Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/3130332e3130332e3134352e302f32342d3234203d3e20313336383631.roa
File:                     3130332e3130332e3134352e302f32342d3234203d3e20313336383631.roa (raw, json)
Hash identifier:          u6oloP9Y8JGAma8cxbntxH8WmfQY01P9oCREk7+XMxs=
Subject key identifier:   16:5C:CD:9E:FF:52:88:9C:07:FF:81:3E:BC:FA:A8:8B:92:F8:73:66
Certificate issuer:       /CN=74D4F2785CA261D018C909BA622D8244292BCB3E
Certificate serial:       76BD08C9375D699FF71B718DDA4DAE7FEE873943
Authority key identifier: 74:D4:F2:78:5C:A2:61:D0:18:C9:09:BA:62:2D:82:44:29:2B:CB:3E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74D4F2785CA261D018C909BA622D8244292BCB3E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/3130332e3130332e3134352e302f32342d3234203d3e20313336383631.roa
Signing time:             Wed 07 May 2025 11:15:04 +0000
ROA not before:           Wed 07 May 2025 11:10:04 +0000
ROA not after:            Wed 06 May 2026 11:15:04 +0000
asID:                     136861
IP address blocks:        103.103.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.crl
                          rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74D4F2785CA261D018C909BA622D8244292BCB3E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 May 2025 22:17:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:bd:08:c9:37:5d:69:9f:f7:1b:71:8d:da:4d:ae:7f:ee:87:39:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74D4F2785CA261D018C909BA622D8244292BCB3E
        Validity
            Not Before: May  7 11:10:04 2025 GMT
            Not After : May  6 11:15:04 2026 GMT
        Subject: CN=165CCD9EFF52889C07FF813EBCFAA88B92F87366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f0:4b:17:2b:f1:51:a9:74:b6:cc:c9:39:b3:
                    fb:21:cb:9c:56:aa:48:77:74:21:10:6c:85:6e:8f:
                    35:06:c7:aa:b7:c6:51:44:df:8e:74:8d:9a:5b:23:
                    7a:3d:91:a9:ce:cf:2c:0c:c6:d3:a5:3e:5e:2b:f7:
                    54:1c:5f:a4:06:cd:8d:f9:e7:4d:83:d9:87:df:45:
                    35:6e:fc:61:f4:4f:f7:a0:de:69:bf:a0:ea:d6:81:
                    0f:b5:79:b2:07:18:aa:b9:6f:38:fb:02:a4:79:85:
                    bc:f1:d6:67:61:95:c3:51:39:29:1b:ac:bc:f6:ad:
                    6d:be:6b:ca:d8:72:48:0b:57:76:57:79:b2:64:ce:
                    a7:eb:fd:47:65:92:21:14:0c:f8:ea:de:9e:36:f9:
                    1d:c4:1f:20:e5:d2:9a:ef:bb:64:55:83:97:12:bf:
                    79:74:c3:0e:c2:d1:d0:46:9e:0e:5a:33:42:ec:7e:
                    62:75:9c:ba:8b:f0:e0:03:5e:07:f9:24:70:84:67:
                    97:49:b7:bb:4f:fc:6e:08:1f:46:d8:ff:dc:a1:d5:
                    d6:c8:68:cd:be:7c:a6:e3:c9:32:32:1f:78:c5:90:
                    4b:a4:15:9c:4e:a5:e2:2b:3d:3d:d0:b1:98:d9:78:
                    43:6f:ad:88:07:65:dc:e2:d3:b5:74:98:0f:6e:e1:
                    55:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:5C:CD:9E:FF:52:88:9C:07:FF:81:3E:BC:FA:A8:8B:92:F8:73:66
            X509v3 Authority Key Identifier:
                keyid:74:D4:F2:78:5C:A2:61:D0:18:C9:09:BA:62:2D:82:44:29:2B:CB:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74D4F2785CA261D018C909BA622D8244292BCB3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/3130332e3130332e3134352e302f32342d3234203d3e20313336383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:52:e4:65:55:3c:97:7a:ee:1a:71:e5:34:c6:95:4d:e6:18:
         3f:5b:73:56:45:59:23:24:64:b1:75:d8:69:be:14:dd:93:2c:
         85:a5:02:a0:06:dd:6a:e1:d8:1a:17:c2:9e:77:1f:64:39:8b:
         bd:eb:6f:b6:1a:b3:88:3e:a9:2b:68:80:6e:5b:1a:9b:e6:6d:
         00:13:f5:17:4b:43:19:c1:ca:4d:22:9c:29:ac:66:bb:80:7c:
         9e:e3:ae:b9:b0:2c:3a:a4:83:59:28:98:42:ce:f3:ef:b8:42:
         31:ed:4d:f2:ca:d6:6a:0c:a3:33:4c:3c:58:67:7c:a4:d1:68:
         86:1e:6a:82:04:95:ab:dd:fc:8f:d2:e4:d7:49:61:54:96:00:
         24:e8:44:56:36:81:ae:ef:aa:0b:94:8c:39:f2:26:f4:51:26:
         86:32:42:da:35:aa:90:c4:17:89:af:ac:d5:ed:ec:1e:7d:bf:
         4e:9d:77:08:2d:2d:8f:e1:fe:0c:04:79:91:f3:34:fe:76:1b:
         e2:b9:43:33:b8:8e:bc:64:43:28:22:02:a4:59:1a:09:53:44:
         d1:38:c6:fd:e8:d4:66:10:41:d1:a5:c0:f4:49:8c:5f:a2:8e:
         9f:92:1c:b9:dc:01:ae:11:f6:6c:7c:70:b4:59:85:30:95:dc:
         a7:2f:70:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:50:32 2025 by rpki-client