Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/3130332e3132332e3137342e302f32332d3233203d3e20313530393638.roa
File:                     3130332e3132332e3137342e302f32332d3233203d3e20313530393638.roa (raw, json)
Hash identifier:          5XRHZIZI1oj83KHXG7v/4Bg68uKlgADqYmMHikLr/vU=
Subject key identifier:   D5:E1:B4:13:CD:3E:3A:83:15:1F:F5:81:3C:D2:B6:B0:C3:1F:BF:F7
Certificate issuer:       /CN=5AD19173FE66EE2B9E995A99ED7DC4230113BDEF
Certificate serial:       147DE8847A96CF32A9C8149A765A9A0F8F311AFA
Authority key identifier: 5A:D1:91:73:FE:66:EE:2B:9E:99:5A:99:ED:7D:C4:23:01:13:BD:EF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/3130332e3132332e3137342e302f32332d3233203d3e20313530393638.roa
Signing time:             Wed 16 Apr 2025 11:02:21 +0000
ROA not before:           Wed 16 Apr 2025 10:57:21 +0000
ROA not after:            Wed 15 Apr 2026 11:02:21 +0000
asID:                     150968
IP address blocks:        103.123.174.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl
                          rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:7d:e8:84:7a:96:cf:32:a9:c8:14:9a:76:5a:9a:0f:8f:31:1a:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AD19173FE66EE2B9E995A99ED7DC4230113BDEF
        Validity
            Not Before: Apr 16 10:57:21 2025 GMT
            Not After : Apr 15 11:02:21 2026 GMT
        Subject: CN=D5E1B413CD3E3A83151FF5813CD2B6B0C31FBFF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7c:48:e9:5a:98:c0:01:3c:20:bb:43:c1:9a:
                    c0:6c:90:b1:7a:e7:d9:e4:68:24:99:f6:d9:59:89:
                    2d:fd:60:57:7b:a4:45:ea:dd:ff:2f:63:9e:e3:79:
                    14:f5:ae:1c:19:ef:23:40:73:48:e4:4f:23:4a:68:
                    dd:d2:dc:1e:dc:53:67:ae:69:47:48:3b:58:10:d0:
                    9f:14:eb:a4:15:eb:76:31:fa:e6:1b:ff:89:f8:17:
                    72:da:5b:b3:fd:de:bd:e2:d1:e8:d5:97:07:da:d6:
                    0c:55:04:cc:ae:26:bb:54:67:ee:35:3a:65:b6:08:
                    37:e7:b6:d5:48:d5:dc:5f:b4:1e:b0:ee:69:22:58:
                    0a:04:3c:3e:0c:e5:55:06:3a:08:bb:59:22:fb:15:
                    84:11:79:f2:67:6c:de:87:7f:5f:0a:a5:bc:f6:f9:
                    3f:86:7d:77:83:34:32:58:ad:93:10:92:dc:69:cc:
                    d1:22:e0:62:da:1a:1d:9e:26:a2:18:60:fd:2f:8b:
                    af:2d:62:77:e5:f5:9e:c6:1e:54:cb:34:95:32:67:
                    3e:e6:76:03:26:01:d3:bc:5f:ad:26:bb:0c:af:f6:
                    b1:3a:20:6b:08:ab:37:9c:85:2e:74:eb:44:61:71:
                    da:f5:23:28:67:41:b7:ca:04:99:c4:65:36:e3:0c:
                    5c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E1:B4:13:CD:3E:3A:83:15:1F:F5:81:3C:D2:B6:B0:C3:1F:BF:F7
            X509v3 Authority Key Identifier:
                keyid:5A:D1:91:73:FE:66:EE:2B:9E:99:5A:99:ED:7D:C4:23:01:13:BD:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/3130332e3132332e3137342e302f32332d3233203d3e20313530393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:ed:62:55:69:40:0a:f6:22:7c:ce:67:8d:da:c9:68:f2:cd:
         4e:78:29:3d:33:b5:67:d5:92:b4:a2:76:5f:94:21:db:26:67:
         ab:a6:43:68:46:4a:60:71:0b:91:75:61:3e:8f:a1:9e:5b:8a:
         2d:3a:de:ad:3f:be:96:f8:c0:9f:bf:29:1f:ae:69:aa:71:43:
         f7:30:71:c8:e2:c3:2a:b5:48:4d:f0:82:7e:a1:a9:d8:0c:9a:
         ba:d1:22:b8:30:34:12:f6:b4:6d:18:ef:f3:54:c8:d4:7b:a3:
         ef:0f:2f:5f:41:a5:2a:0d:46:f5:f8:14:08:a6:3e:38:62:47:
         d5:7b:d9:30:8c:2f:db:1e:a5:7e:ea:92:f5:0c:23:4f:39:eb:
         0f:29:b4:0f:8a:e6:a8:a9:b5:6b:9d:48:97:19:fc:13:b0:30:
         66:5b:a5:bf:fd:07:04:34:d5:81:21:ad:0d:d4:4f:24:e7:ca:
         be:05:19:95:13:95:e1:06:7b:e3:a9:75:7b:6f:16:ad:62:ea:
         8e:16:e7:31:92:56:93:bc:2a:18:b1:f0:46:e8:1a:a0:4c:69:
         e4:ce:9a:cb:37:de:d3:db:cc:1b:68:27:58:1d:bd:83:01:fb:
         7d:56:b2:c6:ba:08:48:3e:10:e9:08:e0:a9:07:e3:07:79:b4:
         90:d3:7e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:22 2025 by rpki-client on console.sobornost.net