Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/3130332e39312e3134392e302f32342d3234203d3e20313339393637.roa
File:                     3130332e39312e3134392e302f32342d3234203d3e20313339393637.roa (raw, json)
Hash identifier:          rVykKz8Sijcwgrjh36jl66i5jYhje07nNSzwkGxxcIo=
Subject key identifier:   D2:54:94:95:F3:41:E8:D3:41:C6:DB:F9:F3:31:47:3E:52:54:A1:98
Certificate issuer:       /CN=781285AE1A8C595D354913D0B93F6982FCDFD898
Certificate serial:       10B6D2752BDD589DC01CEE87CC85ED532562D80A
Authority key identifier: 78:12:85:AE:1A:8C:59:5D:35:49:13:D0:B9:3F:69:82:FC:DF:D8:98
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/781285AE1A8C595D354913D0B93F6982FCDFD898.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/3130332e39312e3134392e302f32342d3234203d3e20313339393637.roa
Signing time:             Fri 31 Jan 2025 06:02:22 +0000
ROA not before:           Fri 31 Jan 2025 05:57:22 +0000
ROA not after:            Fri 30 Jan 2026 06:02:22 +0000
asID:                     139967
IP address blocks:        103.91.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.crl
                          rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/781285AE1A8C595D354913D0B93F6982FCDFD898.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 01:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:b6:d2:75:2b:dd:58:9d:c0:1c:ee:87:cc:85:ed:53:25:62:d8:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781285AE1A8C595D354913D0B93F6982FCDFD898
        Validity
            Not Before: Jan 31 05:57:22 2025 GMT
            Not After : Jan 30 06:02:22 2026 GMT
        Subject: CN=D2549495F341E8D341C6DBF9F331473E5254A198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:19:12:6a:7c:65:5d:01:21:e4:ad:29:39:b9:
                    dc:23:4c:03:1b:c8:be:16:93:e8:7f:b7:1b:9d:e6:
                    ef:59:f0:9d:89:6c:ea:79:c0:ee:dc:7f:14:77:d7:
                    b9:3b:f8:51:cd:7d:76:f6:ce:6f:ef:39:35:83:c6:
                    e2:b5:22:59:e4:fa:6e:b4:15:c6:8f:59:36:16:1e:
                    77:47:df:2f:35:13:24:5f:09:60:bf:9f:2c:98:c4:
                    da:3a:3a:e0:8a:1a:df:7d:e6:9d:82:1d:04:8f:62:
                    9f:6a:b4:7f:c8:ef:38:1a:7d:e4:3a:d4:5d:71:4a:
                    30:ac:7c:3c:26:5a:f7:8f:3f:5a:a3:2a:04:41:98:
                    43:98:fa:cd:0f:18:c5:86:09:38:08:97:66:16:e2:
                    6f:06:b8:00:74:49:52:d8:d9:29:46:4a:9b:b4:74:
                    6c:81:7c:47:e8:bf:fa:27:75:07:08:3d:ec:9c:94:
                    6c:dd:03:aa:33:5b:12:7c:f9:13:09:e8:ce:c3:64:
                    1b:52:88:d0:a8:43:e1:3d:d3:ca:c4:3f:70:98:09:
                    c1:26:7c:c8:b8:da:c4:e3:41:dd:52:76:b7:14:2d:
                    72:cc:20:bb:72:44:08:79:8d:51:2f:e0:36:5c:6a:
                    0c:a2:f6:3b:0e:c7:91:8f:85:fa:af:81:a2:e6:01:
                    57:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:54:94:95:F3:41:E8:D3:41:C6:DB:F9:F3:31:47:3E:52:54:A1:98
            X509v3 Authority Key Identifier:
                keyid:78:12:85:AE:1A:8C:59:5D:35:49:13:D0:B9:3F:69:82:FC:DF:D8:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/781285AE1A8C595D354913D0B93F6982FCDFD898.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/3130332e39312e3134392e302f32342d3234203d3e20313339393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.91.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:78:df:f4:14:6f:25:c8:03:ea:b7:88:84:c1:35:9c:bf:49:
         d6:af:83:d2:cc:fd:fb:55:60:37:6b:58:c3:fd:62:2a:bf:4a:
         32:b2:ea:b3:26:b8:15:23:6f:2d:17:9d:a9:15:36:dc:a7:7d:
         e0:a5:9f:04:ed:7c:d2:54:8b:57:4c:18:33:71:d3:4c:c6:9e:
         bb:8c:2c:91:6d:ab:e7:34:ce:91:8d:c4:bb:ff:fd:ec:ab:b6:
         09:07:37:3d:de:0a:0c:e7:8e:bb:20:d4:f4:5c:cc:29:4c:a9:
         31:8c:e4:01:b3:4f:7e:ae:25:eb:67:03:35:c0:02:76:9e:cf:
         de:55:97:19:16:e3:84:71:ab:33:99:f6:d6:53:c2:05:7e:a7:
         3f:bb:8c:4f:7a:81:05:59:00:8c:a2:3d:d8:85:8d:fc:fb:64:
         07:98:1d:f1:16:28:1d:07:51:4e:85:ef:cf:37:37:7a:b6:82:
         c6:17:a9:37:51:81:09:45:f6:92:0c:65:bf:08:02:2b:c7:d1:
         a2:18:e8:83:77:e1:c4:05:bb:c1:67:c2:19:76:9a:1c:97:5d:
         b5:c6:6d:3d:ef:ae:64:0a:5a:59:64:c6:4d:3d:c2:72:d4:ea:
         19:ec:be:f8:55:8f:b8:43:a1:c8:e6:15:72:55:72:aa:71:7c:
         af:d3:6b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:10:19 2025 by rpki-client