Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/3130332e3138302e3136372e302f32342d3234203d3e20313439333635.roa
File:                     3130332e3138302e3136372e302f32342d3234203d3e20313439333635.roa (raw, json)
Hash identifier:          Phrb52AXZmiSjCEH8v4hSx3FLobSCLusxbUEU/TljuU=
Subject key identifier:   97:AD:5F:2F:6D:63:EC:08:EA:30:D2:8E:71:40:FC:25:D0:86:EB:8A
Certificate issuer:       /CN=EE6CBB9BBDADA4EABD41A094453212A55B300C81
Certificate serial:       20972CD5FCE90745BBF90EA410A3187DF56B951B
Authority key identifier: EE:6C:BB:9B:BD:AD:A4:EA:BD:41:A0:94:45:32:12:A5:5B:30:0C:81
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE6CBB9BBDADA4EABD41A094453212A55B300C81.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/3130332e3138302e3136372e302f32342d3234203d3e20313439333635.roa
Signing time:             Fri 25 Apr 2025 16:00:01 +0000
ROA not before:           Fri 25 Apr 2025 15:55:01 +0000
ROA not after:            Fri 24 Apr 2026 16:00:01 +0000
asID:                     149365
IP address blocks:        103.180.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/EE6CBB9BBDADA4EABD41A094453212A55B300C81.crl
                          rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/EE6CBB9BBDADA4EABD41A094453212A55B300C81.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE6CBB9BBDADA4EABD41A094453212A55B300C81.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 00:21:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:97:2c:d5:fc:e9:07:45:bb:f9:0e:a4:10:a3:18:7d:f5:6b:95:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE6CBB9BBDADA4EABD41A094453212A55B300C81
        Validity
            Not Before: Apr 25 15:55:01 2025 GMT
            Not After : Apr 24 16:00:01 2026 GMT
        Subject: CN=97AD5F2F6D63EC08EA30D28E7140FC25D086EB8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:53:67:6b:73:f6:4a:83:36:1e:73:93:3a:29:
                    46:cb:e0:59:5b:3e:e9:c9:9e:28:4f:cc:84:43:65:
                    0a:90:03:3d:84:b1:0b:2a:57:7f:6f:c4:6a:34:2a:
                    2f:3d:ba:56:9a:38:0a:a7:f4:f8:3d:a0:a8:d2:07:
                    33:66:5a:c4:a3:81:65:b0:c4:3f:0a:53:fe:b1:2c:
                    d8:af:98:d2:9e:fe:44:ac:d4:95:68:61:6a:12:ba:
                    8f:ae:e3:36:1c:27:54:81:7b:a4:1e:c5:5c:e4:83:
                    dc:e7:1b:87:d7:93:43:52:53:65:3e:c9:bf:8e:8d:
                    52:57:8e:be:be:53:bc:74:c7:ab:e8:30:5d:d5:6b:
                    ea:86:58:7e:da:10:34:54:7c:f3:22:ab:81:28:89:
                    6e:e0:0c:08:94:32:49:05:54:66:2a:81:ec:ac:eb:
                    27:3c:56:1f:a1:56:2f:f6:a2:69:70:3a:c8:90:b2:
                    a7:ac:88:03:78:0b:57:aa:84:6c:15:5a:77:5e:98:
                    a6:10:4b:d9:e6:04:22:47:2a:49:b1:64:8a:e8:30:
                    48:30:13:fd:67:8d:6f:63:33:06:e7:91:5a:ad:df:
                    0a:1d:8b:90:93:ea:07:fa:14:aa:a6:23:01:7b:e3:
                    22:5f:ba:dd:52:c0:81:8f:8e:a2:90:e4:a5:90:36:
                    67:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:AD:5F:2F:6D:63:EC:08:EA:30:D2:8E:71:40:FC:25:D0:86:EB:8A
            X509v3 Authority Key Identifier:
                keyid:EE:6C:BB:9B:BD:AD:A4:EA:BD:41:A0:94:45:32:12:A5:5B:30:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/EE6CBB9BBDADA4EABD41A094453212A55B300C81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE6CBB9BBDADA4EABD41A094453212A55B300C81.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/3130332e3138302e3136372e302f32342d3234203d3e20313439333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:43:1c:5c:12:80:44:d9:36:7e:b3:ba:80:0a:9c:e2:8d:13:
         46:3f:e8:19:f7:8d:fd:42:9c:3e:cc:e0:d2:1c:ee:9d:63:6b:
         57:95:a5:c7:2b:5b:ac:1f:d9:d8:51:07:02:1e:df:d8:2a:dd:
         85:9e:35:0a:c8:c7:88:12:ec:41:69:1b:a7:22:26:76:97:a1:
         cc:58:92:e1:2e:ab:76:a4:fd:11:85:e7:ee:b8:30:dc:d8:f0:
         d6:a5:cb:e2:b4:90:ac:01:5e:6b:8e:79:2f:59:4b:f9:80:eb:
         c7:c8:3f:3c:99:5d:2d:8e:34:3b:af:91:04:b7:60:b1:13:52:
         d4:9f:07:8c:b6:a1:cf:63:b4:90:0c:81:e0:44:3b:fc:6e:21:
         30:79:e8:cc:67:df:e4:0c:98:72:4f:ee:7d:a2:a2:46:6c:e9:
         b9:68:02:b0:eb:c1:b9:d2:a6:d5:72:c8:d9:ae:22:d1:fe:9f:
         49:14:aa:c1:00:41:9c:da:fe:16:f9:a8:9a:7c:67:8d:88:40:
         a1:09:81:c2:f9:cb:48:a3:88:91:24:00:07:72:c1:45:e6:3d:
         32:1a:59:d7:5f:7e:d6:7e:ae:66:15:3b:ce:91:49:3a:4d:12:
         95:b1:5a:c4:93:48:41:3e:7e:f7:95:62:c8:da:12:71:fd:7b:
         a2:45:04:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:23:49 2025 by rpki-client on console.sobornost.net