Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/3130332e3138302e3136342e302f32342d3234203d3e20313338313331.roa
File:                     3130332e3138302e3136342e302f32342d3234203d3e20313338313331.roa (raw, json)
Hash identifier:          fKMeJeAwMbkwf1kmZ/AB9YQDJH0OhHULVGJWeX+RPu0=
Subject key identifier:   FC:5E:02:72:03:D3:57:AF:FB:9D:C5:EA:B6:C4:78:67:4B:CC:EF:C7
Certificate issuer:       /CN=52E77B06BC2691C613C7A9872EE1E28FCB8AA245
Certificate serial:       795D530F30D8B5774E27FD5B6D76F4F2F55309C7
Authority key identifier: 52:E7:7B:06:BC:26:91:C6:13:C7:A9:87:2E:E1:E2:8F:CB:8A:A2:45
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/3130332e3138302e3136342e302f32342d3234203d3e20313338313331.roa
Signing time:             Fri 25 Apr 2025 13:00:00 +0000
ROA not before:           Fri 25 Apr 2025 12:55:00 +0000
ROA not after:            Fri 24 Apr 2026 13:00:00 +0000
asID:                     138131
IP address blocks:        103.180.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.crl
                          rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 15:41:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:5d:53:0f:30:d8:b5:77:4e:27:fd:5b:6d:76:f4:f2:f5:53:09:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52E77B06BC2691C613C7A9872EE1E28FCB8AA245
        Validity
            Not Before: Apr 25 12:55:00 2025 GMT
            Not After : Apr 24 13:00:00 2026 GMT
        Subject: CN=FC5E027203D357AFFB9DC5EAB6C478674BCCEFC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a4:bc:a7:d5:04:4f:76:d8:3a:70:2d:e7:d0:
                    d7:17:23:5e:0b:45:02:ef:69:f7:e9:78:d0:84:29:
                    11:ca:8e:43:e9:31:99:fd:f5:39:71:b5:73:57:a6:
                    a9:7c:97:38:a9:7f:cb:92:9f:bc:99:be:2e:f0:7a:
                    79:9c:19:3a:50:72:ae:91:99:78:51:6c:09:94:e9:
                    a1:1a:6f:03:f1:4f:e0:73:92:13:42:88:37:1f:cd:
                    56:43:dd:51:38:78:e2:41:8b:a7:8a:5c:5e:e2:46:
                    f7:dc:ed:dd:12:7b:0c:72:ff:db:5a:9d:53:a7:e4:
                    03:58:f9:49:4b:11:71:43:da:3c:bd:f1:ef:01:76:
                    42:4c:4d:37:8d:00:95:e8:01:33:25:35:b7:99:3a:
                    2d:9a:5c:f1:57:7a:fc:2b:ca:6c:89:98:df:41:bd:
                    7c:93:04:48:5d:b0:ec:fc:8c:7b:55:36:d9:51:d2:
                    d0:d9:bc:e5:7c:a0:95:9b:79:7a:a9:7a:4d:45:03:
                    e4:a1:1b:03:f5:87:0b:a5:02:2f:1e:6e:9a:77:34:
                    8c:e1:3a:fb:68:f4:8e:68:4d:e6:93:04:e4:8f:63:
                    46:82:be:92:38:5a:b2:f5:8d:6c:d8:a9:d1:b8:fe:
                    63:2d:5b:98:9d:32:3f:f4:71:54:6c:53:87:86:00:
                    eb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5E:02:72:03:D3:57:AF:FB:9D:C5:EA:B6:C4:78:67:4B:CC:EF:C7
            X509v3 Authority Key Identifier:
                keyid:52:E7:7B:06:BC:26:91:C6:13:C7:A9:87:2E:E1:E2:8F:CB:8A:A2:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/3130332e3138302e3136342e302f32342d3234203d3e20313338313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:7f:db:00:bf:46:9c:a6:af:a4:1d:1b:6d:42:7a:59:3f:d2:
         0a:39:8f:0e:88:f9:51:bb:93:91:31:55:d9:fd:84:fc:a1:d9:
         48:ce:5e:20:5b:43:50:6a:5d:4f:dc:df:7e:e1:3a:41:03:2f:
         b6:41:e3:c7:5b:4e:82:83:fd:cf:fd:25:96:db:1a:2f:70:b1:
         ab:5b:58:aa:bd:f3:34:1b:12:9c:03:4a:19:16:78:75:8f:15:
         00:c1:41:5c:3b:b2:52:fc:69:95:68:56:f0:c2:a6:ac:ae:6a:
         82:a0:1d:a7:88:19:30:d3:3f:ef:98:1a:84:31:ee:4e:96:f3:
         96:2f:bd:ab:8b:4b:0f:b9:ef:b7:03:6d:82:f1:a3:1e:83:77:
         7f:a7:2f:fc:58:3c:63:ed:46:09:33:dd:4a:25:0d:93:2e:89:
         b7:7e:6e:6b:a1:e9:79:21:5d:e7:0d:c2:51:71:37:26:be:3a:
         4d:0a:c6:40:eb:f0:86:4e:92:fa:b7:32:38:3a:d4:38:fa:06:
         66:b1:03:3e:0f:4a:bb:6c:11:14:38:6d:d4:9c:e3:dc:c3:2e:
         a3:ea:2e:f2:d2:44:85:b6:ef:c4:46:23:ed:f9:19:d9:60:15:
         42:97:5c:37:bd:be:f1:de:97:60:e8:78:88:89:92:d8:68:96:
         fe:db:76:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:11:50 2025 by rpki-client on console.sobornost.net