Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c8c8af7a-e466-4252-9102-883597fbe3ee/0/3130332e3131322e3233352e302f32342d3234203d3e20313530343736.roa
File:                     3130332e3131322e3233352e302f32342d3234203d3e20313530343736.roa (raw, json)
Hash identifier:          D7SDKFjGZksyu0SfLdow9lyuBD1+YFugEC6BE07NRgI=
Subject key identifier:   61:1D:E1:34:F1:BB:AF:F1:52:0C:EC:9E:63:0D:EA:6D:19:83:98:D2
Certificate issuer:       /CN=7C4CED4E60170CCE711624802DD8A811A1562077
Certificate serial:       425097D850876811C51BE5E2CC9523F182690B62
Authority key identifier: 7C:4C:ED:4E:60:17:0C:CE:71:16:24:80:2D:D8:A8:11:A1:56:20:77
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C4CED4E60170CCE711624802DD8A811A1562077.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c8c8af7a-e466-4252-9102-883597fbe3ee/0/3130332e3131322e3233352e302f32342d3234203d3e20313530343736.roa
Signing time:             Wed 07 May 2025 01:55:46 +0000
ROA not before:           Wed 07 May 2025 01:50:46 +0000
ROA not after:            Wed 06 May 2026 01:55:46 +0000
asID:                     150476
IP address blocks:        103.112.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c8c8af7a-e466-4252-9102-883597fbe3ee/0/7C4CED4E60170CCE711624802DD8A811A1562077.crl
                          rsync://repo-rpki.idnic.net/repo/c8c8af7a-e466-4252-9102-883597fbe3ee/0/7C4CED4E60170CCE711624802DD8A811A1562077.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C4CED4E60170CCE711624802DD8A811A1562077.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 May 2025 09:37:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:50:97:d8:50:87:68:11:c5:1b:e5:e2:cc:95:23:f1:82:69:0b:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C4CED4E60170CCE711624802DD8A811A1562077
        Validity
            Not Before: May  7 01:50:46 2025 GMT
            Not After : May  6 01:55:46 2026 GMT
        Subject: CN=611DE134F1BBAFF1520CEC9E630DEA6D198398D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:73:16:75:8b:ff:e4:bf:d8:e0:70:f4:24:a5:
                    7e:29:3f:e7:37:c2:b3:9b:f9:b3:09:58:be:43:34:
                    6e:2c:68:ce:5a:41:6a:b7:3a:82:78:13:02:12:e6:
                    2b:cc:df:9c:d3:b3:e8:8f:c1:6d:d0:18:e3:57:22:
                    82:d3:80:ee:da:1e:d1:13:85:bd:62:1a:a2:6f:37:
                    04:33:8c:3f:c7:45:31:17:c3:07:ff:fb:89:2b:04:
                    55:ec:24:7a:b0:56:bc:61:38:81:33:42:33:0a:46:
                    a6:2c:22:04:58:2f:e7:cb:95:ad:36:af:06:94:fa:
                    00:af:8e:9e:8f:b7:a4:7a:ff:6d:5e:72:7f:11:ed:
                    9b:12:96:c9:50:16:df:8c:1c:09:30:dd:29:0f:1f:
                    55:1d:5c:1e:cc:fe:30:26:57:ca:75:f7:2f:f0:73:
                    66:6d:57:a9:7d:90:ca:32:e0:bc:ae:9c:d0:c9:71:
                    76:00:4b:9b:47:32:e3:8b:37:60:66:31:13:a2:47:
                    9c:9a:40:53:d6:c0:8d:0c:7b:a7:24:d3:52:3d:99:
                    4c:4f:74:61:53:76:8e:3a:80:20:2d:92:8b:81:a0:
                    b7:8c:13:26:c3:b8:8e:08:aa:35:94:a7:80:63:08:
                    42:88:f8:aa:59:85:dd:a0:0a:ec:03:e7:f2:bb:aa:
                    5c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:1D:E1:34:F1:BB:AF:F1:52:0C:EC:9E:63:0D:EA:6D:19:83:98:D2
            X509v3 Authority Key Identifier:
                keyid:7C:4C:ED:4E:60:17:0C:CE:71:16:24:80:2D:D8:A8:11:A1:56:20:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c8c8af7a-e466-4252-9102-883597fbe3ee/0/7C4CED4E60170CCE711624802DD8A811A1562077.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C4CED4E60170CCE711624802DD8A811A1562077.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8c8af7a-e466-4252-9102-883597fbe3ee/0/3130332e3131322e3233352e302f32342d3234203d3e20313530343736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:a7:58:f8:b4:6f:2a:fa:a2:97:3c:d1:c4:5e:10:9f:43:4b:
         49:af:43:cb:b4:71:9d:4f:2a:c6:d1:4f:bf:c3:ac:b4:6e:63:
         d6:4f:5c:cd:1e:7e:26:b3:05:d0:84:2b:be:1d:97:ba:c7:a6:
         a5:95:ad:bd:a0:1c:13:85:be:a9:db:1c:b4:b5:41:b2:75:4f:
         dd:1d:ec:9c:87:b9:8c:dd:97:4d:75:3c:1b:a5:fe:c1:e7:e4:
         ef:3d:1b:76:4c:0b:60:01:fc:74:2b:7a:22:6f:d7:5a:07:0f:
         f0:53:63:fe:0c:60:8a:2d:0d:2c:10:0b:2d:94:9f:74:e3:4c:
         6d:e1:84:47:11:88:03:42:a6:97:d4:11:2d:cf:a2:60:c5:a0:
         53:6f:39:59:44:03:1d:60:c4:7c:a5:6e:a4:32:d1:d1:54:3f:
         04:82:d2:78:13:f0:96:d3:80:ca:f0:0c:41:fd:18:e8:ba:22:
         f2:e8:36:83:10:3d:a5:78:1d:0f:48:c4:09:5f:61:ec:cd:a7:
         72:e5:4c:7c:45:bc:9a:d9:2d:82:ca:17:5c:d3:1c:5f:77:9c:
         06:64:68:19:d0:b5:ae:a7:58:f2:26:1d:67:0d:19:5f:3c:22:
         25:42:0c:98:96:8e:91:bb:b6:f5:8a:ce:53:f7:f4:9f:48:1b:
         db:fc:62:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:49:35 2025 by rpki-client