Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/3130332e3137312e3234342e302f32342d3234203d3e20313431363734.roa
File:                     3130332e3137312e3234342e302f32342d3234203d3e20313431363734.roa (raw, json)
Hash identifier:          ZCncyUtwIpBS65LybNlORs5EBtiNYGD9cKnDOLXWoEY=
Subject key identifier:   A5:11:3A:14:44:5F:91:9C:1E:F7:9F:C7:5A:CF:26:E5:E9:86:1B:5B
Certificate issuer:       /CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E
Certificate serial:       6CDC3D7BF1CBE49FB2EB963DF8EAFF781063BC77
Authority key identifier: 9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/3130332e3137312e3234342e302f32342d3234203d3e20313431363734.roa
Signing time:             Fri 18 Apr 2025 16:00:47 +0000
ROA not before:           Fri 18 Apr 2025 15:55:47 +0000
ROA not after:            Fri 17 Apr 2026 16:00:47 +0000
asID:                     141674
IP address blocks:        103.171.244.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl
                          rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Apr 2025 12:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:dc:3d:7b:f1:cb:e4:9f:b2:eb:96:3d:f8:ea:ff:78:10:63:bc:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E
        Validity
            Not Before: Apr 18 15:55:47 2025 GMT
            Not After : Apr 17 16:00:47 2026 GMT
        Subject: CN=A5113A14445F919C1EF79FC75ACF26E5E9861B5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:3b:92:db:73:9b:c4:c6:9f:ae:52:78:19:a5:
                    7c:56:3e:d9:98:3f:62:54:a1:f5:88:e6:3c:b7:d9:
                    ba:1b:99:72:8a:02:10:cb:fc:b8:23:f7:05:28:14:
                    f8:c9:fc:5a:8b:5d:0d:4e:6c:b2:43:18:d6:6b:ac:
                    16:aa:17:ca:8d:ac:d4:56:57:51:af:b6:1e:20:c4:
                    62:44:91:7c:56:72:71:a9:85:f0:e5:cf:bc:03:0f:
                    63:6c:9a:5c:7b:17:60:9d:61:81:6e:0f:9c:7b:a9:
                    a1:a3:86:59:31:98:d7:ad:a1:07:cd:d8:91:7f:97:
                    df:31:1d:18:f6:e6:4c:61:85:70:ba:9c:37:80:ba:
                    75:15:04:fd:1c:83:6b:a1:48:cc:88:74:a0:fd:66:
                    37:20:80:60:6b:e1:b3:ca:38:d3:ad:7c:93:53:e8:
                    4a:86:24:49:85:a6:92:36:cf:0f:9d:0b:b0:04:cf:
                    70:8b:9c:0c:03:ba:07:95:27:d7:81:ee:39:47:ae:
                    67:28:41:68:dc:3b:21:f3:c3:eb:0a:2a:b0:48:9b:
                    29:2a:c1:50:b0:3b:ac:f2:58:a7:e7:b9:50:e5:65:
                    af:92:4e:7f:12:55:fd:75:e0:ec:16:d5:cd:c0:40:
                    d5:ad:6c:5e:c9:a9:64:8b:15:a6:77:5e:38:c0:c4:
                    8a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:11:3A:14:44:5F:91:9C:1E:F7:9F:C7:5A:CF:26:E5:E9:86:1B:5B
            X509v3 Authority Key Identifier:
                keyid:9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/3130332e3137312e3234342e302f32342d3234203d3e20313431363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:c3:61:93:38:5c:05:ad:cf:00:22:22:7f:f9:e9:d5:9e:d3:
         3a:1c:68:ac:b1:53:34:04:aa:bf:b4:e5:2c:94:9d:ca:11:fa:
         9a:38:45:d7:50:02:13:75:fb:b1:7c:c2:d8:97:40:11:72:36:
         3e:c9:ef:39:36:7c:c8:93:cb:e5:2a:29:bf:49:cf:75:ab:17:
         64:0a:a3:4e:e2:bb:81:25:26:31:2c:7c:19:c7:de:71:90:10:
         f8:40:49:7b:7b:0f:84:bb:84:bc:44:4f:1e:c6:2e:b1:a0:9f:
         50:50:bf:b9:29:67:d4:a6:c5:81:14:d9:4d:00:a9:39:3a:7b:
         cd:95:8e:64:07:9a:c8:f1:e5:58:af:4b:b8:11:66:cb:42:51:
         ef:ea:a2:8d:1c:59:a6:ae:52:8f:08:9c:e7:e5:c0:56:a7:9e:
         a5:12:5e:11:7b:85:6e:08:b4:45:53:b8:1b:24:62:db:26:a8:
         dc:15:79:f1:b4:af:e8:8b:5f:7d:dd:47:82:8d:03:25:39:2f:
         3a:17:d8:9f:55:4c:ee:b5:ba:5d:c9:e2:90:bd:30:3c:05:5c:
         ae:6c:57:20:f7:32:b3:3b:88:c6:d4:fc:90:3f:76:9c:d2:55:
         9a:09:8c:b8:16:98:d6:c1:9e:55:4d:57:0c:49:b7:5b:ac:64:
         66:db:fd:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:50:33 2025 by rpki-client on console.sobornost.net