
                          rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Apr 2025 09:58:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ce:b1:1c:0e:26:88:2e:e2:72:f4:52:4d:f3:70:29:87:e2:96:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EADA0AEE51F3910B50A065D57D946E3EAFA8BD11
        Validity
            Not Before: Jan 31 01:55:06 2025 GMT
            Not After : Jan 30 02:00:06 2026 GMT
        Subject: CN=D7510614D84A0A7EA8D02813DE0F84D4FB161116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:51:20:c7:4d:11:41:8c:18:6d:4c:58:8d:d4:
                    23:de:71:d1:a2:6e:5a:26:8a:35:47:72:b1:7d:b4:
                    f8:c0:b1:db:e7:03:98:6a:69:b9:b1:06:ed:a0:5f:
                    67:31:81:32:08:f3:e5:04:1f:10:fd:2d:be:9b:65:
                    21:a3:e1:d0:37:a0:13:c2:6d:5f:bc:cd:5c:87:32:
                    80:4e:e4:a5:45:46:7e:68:6e:17:14:fa:b0:29:1a:
                    db:12:f0:e0:8e:2e:8a:22:b8:4f:d3:e4:00:bb:2c:
                    d6:dd:c4:a6:67:80:ec:13:03:ff:ba:21:53:be:6c:
                    7f:d0:1f:df:d5:b1:8d:ed:32:d7:1b:78:1b:cf:3e:
                    10:9c:f7:b9:da:0a:dc:7c:e8:0f:31:0d:e9:88:b1:
                    0a:08:54:7c:f5:53:a5:19:31:f4:1a:0f:d2:e2:1e:
                    4e:7f:66:27:8a:74:d6:92:41:0f:c2:ac:79:2c:ce:
                    00:89:d6:b0:3a:ed:f0:99:14:70:c0:4f:72:b1:9e:
                    07:17:c5:59:e6:f3:9a:3c:93:bc:31:7d:41:6b:39:
                    0f:b9:24:89:10:66:8f:c0:f4:c1:75:de:4e:d3:5c:
                    bd:08:35:83:3b:89:6a:eb:3b:a1:a2:76:93:e2:91:
                    6b:9c:2e:cb:76:63:f0:e9:2e:7e:f4:9e:3f:85:a7:
                    37:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:51:06:14:D8:4A:0A:7E:A8:D0:28:13:DE:0F:84:D4:FB:16:11:16
            X509v3 Authority Key Identifier:
                keyid:EA:DA:0A:EE:51:F3:91:0B:50:A0:65:D5:7D:94:6E:3E:AF:A8:BD:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/3130332e3131342e35332e302f32342d3234203d3e20313337333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:94:6e:83:37:23:04:6d:25:e1:7a:93:0f:1a:e1:04:f7:47:
         2d:40:73:5d:51:1c:84:aa:9c:10:c0:7c:cb:41:9c:61:7b:5e:
         b7:41:4e:b8:2c:35:84:d1:d4:b9:40:ca:63:03:83:d7:d0:76:
         c9:0c:ef:b0:2a:98:17:10:4f:be:61:96:60:3d:47:0a:f3:eb:
         a8:46:b8:c0:01:74:0b:f6:be:dc:c8:9e:cc:a1:57:02:5f:d6:
         98:20:d5:ab:d3:15:73:6b:50:db:42:ff:2c:b4:01:75:c5:e0:
         b0:3e:fb:73:0b:7f:31:10:7c:44:97:ae:16:d3:19:ac:08:18:
         eb:33:5d:ba:4f:9b:af:63:b8:13:61:2f:a9:cb:e9:2a:0a:4e:
         00:49:08:db:6b:b9:50:ca:f4:8c:39:8c:1d:0b:06:29:cc:4b:
         70:f8:d0:cc:a2:d7:17:0e:90:8a:33:96:cd:c0:cb:f2:db:59:
         e7:d2:9b:d5:e1:97:46:c4:77:f4:7c:f8:0e:f5:e8:b0:f8:b7:
         a4:d2:42:a9:2e:1f:50:79:8c:50:d3:56:96:48:f7:99:16:eb:
         fb:47:e3:21:95:ec:81:21:4c:80:2e:2e:12:c6:dc:cd:e8:51:
         0b:7b:13:51:dc:39:9b:59:4f:57:cd:5c:0b:04:ab:bc:9b:88:
         38:08:7e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:34:24 2025 by rpki-client