Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/3130332e3134352e3232362e302f32342d3234203d3e20313339343536.roa
File:                     3130332e3134352e3232362e302f32342d3234203d3e20313339343536.roa (raw, json)
Hash identifier:          gVzL2LBLN7STi4mLrjjyVW3mXdXUI+ebV+XEsXnxKMQ=
Subject key identifier:   E6:59:C0:98:75:AA:DF:75:0F:00:F6:44:D5:7E:D4:89:EB:16:BD:47
Certificate issuer:       /CN=10B7822CA22013D1B3095AB974949FD98A76025C
Certificate serial:       48F348981388560BA5DB242F108D3DA7F72B168A
Authority key identifier: 10:B7:82:2C:A2:20:13:D1:B3:09:5A:B9:74:94:9F:D9:8A:76:02:5C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10B7822CA22013D1B3095AB974949FD98A76025C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/3130332e3134352e3232362e302f32342d3234203d3e20313339343536.roa
Signing time:             Wed 01 Jan 2025 08:00:01 +0000
ROA not before:           Wed 01 Jan 2025 07:55:01 +0000
ROA not after:            Wed 31 Dec 2025 08:00:01 +0000
asID:                     139456
IP address blocks:        103.145.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.crl
                          rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10B7822CA22013D1B3095AB974949FD98A76025C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 17:45:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:f3:48:98:13:88:56:0b:a5:db:24:2f:10:8d:3d:a7:f7:2b:16:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10B7822CA22013D1B3095AB974949FD98A76025C
        Validity
            Not Before: Jan  1 07:55:01 2025 GMT
            Not After : Dec 31 08:00:01 2025 GMT
        Subject: CN=E659C09875AADF750F00F644D57ED489EB16BD47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:8c:90:11:e8:23:08:92:24:6b:f8:1a:fd:39:
                    0c:88:72:6b:32:2b:af:cb:d5:55:b6:c7:af:5e:8e:
                    52:0c:f3:e5:23:6e:b9:7c:55:36:05:0d:9d:51:cd:
                    64:1b:2f:0e:4c:de:5e:06:3f:d5:c5:11:25:c4:c4:
                    d5:53:41:f1:e8:46:43:11:99:2a:d8:07:23:43:95:
                    96:41:13:38:48:08:25:0c:df:f5:cc:54:e3:84:4f:
                    0d:09:83:72:2d:53:c7:40:34:78:f4:e5:10:bc:28:
                    40:7b:cb:4e:9f:d9:a0:46:35:35:36:ef:7d:24:7d:
                    9e:07:a6:1b:63:63:28:9c:9c:54:ec:ed:5b:88:b6:
                    58:ea:e7:b4:53:e2:d8:22:26:e2:9d:fd:67:fb:26:
                    76:94:1e:95:18:80:bd:fe:5a:c8:7a:47:a0:b6:5e:
                    f9:3e:70:ed:0a:82:f5:4a:ca:62:10:79:d9:62:2a:
                    b9:04:8e:07:08:ba:2c:ef:fd:f9:c2:bd:e6:bc:ab:
                    ae:8e:ee:5f:d0:77:ab:66:7e:1b:a9:58:1a:d4:f2:
                    ea:77:9b:68:63:ea:08:17:70:eb:16:b2:3a:91:74:
                    01:16:c4:6c:31:89:b1:c4:49:f5:e4:a7:3f:fd:7f:
                    0f:eb:8e:16:56:06:19:a5:6f:b4:d5:01:6d:26:eb:
                    37:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:59:C0:98:75:AA:DF:75:0F:00:F6:44:D5:7E:D4:89:EB:16:BD:47
            X509v3 Authority Key Identifier:
                keyid:10:B7:82:2C:A2:20:13:D1:B3:09:5A:B9:74:94:9F:D9:8A:76:02:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10B7822CA22013D1B3095AB974949FD98A76025C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/3130332e3134352e3232362e302f32342d3234203d3e20313339343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:7b:8a:21:6c:5d:2f:2b:b8:e6:63:70:2c:10:bf:e1:19:dd:
         a4:9c:ed:e6:0b:6a:23:3f:75:fb:8f:0c:b9:a8:9c:d1:0b:13:
         82:da:fc:23:87:4d:f8:29:d8:72:f8:23:4e:db:ea:16:1a:5c:
         c6:3a:ca:c5:60:8d:9d:80:58:68:e8:13:91:fb:84:07:b7:1a:
         cf:c1:0d:60:58:b5:eb:b7:58:55:5e:84:ce:51:3e:f0:8f:2c:
         3b:f1:a8:11:de:f3:f0:7c:cb:79:95:9a:29:49:7d:30:e6:d2:
         36:51:7c:08:25:cf:ba:a4:2c:ab:f1:28:db:cf:73:10:7e:8d:
         64:c8:21:f9:16:2d:1e:c5:1e:4f:5b:2d:bd:67:57:fb:79:3c:
         8a:f5:c7:39:ed:fb:c4:0f:09:c3:3c:55:c5:51:60:92:4c:19:
         16:42:15:f8:6f:48:04:74:81:0e:49:17:7e:70:30:b8:65:b0:
         bc:ba:8f:ca:f9:26:21:a8:33:52:b5:6f:42:8e:55:66:85:8b:
         6a:57:3d:4f:3f:82:1c:87:26:24:3d:94:af:c6:3f:14:66:85:
         c0:91:0d:ee:5d:82:da:26:d2:3f:ea:8e:b3:f7:4d:63:1d:7b:
         9d:ef:2d:97:26:12:95:02:aa:15:20:31:45:c2:1f:43:37:73:
         4a:ad:00:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:00:23 2025 by rpki-client