Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/3130332e3138302e3136352e302f32342d3234203d3e20313338313331.roa
File:                     3130332e3138302e3136352e302f32342d3234203d3e20313338313331.roa (raw, json)
Hash identifier:          UDP5vaqP++IAcM6lMBhTtGhgbdITohHwdo+pbRZf5tI=
Subject key identifier:   E6:6C:80:16:40:6D:F2:0A:18:EE:8C:4B:18:E5:41:BC:9A:D8:1D:54
Certificate issuer:       /CN=52E77B06BC2691C613C7A9872EE1E28FCB8AA245
Certificate serial:       3B20299DD015F7A2C504E6995F66417596D7C52E
Authority key identifier: 52:E7:7B:06:BC:26:91:C6:13:C7:A9:87:2E:E1:E2:8F:CB:8A:A2:45
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/3130332e3138302e3136352e302f32342d3234203d3e20313338313331.roa
Signing time:             Fri 25 Apr 2025 13:00:00 +0000
ROA not before:           Fri 25 Apr 2025 12:55:00 +0000
ROA not after:            Fri 24 Apr 2026 13:00:00 +0000
asID:                     138131
IP address blocks:        103.180.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.crl
                          rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 15:41:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:20:29:9d:d0:15:f7:a2:c5:04:e6:99:5f:66:41:75:96:d7:c5:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52E77B06BC2691C613C7A9872EE1E28FCB8AA245
        Validity
            Not Before: Apr 25 12:55:00 2025 GMT
            Not After : Apr 24 13:00:00 2026 GMT
        Subject: CN=E66C8016406DF20A18EE8C4B18E541BC9AD81D54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e6:9a:e5:31:d3:1b:18:0b:e0:e3:ca:b7:43:
                    1f:6f:53:0d:6e:94:f4:23:95:6a:86:01:f4:9f:87:
                    d5:ad:4a:80:c0:ba:97:8e:99:0c:c1:80:bf:fe:0a:
                    86:40:24:25:df:15:88:ba:b6:21:8f:ab:bd:9a:12:
                    c7:fb:ee:dc:9b:92:96:b6:ec:e9:74:0e:5c:a5:23:
                    eb:f2:2b:57:c3:40:4f:1f:8a:c7:5e:40:97:a9:e7:
                    7c:6a:6a:31:f9:ce:de:6a:5e:03:50:36:0d:98:97:
                    67:26:bb:9f:6b:75:f9:1d:d6:65:eb:81:00:1f:99:
                    31:f8:17:83:a9:93:1f:74:f0:2f:03:3c:1a:c7:be:
                    5c:ad:e1:d9:24:1c:e4:1a:2d:89:88:b0:c4:82:eb:
                    bd:c3:44:69:24:72:7d:c4:5c:a2:af:98:e3:d6:c3:
                    ba:cd:cf:51:22:55:b0:e0:b9:42:a9:25:bd:d4:e8:
                    fc:ba:7b:70:56:cc:2e:1d:db:fa:3a:33:4f:f9:ee:
                    eb:99:7b:39:b1:5b:a0:87:33:f5:fb:01:ba:74:23:
                    a1:b8:c1:d1:37:27:8f:14:06:61:20:c2:b5:30:55:
                    41:49:bc:b7:d0:54:7a:f2:81:66:05:23:d0:c1:a2:
                    3e:cc:4c:ba:e3:ed:44:a4:11:e2:47:5c:fe:1b:7b:
                    de:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:6C:80:16:40:6D:F2:0A:18:EE:8C:4B:18:E5:41:BC:9A:D8:1D:54
            X509v3 Authority Key Identifier:
                keyid:52:E7:7B:06:BC:26:91:C6:13:C7:A9:87:2E:E1:E2:8F:CB:8A:A2:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/3130332e3138302e3136352e302f32342d3234203d3e20313338313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:7d:bb:1a:4c:aa:11:07:89:da:83:62:ab:23:bd:78:d4:bf:
         6f:60:c5:0a:1c:1d:b0:c6:2e:7a:6c:12:88:d3:b7:1b:2a:6b:
         d8:51:a6:b6:9e:c0:70:65:d8:bd:91:59:39:ae:d4:32:8d:6a:
         3a:c9:52:4a:01:2f:cb:11:42:67:d2:e0:a2:40:54:0b:ff:61:
         3d:f1:52:1e:94:d1:01:02:ba:99:49:06:63:ce:5f:74:e4:94:
         bd:0e:ca:99:1e:7e:0d:99:0a:0f:1a:a7:5d:a4:4b:7a:07:f6:
         71:f1:dc:8d:87:ba:19:12:a5:a0:1b:e6:e2:a7:b4:12:5a:2b:
         03:94:89:26:41:ef:d7:87:85:7a:f0:47:c7:f5:89:74:bb:2d:
         fc:30:13:e5:0e:2c:65:83:80:a8:69:62:6c:63:e6:34:29:e6:
         91:d8:7a:f6:18:a6:99:16:68:70:c4:73:7d:01:b7:a2:10:40:
         2e:3c:74:3b:fe:33:51:a1:d7:75:32:c4:b8:01:a9:7a:0f:90:
         3f:dd:5b:64:92:d3:2d:ee:dd:a1:af:ab:0b:41:32:67:e1:c3:
         da:70:f7:a5:4b:de:49:2f:bf:bd:5b:5f:aa:b1:1b:26:2b:92:
         6b:a6:dc:44:c9:2b:73:70:ae:d3:ef:c2:ef:85:26:b2:2d:e0:
         63:60:4c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:11:50 2025 by rpki-client on console.sobornost.net