Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/3130332e3139302e34362e302f32332d3233203d3e2039333431.roa
File:                     3130332e3139302e34362e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier:          WvXqqkpLSakilobbbh3oi/iYc3pt0ZdEradB47daqG8=
Subject key identifier:   CA:AD:FB:40:0E:F7:94:2D:92:49:A0:34:5C:7C:BB:58:92:63:40:DD
Certificate issuer:       /CN=5C7240CA135C93835F95A8E1F3526942D3214EC2
Certificate serial:       6FF5EB282CCAF2E87EBED41EBE505C6343E4601F
Authority key identifier: 5C:72:40:CA:13:5C:93:83:5F:95:A8:E1:F3:52:69:42:D3:21:4E:C2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/3130332e3139302e34362e302f32332d3233203d3e2039333431.roa
Signing time:             Wed 09 Apr 2025 06:00:00 +0000
ROA not before:           Wed 09 Apr 2025 05:55:00 +0000
ROA not after:            Wed 08 Apr 2026 06:00:00 +0000
asID:                     9341
IP address blocks:        103.190.46.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.crl
                          rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 17:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:f5:eb:28:2c:ca:f2:e8:7e:be:d4:1e:be:50:5c:63:43:e4:60:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C7240CA135C93835F95A8E1F3526942D3214EC2
        Validity
            Not Before: Apr  9 05:55:00 2025 GMT
            Not After : Apr  8 06:00:00 2026 GMT
        Subject: CN=CAADFB400EF7942D9249A0345C7CBB58926340DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e0:eb:3f:73:18:c2:f1:10:d8:e7:b1:61:a1:
                    ec:9b:4a:83:33:a3:79:c8:de:1e:03:75:1c:c3:40:
                    f6:fc:72:fe:03:74:85:aa:b7:f3:a5:a8:ef:5e:84:
                    27:d7:d0:a1:90:6c:b5:a6:eb:e2:9f:40:b6:68:17:
                    12:a7:28:80:72:67:80:8d:a7:f9:76:c4:d1:94:a1:
                    92:26:61:93:63:db:77:b1:85:08:fb:4e:37:05:2f:
                    97:e1:f6:03:de:fb:a9:7f:54:39:b3:c5:d6:3a:e4:
                    4e:ca:54:1a:71:5d:12:eb:3e:db:4e:4f:ad:b6:58:
                    6f:df:7d:e2:7d:f2:fc:7f:31:6c:ea:63:2b:42:12:
                    db:b7:f4:a3:81:fc:16:c9:e0:e0:97:46:cd:9f:cd:
                    04:a8:bc:e8:0d:50:a0:4f:e6:e4:c6:a3:3f:b6:8d:
                    6f:05:13:e2:70:a0:b0:b1:6d:f8:94:07:bd:08:66:
                    52:a2:b1:02:81:22:82:e5:87:c3:91:20:f4:ad:d0:
                    35:8f:d8:df:b2:aa:fe:ef:fb:09:55:95:39:cd:92:
                    77:e0:68:75:1b:a0:42:65:8c:26:9d:ef:60:4f:e4:
                    67:c4:2d:eb:63:e4:26:58:ab:6c:a2:6b:a1:f5:9a:
                    f2:cf:e6:8a:6b:99:4e:ca:e4:22:a9:e0:a1:08:c0:
                    e5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:AD:FB:40:0E:F7:94:2D:92:49:A0:34:5C:7C:BB:58:92:63:40:DD
            X509v3 Authority Key Identifier:
                keyid:5C:72:40:CA:13:5C:93:83:5F:95:A8:E1:F3:52:69:42:D3:21:4E:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/3130332e3139302e34362e302f32332d3233203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:6b:7e:71:de:d4:70:aa:12:52:c0:a8:4f:10:c1:0b:bb:81:
         2a:4f:08:6d:2e:5d:c5:8b:90:50:f2:c3:8b:60:df:47:62:26:
         2f:62:fc:a6:f5:a6:f0:f6:e6:1d:e8:25:be:f9:d4:15:1c:22:
         19:46:d6:89:f5:82:fb:2a:ec:94:4f:eb:05:e4:d3:9b:11:c0:
         4d:ca:fa:31:6c:77:4f:7e:62:28:14:21:40:c1:36:82:4f:f3:
         4b:68:f3:09:e0:be:f4:16:b1:fc:50:41:3b:bb:c4:a1:b9:83:
         5d:cf:b5:f2:69:d5:ae:e6:9f:84:06:0f:54:45:a2:b6:9a:d1:
         09:ca:d1:c4:2d:9b:78:95:5e:72:2c:f1:f5:b1:d9:84:81:a5:
         e1:23:87:d1:23:78:a9:dc:30:86:a5:86:7a:cc:ec:9a:76:36:
         b0:17:43:69:10:b0:85:14:90:7a:4c:58:cc:7b:59:84:25:39:
         4b:d8:ff:26:e3:b5:c5:1b:b0:2f:ef:6e:8e:01:26:01:fd:2e:
         b3:0d:07:d3:8d:3e:c1:84:45:41:c7:42:79:0a:43:ff:34:8b:
         b0:25:eb:aa:3b:3e:2a:09:9b:b4:4b:b7:12:81:e4:c5:a4:95:
         45:0a:55:45:38:6b:69:98:e0:3d:2d:ec:63:08:67:3e:bc:8b:
         41:f8:ef:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 15:50:03 2025 by rpki-client on console.sobornost.net