Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/3130332e3133312e32392e302f32342d3234203d3e20313338303834.roa
File:                     3130332e3133312e32392e302f32342d3234203d3e20313338303834.roa (raw, json)
Hash identifier:          encpHXfOglU+n5zC00TevMjvjDMOpcW1MtPZsrVdOCI=
Subject key identifier:   16:E5:C0:7B:4C:8A:CB:4F:B3:0A:B7:F5:EF:95:9F:C3:C2:CF:3A:43
Certificate issuer:       /CN=27A3131BB606D93657151019C1A9735DF861C9D4
Certificate serial:       4AFE5E2669ED2F8A2A4B15ED04833602D0D0DA
Authority key identifier: 27:A3:13:1B:B6:06:D9:36:57:15:10:19:C1:A9:73:5D:F8:61:C9:D4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27A3131BB606D93657151019C1A9735DF861C9D4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/3130332e3133312e32392e302f32342d3234203d3e20313338303834.roa
Signing time:             Tue 06 May 2025 05:02:29 +0000
ROA not before:           Tue 06 May 2025 04:57:29 +0000
ROA not after:            Tue 05 May 2026 05:02:29 +0000
asID:                     138084
IP address blocks:        103.131.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/27A3131BB606D93657151019C1A9735DF861C9D4.crl
                          rsync://repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/27A3131BB606D93657151019C1A9735DF861C9D4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27A3131BB606D93657151019C1A9735DF861C9D4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 May 2025 15:40:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:fe:5e:26:69:ed:2f:8a:2a:4b:15:ed:04:83:36:02:d0:d0:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27A3131BB606D93657151019C1A9735DF861C9D4
        Validity
            Not Before: May  6 04:57:29 2025 GMT
            Not After : May  5 05:02:29 2026 GMT
        Subject: CN=16E5C07B4C8ACB4FB30AB7F5EF959FC3C2CF3A43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:be:87:2e:86:ba:00:d9:6d:6c:18:78:a8:b3:
                    de:a2:a8:2f:a9:e6:f4:e1:b4:34:2d:1f:27:62:dd:
                    64:af:47:2e:15:54:63:69:a1:ac:93:b4:12:eb:62:
                    2f:de:f2:1f:ef:4e:eb:ee:e2:75:6d:3f:e6:27:97:
                    3c:d8:3f:52:47:c1:b5:3d:c9:c6:bd:a8:7f:17:32:
                    12:77:76:66:02:00:d7:7b:b9:d6:14:8f:0c:c9:1b:
                    34:6e:50:4f:02:83:5b:16:24:3c:7b:d6:9e:88:36:
                    2c:46:d3:15:34:d6:90:86:17:36:a1:db:0c:28:9b:
                    70:f8:14:26:d3:0d:6a:eb:6f:5d:a7:f8:64:9b:24:
                    09:98:b7:8a:1a:34:da:8c:5f:2c:af:27:e5:b7:d3:
                    49:96:75:a1:a3:8f:47:bc:b8:c2:7e:4e:27:bd:21:
                    e9:bc:10:a4:4f:eb:f9:7c:81:05:2c:10:0c:f9:5e:
                    53:77:55:87:aa:a1:f9:c6:9a:2f:f1:6a:02:1a:13:
                    4b:3b:63:d4:e4:cc:d1:19:7c:84:92:88:a8:51:27:
                    68:2e:90:ee:65:b9:71:a7:05:bf:b3:8b:d3:c4:f8:
                    27:f1:1a:fa:af:5a:71:6a:99:d4:ee:a0:e3:c2:89:
                    64:47:24:28:53:9e:c4:3c:ab:be:91:26:86:83:58:
                    41:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E5:C0:7B:4C:8A:CB:4F:B3:0A:B7:F5:EF:95:9F:C3:C2:CF:3A:43
            X509v3 Authority Key Identifier:
                keyid:27:A3:13:1B:B6:06:D9:36:57:15:10:19:C1:A9:73:5D:F8:61:C9:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/27A3131BB606D93657151019C1A9735DF861C9D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27A3131BB606D93657151019C1A9735DF861C9D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4544e951-3d08-458a-a44a-529d387d26b1/0/3130332e3133312e32392e302f32342d3234203d3e20313338303834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:58:77:78:9b:32:1f:c9:04:4d:d1:d6:0d:d9:31:23:b7:a7:
         47:62:a2:4f:e9:d1:b1:19:41:42:fa:93:e3:c1:bf:0c:2f:8c:
         aa:eb:6d:2b:42:3f:33:50:22:8a:1b:4b:dc:93:13:d2:34:6a:
         3d:74:a2:fc:53:94:f6:2c:05:c5:06:e2:80:c7:c1:42:be:a9:
         b0:e5:e6:88:73:3f:3c:2b:2d:4c:02:c0:73:23:9a:b1:74:fb:
         9a:59:74:9d:07:b2:3e:4c:af:39:33:4a:35:d1:b7:15:61:24:
         84:1c:51:cc:4a:f8:ae:8c:8a:0b:ff:e2:9d:29:fb:93:c0:97:
         84:dc:0d:ae:30:66:85:03:69:06:7c:9f:a1:e4:ea:75:90:f6:
         cf:bb:5d:f8:b9:3d:66:d2:3c:7d:36:e4:40:ea:49:49:22:13:
         35:eb:f2:17:a5:55:a5:6f:75:7a:52:92:ca:c3:41:2d:5d:9c:
         6b:4d:11:d5:57:46:ec:30:0f:bf:74:8a:45:2a:06:60:41:a3:
         ce:cf:02:8f:c0:a0:1a:b6:3c:d8:bd:9d:99:ce:96:f0:6b:71:
         82:9b:d5:7b:b6:61:15:07:65:2b:c3:dd:78:b3:d0:14:d6:84:
         34:ef:50:8b:a1:a1:0c:96:6c:66:aa:5b:c2:ea:b2:4d:17:e0:
         3d:f6:09:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 19:05:43 2025 by rpki-client