Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/3130332e3234312e32342e302f32342d3234203d3e203538383230.roa
File:                     3130332e3234312e32342e302f32342d3234203d3e203538383230.roa (raw, json)
Hash identifier:          bOC+RmVGdVwwtAAFBHuMaIGcTf4BirQnm1dEmryUd+o=
Subject key identifier:   A4:64:F8:A3:77:9B:43:53:F7:D8:0F:47:48:47:D3:1B:EB:65:FC:2B
Certificate issuer:       /CN=F318D15D68E63CEBE4BFA026A5269F3877BE13C1
Certificate serial:       3CD6EDA5462289CE0B3E61610913C9611F9802E0
Authority key identifier: F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/3130332e3234312e32342e302f32342d3234203d3e203538383230.roa
Signing time:             Wed 07 May 2025 11:22:43 +0000
ROA not before:           Wed 07 May 2025 11:17:43 +0000
ROA not after:            Wed 06 May 2026 11:22:43 +0000
asID:                     58820
IP address blocks:        103.241.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl
                          rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 May 2025 03:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:d6:ed:a5:46:22:89:ce:0b:3e:61:61:09:13:c9:61:1f:98:02:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F318D15D68E63CEBE4BFA026A5269F3877BE13C1
        Validity
            Not Before: May  7 11:17:43 2025 GMT
            Not After : May  6 11:22:43 2026 GMT
        Subject: CN=A464F8A3779B4353F7D80F474847D31BEB65FC2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e5:96:2b:6b:15:ee:c0:83:f5:d5:fb:2f:6c:
                    a5:9b:3a:00:04:75:fb:31:09:ca:a7:f5:2d:77:d3:
                    9a:53:d8:ff:2e:8e:e7:37:8c:d3:00:f9:0d:4f:37:
                    4d:12:ef:f4:de:8f:09:a6:24:c2:52:d3:36:5f:bf:
                    45:41:d3:80:10:16:55:53:74:ed:bb:49:23:0f:48:
                    26:c8:05:59:78:65:63:27:22:39:de:4c:22:0c:cb:
                    28:56:15:4b:96:84:9a:67:c1:c9:6b:14:97:14:0a:
                    cd:d2:3a:9e:f7:ba:df:ce:6f:cf:63:60:b9:de:cc:
                    62:d0:57:d8:22:a1:4d:e3:7b:62:74:d0:92:7f:38:
                    a8:c3:a5:94:90:ec:dc:91:86:a8:31:08:aa:14:f6:
                    d8:cb:97:30:0b:45:06:d3:49:4a:7b:05:af:d3:b2:
                    c1:2d:cb:42:93:d2:66:b5:27:77:8e:c5:5f:bd:d9:
                    3a:e1:b6:d1:13:c3:1f:b7:3c:7a:ea:8e:7f:c6:cf:
                    3f:78:1a:2a:26:ab:46:57:e1:93:5f:d5:d9:e0:3d:
                    82:2d:4b:dd:20:72:2b:8d:8a:75:46:4b:62:f5:64:
                    3b:96:12:5a:11:eb:3c:e6:a9:02:71:94:4e:be:a0:
                    f4:22:99:72:d4:d7:6d:69:35:1f:82:68:b7:b8:39:
                    2e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:64:F8:A3:77:9B:43:53:F7:D8:0F:47:48:47:D3:1B:EB:65:FC:2B
            X509v3 Authority Key Identifier:
                keyid:F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/3130332e3234312e32342e302f32342d3234203d3e203538383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.241.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:41:08:b4:69:de:bd:84:0a:99:73:ed:a9:99:f9:13:f1:5a:
         20:35:e1:0c:ba:44:22:8d:a0:50:0f:47:64:ef:2f:65:81:10:
         4b:9c:94:0b:17:bd:0c:0d:8a:ea:b0:e6:c3:61:2b:75:98:9f:
         7b:c0:b0:75:e9:a0:15:c7:3b:87:7b:eb:87:b4:28:92:7a:1d:
         48:13:2b:35:0e:8a:e2:98:37:9e:0a:0d:7d:59:f9:ff:40:cc:
         c0:9c:be:ca:1c:3f:08:6f:e2:17:12:f1:eb:af:f4:61:66:d7:
         48:7e:14:ac:7e:96:d8:88:4a:88:83:bc:a6:d5:ea:c8:8a:d5:
         9c:02:2d:63:99:09:39:54:03:52:66:f3:44:77:05:6b:8f:27:
         b7:c2:a8:15:2a:90:d8:62:8f:9e:5f:6e:db:a1:8a:9f:e6:3e:
         bf:6c:a3:96:8b:aa:13:d5:a0:c3:1d:19:67:bc:52:f1:b1:71:
         c7:64:db:13:7c:56:bf:f8:e8:c4:29:a7:ea:e3:b8:0e:1a:2e:
         58:05:5f:64:63:aa:1e:07:39:24:fc:3f:f7:c3:8b:6e:07:9c:
         33:7b:e5:c3:0e:e8:73:ff:34:67:f0:24:d5:3d:a1:5e:35:c6:
         2a:c4:d8:05:e2:ff:9f:52:e6:88:09:17:4f:9f:45:9c:93:4d:
         f6:ec:b2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 00:11:22 2025 by rpki-client