Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/3130332e3138392e302e302f32342d3234203d3e20313439383830.roa
File:                     3130332e3138392e302e302f32342d3234203d3e20313439383830.roa (raw, json)
Hash identifier:          uqS3f/a/mCNWGnrE+t9GmuqXdPtzmTdKMITykozV6Ak=
Subject key identifier:   A1:84:A7:79:48:9C:EC:56:76:77:82:AC:61:E3:9D:95:86:D1:FC:62
Certificate issuer:       /CN=26D5C063BEB580B38F28F3CC16B958634FF7A48B
Certificate serial:       41428F53651C97BA7578763285DB357593361636
Authority key identifier: 26:D5:C0:63:BE:B5:80:B3:8F:28:F3:CC:16:B9:58:63:4F:F7:A4:8B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26D5C063BEB580B38F28F3CC16B958634FF7A48B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/3130332e3138392e302e302f32342d3234203d3e20313439383830.roa
Signing time:             Thu 10 Apr 2025 13:00:02 +0000
ROA not before:           Thu 10 Apr 2025 12:55:02 +0000
ROA not after:            Thu 09 Apr 2026 13:00:02 +0000
asID:                     149880
IP address blocks:        103.189.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.crl
                          rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26D5C063BEB580B38F28F3CC16B958634FF7A48B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 09:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:42:8f:53:65:1c:97:ba:75:78:76:32:85:db:35:75:93:36:16:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26D5C063BEB580B38F28F3CC16B958634FF7A48B
        Validity
            Not Before: Apr 10 12:55:02 2025 GMT
            Not After : Apr  9 13:00:02 2026 GMT
        Subject: CN=A184A779489CEC56767782AC61E39D9586D1FC62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:44:22:cb:db:02:13:89:55:96:d3:36:9f:73:
                    de:fb:79:7e:a4:db:b3:3e:4d:01:7e:f0:70:5a:a6:
                    42:ed:91:af:28:5d:b6:d2:91:49:79:b4:c0:35:36:
                    47:87:46:ab:e1:70:57:c4:52:39:a7:16:d2:98:9d:
                    31:86:58:4b:c0:dc:02:f0:1e:08:da:18:e7:d6:88:
                    03:58:6a:e2:60:97:a5:0d:2b:5e:22:86:ab:6f:ca:
                    4b:75:ff:9b:d7:a8:12:68:8e:03:0f:d4:29:56:a5:
                    b9:ca:4d:57:0b:39:5b:65:a1:f4:a2:5d:9e:36:a2:
                    cb:3e:f2:a9:52:3f:3e:96:b0:5b:f3:9c:6e:81:41:
                    e9:ed:06:35:ce:70:18:9d:5f:45:65:e4:8a:f3:e4:
                    f8:87:14:47:f6:da:25:57:6c:15:19:03:16:a4:00:
                    d2:96:8b:67:1b:85:a7:b5:33:61:dc:52:62:43:94:
                    18:c1:e7:5f:7c:ae:03:1a:15:02:34:63:c7:f7:f1:
                    7a:ab:d7:2a:9c:d5:8b:1d:b8:69:9a:12:ce:b4:90:
                    f5:b4:85:71:4d:c4:0e:9a:e1:02:93:b9:8a:63:59:
                    6a:95:be:d4:ce:62:c7:cb:2d:8d:11:09:d2:63:5a:
                    2e:33:0d:86:85:3f:dc:4f:31:92:aa:02:be:e2:54:
                    58:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:84:A7:79:48:9C:EC:56:76:77:82:AC:61:E3:9D:95:86:D1:FC:62
            X509v3 Authority Key Identifier:
                keyid:26:D5:C0:63:BE:B5:80:B3:8F:28:F3:CC:16:B9:58:63:4F:F7:A4:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26D5C063BEB580B38F28F3CC16B958634FF7A48B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/3130332e3138392e302e302f32342d3234203d3e20313439383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:26:04:ba:56:0f:3d:42:ec:01:94:4e:78:10:91:e6:0b:b2:
         8b:75:10:39:6a:c4:cb:d1:45:e9:b0:2e:15:0d:1c:fb:5e:16:
         17:6a:38:fe:0b:9c:9b:9a:4d:a6:e9:d0:fe:b5:56:39:84:1b:
         f1:21:15:67:d5:81:30:00:eb:87:cf:05:d5:73:01:b7:a8:50:
         db:2c:d2:60:6d:ae:e2:8c:91:14:25:46:eb:e3:cb:df:fd:49:
         2c:40:58:b2:20:82:4c:d5:e6:d5:d1:9f:44:98:f8:c8:c6:11:
         81:c0:5e:f5:89:6e:b0:97:8c:68:95:37:63:00:e4:62:7e:4c:
         a4:af:59:45:6b:44:ba:8a:ca:4f:fe:fb:88:3d:52:9f:52:16:
         9b:c3:f8:d4:76:4a:b7:b8:1a:ae:88:17:41:79:27:a1:88:94:
         e6:28:45:05:ce:4a:58:96:31:37:f2:62:31:e0:c4:a6:60:38:
         60:c8:59:0c:b5:dd:12:fe:0a:7c:4b:c9:9e:62:31:64:f5:73:
         47:63:37:62:42:c6:9b:df:d7:14:b7:63:86:d5:d9:32:92:f4:
         ae:87:0e:59:53:b1:26:f3:eb:e6:35:37:55:3d:f0:b2:b6:66:
         ea:4b:72:79:83:b6:cd:b6:9f:6c:fb:91:8d:b9:3c:84:a2:b4:
         d6:96:72:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:46:12 2025 by rpki-client on console.sobornost.net