Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/3130332e33302e3137302e302f32332d3234203d3e20313331373630.roa
File:                     3130332e33302e3137302e302f32332d3234203d3e20313331373630.roa (raw, json)
Hash identifier:          g9GceOTX9LJTuwCHG+Cr6HSHY6I4upqrk/JI3PWqJI4=
Subject key identifier:   7C:62:97:C3:C4:B0:66:58:6A:39:07:5D:60:9B:82:72:BA:D4:44:74
Certificate issuer:       /CN=50A92E9C9F0D45C92BFA5E864B246CBA81038F87
Certificate serial:       045A09BE34A03F5E591A88549CAB665CA34F3DA6
Authority key identifier: 50:A9:2E:9C:9F:0D:45:C9:2B:FA:5E:86:4B:24:6C:BA:81:03:8F:87
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50A92E9C9F0D45C92BFA5E864B246CBA81038F87.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/3130332e33302e3137302e302f32332d3234203d3e20313331373630.roa
Signing time:             Tue 15 Apr 2025 00:34:29 +0000
ROA not before:           Tue 15 Apr 2025 00:29:29 +0000
ROA not after:            Tue 14 Apr 2026 00:34:29 +0000
asID:                     131760
IP address blocks:        103.30.170.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/50A92E9C9F0D45C92BFA5E864B246CBA81038F87.crl
                          rsync://repo-rpki.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/50A92E9C9F0D45C92BFA5E864B246CBA81038F87.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50A92E9C9F0D45C92BFA5E864B246CBA81038F87.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 00:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:5a:09:be:34:a0:3f:5e:59:1a:88:54:9c:ab:66:5c:a3:4f:3d:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50A92E9C9F0D45C92BFA5E864B246CBA81038F87
        Validity
            Not Before: Apr 15 00:29:29 2025 GMT
            Not After : Apr 14 00:34:29 2026 GMT
        Subject: CN=7C6297C3C4B066586A39075D609B8272BAD44474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5c:28:7e:b7:e7:80:ea:0d:55:2b:f1:cc:84:
                    cb:e4:86:2b:3d:8b:b5:bf:ba:25:45:e2:f1:db:05:
                    9e:94:dc:6a:69:e0:41:94:fc:db:06:75:bf:34:aa:
                    73:45:47:ae:57:b6:c2:ee:ff:6c:fc:41:ef:9b:e5:
                    98:a3:49:b6:3a:f7:af:c7:46:d3:54:3b:05:ad:af:
                    8c:94:b5:18:9f:45:4c:a5:45:17:c0:1a:7b:29:b3:
                    06:71:a0:b7:bf:85:ac:de:d0:a3:17:ff:fe:c4:2b:
                    5c:28:71:d7:52:94:08:d6:1d:92:d5:21:6e:23:38:
                    4c:cf:07:8b:c2:b7:09:46:48:fd:60:bb:ad:62:5d:
                    ee:a3:8c:55:fd:fc:71:14:a6:89:1f:f4:70:43:a3:
                    77:5d:1c:58:01:bf:b4:f2:7d:e5:87:9e:b2:f9:37:
                    64:69:53:69:c6:1a:f1:78:1e:67:d8:d1:87:87:3d:
                    e2:d9:35:45:1c:a3:4a:5c:12:37:28:80:7f:64:ff:
                    0b:fd:19:d3:8c:8f:40:d6:b1:d9:5b:5f:6e:e5:7f:
                    99:18:01:36:a8:02:3b:d3:65:64:e6:5e:a0:c4:6e:
                    dc:4d:90:7c:99:e4:fd:ad:15:1c:90:af:1a:9d:37:
                    31:39:0c:c0:49:6a:09:5a:a2:2f:95:a1:a2:b7:cd:
                    73:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:62:97:C3:C4:B0:66:58:6A:39:07:5D:60:9B:82:72:BA:D4:44:74
            X509v3 Authority Key Identifier:
                keyid:50:A9:2E:9C:9F:0D:45:C9:2B:FA:5E:86:4B:24:6C:BA:81:03:8F:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/50A92E9C9F0D45C92BFA5E864B246CBA81038F87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50A92E9C9F0D45C92BFA5E864B246CBA81038F87.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/3130332e33302e3137302e302f32332d3234203d3e20313331373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:cb:fb:ea:1d:56:a4:59:ed:0c:b9:40:af:6f:67:86:31:80:
         f9:d0:e4:e6:15:bb:6f:28:8d:d8:d4:9e:25:82:cb:4d:40:5c:
         64:7a:a9:3a:79:9d:d6:53:30:01:51:64:eb:3b:70:d8:13:f6:
         f2:70:2a:4b:25:76:57:46:ea:1e:08:4d:40:94:6c:99:8d:6f:
         29:ad:ca:d0:98:af:b8:28:e2:f1:67:4b:b3:a7:e6:40:2a:a0:
         70:77:bd:1f:19:95:70:6b:35:6f:91:d3:7c:20:b9:10:c7:6a:
         1d:8e:97:ca:59:61:1a:0f:c1:19:9d:0e:5f:ed:75:36:05:ec:
         8d:6c:05:48:50:54:82:d7:b4:ed:bf:4b:6b:f9:86:03:fa:f4:
         83:a9:91:95:2f:da:7d:2a:05:96:21:fe:5c:43:1b:9f:b8:fe:
         d8:32:8f:f9:fd:de:58:91:be:ff:41:ec:09:0b:97:34:18:2f:
         51:44:17:c7:55:90:7d:5a:b7:23:f3:d2:e1:59:b5:ce:3d:35:
         08:d0:25:8c:7a:83:f9:d5:65:ce:ce:6f:c7:f8:ae:a3:bb:04:
         09:3b:3d:01:5b:73:be:fc:2e:80:12:74:3f:d1:59:0a:3b:da:
         a8:5b:30:03:e0:c1:39:57:9a:af:72:0b:1f:44:06:09:33:b1:
         53:44:e9:aa
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUBFoJvjSgP15ZGohUnKtmXKNPPaYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTBBOTJFOUM5RjBENDVDOTJCRkE1RTg2NEIyNDZDQkE4
MTAzOEY4NzAeFw0yNTA0MTUwMDI5MjlaFw0yNjA0MTQwMDM0MjlaMDMxMTAvBgNV
BAMTKDdDNjI5N0MzQzRCMDY2NTg2QTM5MDc1RDYwOUI4MjcyQkFENDQ0NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9XCh+t+eA6g1VK/HMhMvkhis9
i7W/uiVF4vHbBZ6U3Gpp4EGU/NsGdb80qnNFR65XtsLu/2z8Qe+b5ZijSbY696/H
RtNUOwWtr4yUtRifRUylRRfAGnspswZxoLe/haze0KMX//7EK1wocddSlAjWHZLV
IW4jOEzPB4vCtwlGSP1gu61iXe6jjFX9/HEUpokf9HBDo3ddHFgBv7TyfeWHnrL5
N2RpU2nGGvF4HmfY0YeHPeLZNUUco0pcEjcogH9k/wv9GdOMj0DWsdlbX27lf5kY
ATaoAjvTZWTmXqDEbtxNkHyZ5P2tFRyQrxqdNzE5DMBJaglaoi+VoaK3zXOtAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUfGKXw8SwZlhqOQddYJuCcrrURHQwHwYDVR0j
BBgwFoAUUKkunJ8NRckr+l6GSyRsuoEDj4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
OTYyYWE4YS0wNmU0LTQ2MzQtYjUwMC1hNTI3Y2U4ZTA0ODkvMC81MEE5MkU5QzlG
MEQ0NUM5MkJGQTVFODY0QjI0NkNCQTgxMDM4Rjg3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTBBOTJFOUM5RjBENDVDOTJCRkE1RTg2NEIyNDZDQkE4MTAz
OEY4Ny5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE5NjJhYThhLTA2ZTQtNDYzNC1i
NTAwLWE1MjdjZThlMDQ4OS8wLzMxMzAzMzJlMzMzMDJlMzEzNzMwMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzMzMxMzczNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZx6qMA0GCSqG
SIb3DQEBCwUAA4IBAQCcy/vqHVakWe0MuUCvb2eGMYD50OTmFbtvKI3Y1J4lgstN
QFxkeqk6eZ3WUzABUWTrO3DYE/bycCpLJXZXRuoeCE1AlGyZjW8prcrQmK+4KOLx
Z0uzp+ZAKqBwd70fGZVwazVvkdN8ILkQx2odjpfKWWEaD8EZnQ5f7XU2BeyNbAVI
UFSC17Ttv0tr+YYD+vSDqZGVL9p9KgWWIf5cQxufuP7YMo/5/d5Ykb7/QewJC5c0
GC9RRBfHVZB9Wrcj89LhWbXOPTUI0CWMeoP51WXOzm/H+K6juwQJOz0BW3O+/C6A
EnQ/0VkKO9qoWzAD4ME5V5qvcgsfRAYJM7FTROmq
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:23:49 2025 by rpki-client on console.sobornost.net