Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/3130332e3132312e3130302e302f32332d3234203d3e20313335343738.roa
File:                     3130332e3132312e3130302e302f32332d3234203d3e20313335343738.roa (raw, json)
Hash identifier:          d/HrqtNtfpXxAc5Y2EmIMkeYHkvz0XjUFQbRcDoBtKQ=
Subject key identifier:   31:57:BB:41:C5:CB:C6:06:43:1A:B0:6C:C5:F3:24:8F:B5:1C:0C:55
Certificate issuer:       /CN=EA364B048B6B5A81F887F07FDB60499024CE8C94
Certificate serial:       210E4F375ECDE3E56182DF26775FDA9D52EF163F
Authority key identifier: EA:36:4B:04:8B:6B:5A:81:F8:87:F0:7F:DB:60:49:90:24:CE:8C:94
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA364B048B6B5A81F887F07FDB60499024CE8C94.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/3130332e3132312e3130302e302f32332d3234203d3e20313335343738.roa
Signing time:             Wed 04 Dec 2024 05:02:33 +0000
ROA not before:           Wed 04 Dec 2024 04:57:33 +0000
ROA not after:            Wed 03 Dec 2025 05:02:33 +0000
asID:                     135478
IP address blocks:        103.121.100.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/EA364B048B6B5A81F887F07FDB60499024CE8C94.crl
                          rsync://repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/EA364B048B6B5A81F887F07FDB60499024CE8C94.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA364B048B6B5A81F887F07FDB60499024CE8C94.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Apr 2025 13:30:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:0e:4f:37:5e:cd:e3:e5:61:82:df:26:77:5f:da:9d:52:ef:16:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA364B048B6B5A81F887F07FDB60499024CE8C94
        Validity
            Not Before: Dec  4 04:57:33 2024 GMT
            Not After : Dec  3 05:02:33 2025 GMT
        Subject: CN=3157BB41C5CBC606431AB06CC5F3248FB51C0C55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ea:86:ba:18:25:cd:00:cd:18:ad:42:64:18:
                    fc:6b:52:ac:28:3a:87:6d:18:e3:ca:b4:6c:7b:ca:
                    8b:4b:74:6f:70:37:eb:dd:58:23:a1:8d:e2:f3:e0:
                    2f:d9:a8:3a:d2:fa:8c:e0:b6:dd:25:6c:95:b5:6a:
                    57:3f:ad:f8:11:e7:66:46:15:d3:d4:6c:d7:ff:8f:
                    1c:f9:21:9b:3d:29:1d:d3:b8:d8:ca:3b:ab:b2:03:
                    ec:ab:b8:88:f6:79:5a:b3:6f:a5:80:dd:5a:0c:c6:
                    73:ee:21:9f:26:1f:ab:fc:96:a7:0c:71:00:e4:8e:
                    96:14:3d:fe:61:96:9d:a7:61:bf:95:c8:c2:78:a0:
                    eb:d5:be:39:64:ed:00:3a:b2:49:16:2c:86:6e:0b:
                    2d:f1:9c:2b:22:af:e4:7c:89:9b:0e:21:ad:8e:d8:
                    74:df:96:e8:cb:ff:9b:70:d4:b0:df:d0:61:63:fb:
                    bd:b6:76:9c:e1:d7:42:9a:f5:a5:32:cf:09:57:75:
                    5a:86:eb:14:a5:cf:a2:aa:b0:b8:4e:40:e0:00:b5:
                    d4:0b:af:8e:d1:96:ef:17:79:31:a4:9d:26:88:67:
                    7b:6a:2f:01:27:59:d2:33:4f:95:b5:05:37:2c:08:
                    72:de:49:81:04:0d:15:80:b2:06:89:46:ad:e9:a5:
                    1d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:57:BB:41:C5:CB:C6:06:43:1A:B0:6C:C5:F3:24:8F:B5:1C:0C:55
            X509v3 Authority Key Identifier:
                keyid:EA:36:4B:04:8B:6B:5A:81:F8:87:F0:7F:DB:60:49:90:24:CE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/EA364B048B6B5A81F887F07FDB60499024CE8C94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA364B048B6B5A81F887F07FDB60499024CE8C94.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/3130332e3132312e3130302e302f32332d3234203d3e20313335343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:97:ac:e8:d3:47:06:bb:58:81:21:2a:89:8f:d8:1e:d3:cb:
         0a:35:62:88:eb:da:53:12:d4:dd:fa:19:f1:91:33:d2:86:f4:
         c7:b6:c4:3d:84:ad:33:a3:ae:86:bb:b2:df:2d:5e:3f:01:d6:
         40:77:39:98:d6:fa:ca:c6:da:4d:b0:94:ff:39:c4:63:0a:51:
         5c:90:54:7e:5d:90:75:35:14:67:31:8c:38:48:23:29:37:ee:
         70:f3:c3:5c:fa:a5:17:1c:20:37:e6:9a:e9:29:6a:d3:8e:a6:
         48:5a:fb:38:2b:1f:9b:d1:02:63:0e:95:f1:93:dd:d7:74:1b:
         e2:82:1f:1a:7a:10:31:b4:e1:67:29:a9:a9:09:e2:33:a4:ba:
         4c:8a:58:60:63:c0:8d:4e:39:80:04:a0:e7:72:e2:89:68:a1:
         e3:f2:a7:34:8d:d5:10:f6:75:aa:ff:e4:b0:ae:33:9b:97:5b:
         63:fa:46:90:36:09:40:10:fd:3b:a7:e0:5c:73:b4:10:d5:fe:
         77:b2:17:12:39:4d:30:ea:ce:90:92:98:00:a6:b0:9d:39:ba:
         cf:68:01:ea:a7:89:cd:35:d5:4d:66:41:fb:fd:d2:81:a8:ff:
         18:ba:52:53:31:82:f7:d6:ea:7c:ae:30:ad:61:16:e5:3e:0a:
         17:b1:ad:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:53:28 2025 by rpki-client