Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/3130332e3138322e37322e302f32342d3234203d3e20313439343038.roa
File:                     3130332e3138322e37322e302f32342d3234203d3e20313439343038.roa (raw, json)
Hash identifier:          vPnPfMFVMwFeTvRaeceb22yqey+t7BHBklK6ecujm+A=
Subject key identifier:   D8:51:49:E5:93:C5:74:6D:C0:8F:88:50:0D:FE:89:57:4E:A2:4D:5F
Certificate issuer:       /CN=656A72A6F38230D6A0DB097480D736B5C2FBA683
Certificate serial:       45FCE5051926ECD6DF72173F4D6CBEF707D21E67
Authority key identifier: 65:6A:72:A6:F3:82:30:D6:A0:DB:09:74:80:D7:36:B5:C2:FB:A6:83
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/656A72A6F38230D6A0DB097480D736B5C2FBA683.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/3130332e3138322e37322e302f32342d3234203d3e20313439343038.roa
Signing time:             Wed 15 Jan 2025 05:00:02 +0000
ROA not before:           Wed 15 Jan 2025 04:55:02 +0000
ROA not after:            Wed 14 Jan 2026 05:00:02 +0000
asID:                     149408
IP address blocks:        103.182.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.crl
                          rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/656A72A6F38230D6A0DB097480D736B5C2FBA683.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:fc:e5:05:19:26:ec:d6:df:72:17:3f:4d:6c:be:f7:07:d2:1e:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=656A72A6F38230D6A0DB097480D736B5C2FBA683
        Validity
            Not Before: Jan 15 04:55:02 2025 GMT
            Not After : Jan 14 05:00:02 2026 GMT
        Subject: CN=D85149E593C5746DC08F88500DFE89574EA24D5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:37:d6:e2:c5:d4:7d:9d:30:55:ce:c5:d5:34:
                    c0:6f:10:c7:9f:f1:0e:b8:1e:d6:45:c3:17:f9:15:
                    b7:66:d7:3a:d7:a8:2e:9e:1a:e9:7c:91:ed:ad:04:
                    9a:a7:5c:9f:73:c6:84:d3:aa:df:50:d2:3f:ba:e4:
                    93:13:a3:9a:1a:9d:d9:01:8a:25:e1:72:40:63:15:
                    61:9f:82:ee:71:81:f9:8a:fb:10:a9:7a:bd:7a:50:
                    43:1f:28:09:91:1b:09:3e:ee:c7:98:4d:44:ea:86:
                    f0:fa:f1:3d:2c:53:76:aa:18:4f:13:17:61:41:c5:
                    de:ee:5b:16:8d:b6:c0:76:5e:e9:a1:23:af:55:cd:
                    12:9a:90:23:97:89:4e:3c:0d:1d:48:29:e2:c3:35:
                    ed:7f:f7:90:d9:29:7a:66:4d:6b:c1:86:56:21:ac:
                    ac:06:23:2b:a5:40:b1:53:af:fa:e7:ca:11:9c:68:
                    70:f3:03:d0:08:14:0d:cf:f2:c1:57:11:f4:96:ca:
                    ce:ae:b3:25:5e:a7:7f:ab:33:7a:dd:c2:f7:93:7e:
                    e9:18:8e:49:3b:85:dc:48:4e:31:79:91:73:d5:ba:
                    69:47:74:6e:21:15:d7:74:da:33:c6:53:18:b1:f2:
                    ca:9e:2d:78:44:c3:2b:2f:cf:83:02:ef:d2:9d:4e:
                    8c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:51:49:E5:93:C5:74:6D:C0:8F:88:50:0D:FE:89:57:4E:A2:4D:5F
            X509v3 Authority Key Identifier:
                keyid:65:6A:72:A6:F3:82:30:D6:A0:DB:09:74:80:D7:36:B5:C2:FB:A6:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/656A72A6F38230D6A0DB097480D736B5C2FBA683.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/656A72A6F38230D6A0DB097480D736B5C2FBA683.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/3130332e3138322e37322e302f32342d3234203d3e20313439343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:da:ef:de:19:43:51:ea:83:89:24:5d:55:8a:10:9b:3e:51:
         6c:cc:da:ed:71:9c:0f:43:0b:77:b5:ef:2e:2c:7e:d4:cb:1e:
         4a:83:c6:0d:d2:94:3f:e3:61:fb:2b:f8:41:f1:46:a5:2a:a1:
         4f:83:ad:6c:2e:5a:f5:1b:e4:c8:4a:e9:99:6e:46:c4:67:03:
         a5:59:7d:8f:52:03:76:21:7e:6f:d9:ad:a9:55:a2:06:47:fa:
         19:bb:fe:17:04:9c:da:bc:f8:c6:40:61:35:61:4a:84:dc:db:
         8c:e6:19:25:d9:b9:e5:21:65:f0:12:6d:e1:e6:a7:63:49:09:
         d8:e6:5c:da:42:42:6e:0d:9d:b8:dd:18:1c:34:55:08:b8:5f:
         a9:f9:61:8f:4c:cb:ca:2d:88:a1:b5:43:4b:2f:52:a9:fb:24:
         0c:c8:71:ec:a2:92:77:18:0b:0d:cd:61:b7:f4:0e:30:a1:6a:
         4f:33:95:1d:ae:94:9b:c8:b0:87:f6:9c:2e:0f:ce:95:50:eb:
         15:62:2a:62:5a:9b:99:86:fc:84:a2:db:d3:19:05:fe:6b:d4:
         b0:02:fb:91:10:6e:c4:c8:1c:bd:49:8d:6d:e6:a8:1c:19:37:
         69:43:29:a1:9f:91:02:ec:76:93:94:c1:e1:5b:d6:8e:11:d5:
         ef:1f:56:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:21 2025 by rpki-client on console.sobornost.net