Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/3130332e3139382e39332e302f32342d3234203d3e203435373138.roa
File:                     3130332e3139382e39332e302f32342d3234203d3e203435373138.roa (raw, json)
Hash identifier:          wa+1RTscgoKKgYWFX2arn9cWcToBF6A/kXjZvyHLVV8=
Subject key identifier:   74:C6:19:2A:82:29:95:4A:48:63:ED:D9:A0:23:4C:E8:05:33:90:11
Certificate issuer:       /CN=E475A8B018BAE58448DDE55D9487442B3BD31D1D
Certificate serial:       5D8E18EC9C7F7461EC0CC436A5F0CDF3B4C21F85
Authority key identifier: E4:75:A8:B0:18:BA:E5:84:48:DD:E5:5D:94:87:44:2B:3B:D3:1D:1D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/3130332e3139382e39332e302f32342d3234203d3e203435373138.roa
Signing time:             Sat 22 Mar 2025 09:00:01 +0000
ROA not before:           Sat 22 Mar 2025 08:55:01 +0000
ROA not after:            Sat 21 Mar 2026 09:00:01 +0000
asID:                     45718
IP address blocks:        103.198.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl
                          rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 10:42:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:8e:18:ec:9c:7f:74:61:ec:0c:c4:36:a5:f0:cd:f3:b4:c2:1f:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E475A8B018BAE58448DDE55D9487442B3BD31D1D
        Validity
            Not Before: Mar 22 08:55:01 2025 GMT
            Not After : Mar 21 09:00:01 2026 GMT
        Subject: CN=74C6192A8229954A4863EDD9A0234CE805339011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:77:c1:46:79:c3:89:e3:1e:b3:2b:55:c5:e9:
                    34:c6:e2:af:f6:94:a4:9a:0c:43:ad:d0:3f:db:6d:
                    69:ac:19:d9:90:e5:0e:8f:7d:8c:7e:15:49:8d:99:
                    e5:f5:ea:86:bb:ca:06:61:da:e2:50:55:59:8e:6f:
                    48:51:f9:bd:9b:08:61:df:39:ed:5c:7d:72:39:c0:
                    15:a1:85:45:c9:08:51:6d:f3:a4:55:0e:a3:fb:12:
                    ad:0b:5d:56:9f:e9:1d:a4:24:7b:58:a8:19:32:13:
                    07:da:15:46:46:f3:02:1b:aa:6c:cd:07:23:0c:0c:
                    e9:f5:9f:39:38:18:fa:70:87:d3:e9:e6:71:67:95:
                    18:56:64:86:6f:3d:dc:6d:65:e5:3f:9c:77:b5:f4:
                    14:7c:eb:63:0d:f4:ac:26:13:72:eb:38:23:0c:04:
                    2f:41:50:32:d3:d3:eb:e0:a3:ad:a8:12:20:79:16:
                    86:c2:4e:6b:9f:96:95:17:48:52:1e:ef:b4:47:23:
                    61:9b:f4:7b:07:1f:16:d7:38:41:0f:38:c8:4a:35:
                    75:67:00:6b:be:84:57:de:0e:e1:55:a1:4e:a8:2d:
                    ce:b0:9c:63:ad:1c:eb:18:c7:4b:83:40:f6:70:a6:
                    9c:f6:f4:26:84:c3:0c:91:c4:66:3c:17:66:2c:3d:
                    b6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C6:19:2A:82:29:95:4A:48:63:ED:D9:A0:23:4C:E8:05:33:90:11
            X509v3 Authority Key Identifier:
                keyid:E4:75:A8:B0:18:BA:E5:84:48:DD:E5:5D:94:87:44:2B:3B:D3:1D:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/3130332e3139382e39332e302f32342d3234203d3e203435373138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.198.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:3e:06:dc:b0:7c:b9:79:3f:5f:cd:d7:14:b9:53:5c:b2:d4:
         c8:1f:af:56:60:25:81:3e:d6:62:dd:c7:9e:49:e1:aa:da:47:
         8c:65:bb:10:a4:a6:e0:32:55:16:c6:e7:7b:a9:00:a6:b5:4b:
         f2:57:a6:6e:fa:11:a1:3a:b9:33:92:66:82:03:f5:32:c5:01:
         ee:e4:62:d0:75:56:ba:76:c2:10:4f:36:1f:65:c1:fa:0a:7b:
         cb:30:6d:09:86:72:93:30:43:66:2d:25:7b:56:54:9a:b9:58:
         43:fe:65:e8:02:78:ed:59:c2:91:35:44:63:74:30:45:79:d1:
         f3:34:7f:28:04:76:f4:65:96:59:be:fa:88:97:f6:93:db:e0:
         1c:41:87:18:f1:bc:91:ac:3a:d4:93:63:95:74:42:f7:a5:5e:
         76:0d:fd:e9:39:f2:77:91:27:38:48:d0:0c:bf:c4:c2:d1:ba:
         a4:ad:33:fb:a7:36:94:85:cd:61:3c:34:91:bb:82:0b:43:4f:
         20:73:63:d2:f0:9c:c6:81:3e:2c:f5:db:e8:87:74:c6:6e:80:
         37:77:bb:fd:00:68:7c:eb:39:c6:1e:89:d2:18:9a:f7:ca:a2:
         6f:d5:de:17:fb:fc:48:18:c8:1d:b8:84:be:63:dc:80:41:35:
         61:a8:8e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 11:25:12 2025 by rpki-client on console.sobornost.net