Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/3130332e3139302e34362e302f32342d3234203d3e2039333431.roa
File:                     3130332e3139302e34362e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          jBjxNJ+007Quwhm8JkgTbciN359d/zYXuYTKIMisTrU=
Subject key identifier:   96:42:3B:C7:E1:E3:EC:76:77:53:9E:2A:A3:2A:29:02:53:DC:B7:92
Certificate issuer:       /CN=5C7240CA135C93835F95A8E1F3526942D3214EC2
Certificate serial:       2D36053349D5484895D573F8C0F5441D0CD03F30
Authority key identifier: 5C:72:40:CA:13:5C:93:83:5F:95:A8:E1:F3:52:69:42:D3:21:4E:C2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/3130332e3139302e34362e302f32342d3234203d3e2039333431.roa
Signing time:             Wed 09 Apr 2025 06:00:00 +0000
ROA not before:           Wed 09 Apr 2025 05:55:00 +0000
ROA not after:            Wed 08 Apr 2026 06:00:00 +0000
asID:                     9341
IP address blocks:        103.190.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.crl
                          rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 17:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:36:05:33:49:d5:48:48:95:d5:73:f8:c0:f5:44:1d:0c:d0:3f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C7240CA135C93835F95A8E1F3526942D3214EC2
        Validity
            Not Before: Apr  9 05:55:00 2025 GMT
            Not After : Apr  8 06:00:00 2026 GMT
        Subject: CN=96423BC7E1E3EC7677539E2AA32A290253DCB792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:67:b7:fc:ee:8f:9a:67:94:f6:4d:fb:86:89:
                    e8:1b:e9:93:6c:fd:06:1f:9f:60:bc:b8:6e:3f:a9:
                    d4:ec:8f:49:81:ce:00:0e:eb:79:7a:ec:8d:17:27:
                    24:a0:9e:d0:29:b5:df:b1:a5:47:e8:01:40:c8:87:
                    03:72:0e:bc:5a:db:05:76:39:e3:2a:04:a8:33:7e:
                    72:3c:18:68:3e:7b:8e:ad:e1:f7:36:3e:d6:e6:7d:
                    aa:5a:c5:dc:77:23:1b:be:0c:e4:c1:fe:79:f9:ba:
                    da:16:27:73:f6:be:07:c4:97:99:14:fd:40:6e:36:
                    37:0c:b1:f9:69:20:a3:2e:39:c7:c6:66:82:26:0c:
                    37:87:f9:eb:c8:6d:a0:f7:81:47:7b:ae:18:66:72:
                    f1:4a:b5:b1:49:e8:6a:ee:5d:27:e4:c0:f5:65:18:
                    3e:1b:11:bf:3b:c8:14:cd:7e:c5:ed:99:5d:10:3b:
                    51:97:52:32:be:d7:1b:e6:2d:46:29:5c:7f:28:8f:
                    bf:ef:02:d2:38:31:bf:6a:6e:5c:cd:8a:c9:f5:72:
                    78:1d:da:fc:ef:36:68:fe:c8:65:ec:bc:eb:da:e9:
                    df:30:c9:e2:b6:97:cc:90:64:56:46:ee:48:09:c8:
                    d7:60:03:76:e4:a2:4f:a5:dd:2c:1f:85:1e:7c:81:
                    c5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:42:3B:C7:E1:E3:EC:76:77:53:9E:2A:A3:2A:29:02:53:DC:B7:92
            X509v3 Authority Key Identifier:
                keyid:5C:72:40:CA:13:5C:93:83:5F:95:A8:E1:F3:52:69:42:D3:21:4E:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/3130332e3139302e34362e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:13:c8:8d:9c:ef:bb:bf:42:7e:66:2c:87:6b:c5:f1:8b:42:
         db:14:22:ff:ca:28:9f:00:58:ed:4a:7a:5e:e3:8e:2c:b2:e1:
         e2:88:d0:20:34:88:2e:fb:9d:32:6c:ff:75:66:5c:13:1b:e7:
         4b:db:6f:b4:6a:7f:be:84:5b:e9:f3:8f:6d:4e:e7:c0:83:00:
         cd:36:08:62:14:30:8f:c9:9c:41:01:2a:52:bc:dd:8e:94:46:
         15:84:8a:ff:0a:b4:4f:db:26:ff:15:4e:7d:49:01:75:42:b4:
         7e:29:6e:b2:3f:b1:fc:14:6c:40:3f:7f:4f:32:ff:9b:63:5e:
         40:54:75:0b:f8:24:eb:5b:c7:e1:c7:9e:24:3d:db:5c:7b:5f:
         7f:68:c0:28:dc:ea:32:f5:e2:c8:7f:85:52:34:92:f2:3c:6e:
         c9:ba:e3:2e:19:59:3e:d7:7a:56:ac:80:3c:c7:50:aa:79:3f:
         89:a5:d5:7a:14:d0:44:27:12:c6:d4:9d:d1:eb:fc:af:9b:72:
         d4:fd:67:e2:63:be:39:9c:ef:d3:5a:7f:de:49:21:26:af:7a:
         91:d6:d3:5c:d5:15:34:29:bb:5e:86:3b:1c:b3:73:ec:a4:13:
         23:12:74:3b:b4:b8:a4:a5:97:99:cf:48:93:bd:41:17:bf:0f:
         92:58:b6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 15:50:03 2025 by rpki-client on console.sobornost.net