Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/3130332e37392e3132382e302f32342d3234203d3e20313339393531.roa
File:                     3130332e37392e3132382e302f32342d3234203d3e20313339393531.roa (raw, json)
Hash identifier:          f2QS2bkCAnvcHZRI/qOVoXk+1PJl2qNtEtgN6wxB1DM=
Subject key identifier:   24:CA:49:D0:81:9E:C7:01:8D:D7:5C:D1:64:02:BB:5A:4F:B5:B0:CE
Certificate issuer:       /CN=27114CFC585C5DB2E0AC5DA74F04C66C319492F1
Certificate serial:       611AB4D4EEF79757E1D16652FFB5324308475BCB
Authority key identifier: 27:11:4C:FC:58:5C:5D:B2:E0:AC:5D:A7:4F:04:C6:6C:31:94:92:F1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/3130332e37392e3132382e302f32342d3234203d3e20313339393531.roa
Signing time:             Wed 02 Apr 2025 15:00:02 +0000
ROA not before:           Wed 02 Apr 2025 14:55:02 +0000
ROA not after:            Wed 01 Apr 2026 15:00:02 +0000
asID:                     139951
IP address blocks:        103.79.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.crl
                          rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 09:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:1a:b4:d4:ee:f7:97:57:e1:d1:66:52:ff:b5:32:43:08:47:5b:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27114CFC585C5DB2E0AC5DA74F04C66C319492F1
        Validity
            Not Before: Apr  2 14:55:02 2025 GMT
            Not After : Apr  1 15:00:02 2026 GMT
        Subject: CN=24CA49D0819EC7018DD75CD16402BB5A4FB5B0CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:51:02:0e:92:9d:75:4c:8c:7e:7d:57:37:e2:
                    79:e7:4d:d6:af:85:dc:f2:bb:19:b8:52:22:e7:0c:
                    11:43:9b:d7:d9:47:f9:90:ca:10:05:b9:4e:e6:a1:
                    82:80:dd:e6:6d:cf:06:4a:48:ee:f6:03:5b:c4:d0:
                    19:09:8d:67:03:ed:25:6a:f0:fa:e9:7d:68:ab:c3:
                    d0:5e:60:fa:69:08:a9:16:76:55:54:61:1c:cb:45:
                    67:58:57:0f:3d:49:c4:3b:7d:19:2d:1e:73:4d:6f:
                    46:84:ec:97:38:fd:f9:b9:99:b5:80:6c:a2:90:af:
                    88:8d:d6:ef:bb:23:8d:5d:9a:fe:02:3f:27:59:72:
                    ca:fc:9f:bc:f3:b9:b4:f7:1d:a5:e1:79:af:ad:ed:
                    f1:ff:6c:c1:cb:1d:29:8d:34:38:0b:51:9f:f4:83:
                    e8:2c:aa:02:76:43:02:93:93:31:95:55:be:fe:20:
                    39:1f:2c:7b:ec:67:5e:77:4b:66:20:ff:86:ed:20:
                    38:7d:ef:a6:77:a5:24:45:46:d0:1a:07:20:e1:b3:
                    cb:03:28:5a:48:c9:a0:d6:4b:48:68:89:09:20:4d:
                    5a:f3:23:57:c7:49:0c:42:cc:04:c0:d6:38:68:1f:
                    99:42:6b:dc:17:d6:e3:e7:d6:ee:61:5d:7b:60:c8:
                    68:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:CA:49:D0:81:9E:C7:01:8D:D7:5C:D1:64:02:BB:5A:4F:B5:B0:CE
            X509v3 Authority Key Identifier:
                keyid:27:11:4C:FC:58:5C:5D:B2:E0:AC:5D:A7:4F:04:C6:6C:31:94:92:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/3130332e37392e3132382e302f32342d3234203d3e20313339393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:18:75:00:24:01:ce:41:c3:17:b8:57:bb:2d:d5:fa:24:0a:
         1e:c5:3e:65:0d:8f:11:6a:75:41:cb:63:52:7f:1c:43:27:21:
         75:81:92:6f:be:47:e7:01:28:19:2c:ea:a2:c4:82:34:a6:6e:
         c9:55:82:06:0e:f2:ad:3c:55:a7:6d:a2:96:99:93:2b:f5:5d:
         6a:aa:9b:a2:94:e7:4c:a8:1f:cf:de:57:94:6d:1a:fb:72:e8:
         13:98:08:05:fe:d4:cf:57:ed:88:82:19:35:da:71:cf:8f:ae:
         15:7e:07:79:29:b0:39:52:e6:9a:35:bd:c0:73:24:a4:7a:fd:
         ca:77:f7:e0:fb:91:8b:7c:4c:9d:6b:f0:bf:3d:ee:64:46:cb:
         61:2c:50:fe:0b:f0:b1:76:93:1b:0c:41:55:1c:c3:b0:2f:ec:
         cf:33:53:7d:65:ef:89:bf:cc:e4:d5:0d:e5:f3:06:bf:fa:76:
         71:6e:b0:e6:9b:9b:f1:5c:60:09:3e:d8:28:6c:fa:ad:7e:5e:
         58:d3:e2:31:a9:4e:05:5a:4d:f0:ae:c6:9e:a6:1b:0c:6f:ea:
         48:ec:16:c4:25:e8:b2:5f:4a:37:df:fc:ff:d1:a1:9c:94:33:
         79:5d:df:01:d2:ed:77:29:f6:ff:29:c2:9f:12:7e:b5:c3:31:
         51:9e:14:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:21:17 2025 by rpki-client