Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3130332e3235312e34352e302f32342d3234203d3e20313331373735.roa
File:                     3130332e3235312e34352e302f32342d3234203d3e20313331373735.roa (raw, json)
Hash identifier:          2ttGNYSIno2YUVrl5iMDUeYoXTM+0/k8iShvnFHSZUg=
Subject key identifier:   4C:0F:7C:3B:39:A8:C2:4E:96:9D:61:FE:F5:6A:FD:75:C1:42:C3:0C
Certificate issuer:       /CN=49CDCA308C289D688C649C2303BECB3ED76B5054
Certificate serial:       0EAC16799FA80A54CF95A00A930C8D3BDC9E68BE
Authority key identifier: 49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3130332e3235312e34352e302f32342d3234203d3e20313331373735.roa
Signing time:             Mon 02 Jun 2025 02:02:49 +0000
ROA not before:           Mon 02 Jun 2025 01:57:49 +0000
ROA not after:            Mon 01 Jun 2026 02:02:49 +0000
asID:                     131775
IP address blocks:        103.251.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl
                          rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 08:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ac:16:79:9f:a8:0a:54:cf:95:a0:0a:93:0c:8d:3b:dc:9e:68:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49CDCA308C289D688C649C2303BECB3ED76B5054
        Validity
            Not Before: Jun  2 01:57:49 2025 GMT
            Not After : Jun  1 02:02:49 2026 GMT
        Subject: CN=4C0F7C3B39A8C24E969D61FEF56AFD75C142C30C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:34:6a:92:5a:38:56:62:3a:f9:c9:30:a6:0f:
                    96:06:f5:88:12:6c:91:1b:1b:60:13:53:48:bf:cd:
                    70:b7:df:d3:21:8e:ef:27:ee:1a:69:d1:76:69:f3:
                    7e:30:a3:73:5b:d3:8f:4c:09:5b:df:4d:1d:39:2a:
                    c4:b0:72:fa:d8:f5:45:7e:0b:dc:15:a1:93:db:d8:
                    f4:06:90:84:2e:4f:7e:57:53:89:99:ca:96:df:8e:
                    55:37:68:01:e9:1e:c4:d5:c2:18:ed:08:ca:db:b0:
                    ac:50:92:ec:19:23:45:df:79:76:96:a7:d3:0d:34:
                    7c:44:2d:7f:2e:95:ba:17:64:55:37:53:a6:a7:11:
                    e4:66:c4:6e:fa:7e:78:a9:10:55:84:28:1b:ae:c2:
                    22:c0:eb:f2:29:9c:4c:05:fc:28:0c:43:17:63:1d:
                    59:26:64:02:a4:d1:b0:d2:63:49:49:c6:1e:e5:9b:
                    00:c6:35:8f:71:10:4a:79:75:2a:56:8d:9f:cb:e8:
                    91:80:26:0a:ab:5c:89:73:f1:ce:3d:49:84:93:92:
                    bf:e3:64:97:77:22:bc:28:22:52:c5:85:6d:a7:50:
                    41:39:e8:61:57:19:79:d3:c7:78:36:82:a4:54:f0:
                    13:a8:02:8c:af:9e:4b:71:6e:1e:53:49:f7:f6:4e:
                    f7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:0F:7C:3B:39:A8:C2:4E:96:9D:61:FE:F5:6A:FD:75:C1:42:C3:0C
            X509v3 Authority Key Identifier:
                keyid:49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3130332e3235312e34352e302f32342d3234203d3e20313331373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.251.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:11:83:65:65:53:14:73:fb:be:fd:af:78:b8:92:d8:1f:23:
         31:7d:17:b1:70:18:90:da:0d:30:91:83:30:c9:9f:34:be:94:
         19:1d:6f:1e:27:f5:4e:40:90:be:16:9d:7f:02:66:af:c1:5a:
         61:4e:53:3e:a6:27:3a:31:17:b4:52:64:2e:80:2c:80:7e:27:
         dc:52:cb:3c:22:7a:00:a4:58:b5:1f:5b:c1:ed:5f:7f:db:75:
         23:93:0a:b9:2e:06:64:80:3e:ac:6e:de:b8:79:4e:3b:c6:4c:
         76:d2:e0:48:ba:34:79:7b:1e:f6:98:06:1a:34:0d:d5:93:f6:
         24:ae:e1:44:7a:5b:56:32:e5:f5:78:e8:88:3d:03:dd:29:66:
         1d:1d:c3:8b:8d:42:f2:56:a5:a6:bc:95:de:f5:8e:a5:4a:6e:
         49:af:05:56:72:76:9f:13:04:57:8d:e8:59:f2:96:d0:32:d4:
         66:03:6a:d7:0b:12:f8:10:58:93:77:f9:58:42:8f:fc:7e:07:
         6c:8c:2b:93:8a:0b:e3:75:9e:ba:7a:ad:31:1c:89:7c:97:df:
         a3:71:19:5f:54:c5:de:eb:1b:e9:78:9e:39:18:3e:b0:0e:54:
         f7:46:ae:05:a1:7f:a8:08:be:c8:9b:8e:59:85:de:74:1f:41:
         b0:c2:72:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:37:09 2025 by rpki-client