Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/3130332e35332e32382e302f32332d3234203d3e20313339393535.roa
File:                     3130332e35332e32382e302f32332d3234203d3e20313339393535.roa (raw, json)
Hash identifier:          XmUhlDLdTlUEJxqMyV5d8izbXv0SLIMUNSTUR2SbfXQ=
Subject key identifier:   04:97:66:9B:2F:78:26:65:6C:BF:B1:3E:A0:68:B0:55:E6:2C:EC:6D
Certificate issuer:       /CN=EC9AAB91007053E63CE17F98D74FFD8945F29EDE
Certificate serial:       705284913166F9EC317EC78C2ED387FF8FF4D05D
Authority key identifier: EC:9A:AB:91:00:70:53:E6:3C:E1:7F:98:D7:4F:FD:89:45:F2:9E:DE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/3130332e35332e32382e302f32332d3234203d3e20313339393535.roa
Signing time:             Wed 09 Apr 2025 05:00:02 +0000
ROA not before:           Wed 09 Apr 2025 04:55:02 +0000
ROA not after:            Wed 08 Apr 2026 05:00:02 +0000
asID:                     139955
IP address blocks:        103.53.28.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl
                          rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 12:29:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:52:84:91:31:66:f9:ec:31:7e:c7:8c:2e:d3:87:ff:8f:f4:d0:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC9AAB91007053E63CE17F98D74FFD8945F29EDE
        Validity
            Not Before: Apr  9 04:55:02 2025 GMT
            Not After : Apr  8 05:00:02 2026 GMT
        Subject: CN=0497669B2F7826656CBFB13EA068B055E62CEC6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7c:06:70:7f:45:06:79:11:be:e7:d2:15:34:
                    e9:ff:a3:73:0c:40:1a:6d:b9:e7:21:21:b2:27:81:
                    87:32:46:fd:bb:10:d9:a5:4d:e8:5a:45:40:ec:6e:
                    31:93:59:63:ea:e5:19:6f:23:88:2e:47:26:49:96:
                    0f:4b:0b:86:49:0d:24:35:f3:72:69:4b:db:7d:ba:
                    19:f2:d0:42:8f:f7:d3:42:50:10:f2:dc:9d:f9:80:
                    24:29:0b:7c:9f:d9:ce:d4:e0:20:6f:af:0f:e7:73:
                    e2:2f:31:a9:77:14:b9:22:bb:ff:18:62:02:e5:d6:
                    e7:56:2b:35:f2:4c:3a:e9:e5:36:68:1e:e5:e0:c2:
                    6c:0e:ec:17:38:2e:d0:33:8c:c4:aa:f8:f1:01:0d:
                    55:91:88:0c:09:de:da:8a:9f:c3:b7:42:4e:d2:19:
                    8e:5e:2b:55:b4:99:53:22:c1:f2:2a:90:27:e8:d6:
                    03:c3:a1:69:90:f4:cb:30:e0:40:33:c9:85:e6:f8:
                    91:fb:65:86:fb:6f:c8:8e:03:dd:82:96:9c:43:40:
                    e2:b1:f6:84:9b:f4:07:32:f0:59:e4:50:c0:39:63:
                    34:0e:5c:e1:2f:8f:39:8c:a5:84:e4:88:d8:0e:b6:
                    3f:1d:e6:3e:26:3d:f4:23:48:ed:59:69:71:e2:b8:
                    de:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:97:66:9B:2F:78:26:65:6C:BF:B1:3E:A0:68:B0:55:E6:2C:EC:6D
            X509v3 Authority Key Identifier:
                keyid:EC:9A:AB:91:00:70:53:E6:3C:E1:7F:98:D7:4F:FD:89:45:F2:9E:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/3130332e35332e32382e302f32332d3234203d3e20313339393535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.53.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:3b:3d:35:30:0f:06:b1:11:5f:a7:23:c5:d2:04:94:dc:e4:
         21:ac:05:91:f5:d7:b9:fc:0e:32:74:98:64:49:0b:c1:96:34:
         74:09:ca:d6:2b:91:12:eb:65:ab:1f:36:f3:80:32:4f:3b:69:
         d5:83:73:44:39:9d:09:bb:0e:70:dc:e0:bd:4c:86:c8:4e:b8:
         e3:b3:94:8f:12:c6:d1:c7:d9:eb:f8:1b:29:0a:2e:7e:de:e6:
         cf:7d:5d:82:9b:52:25:d3:d6:f0:ef:5f:1f:5e:36:88:12:21:
         f0:5d:32:c8:13:75:2c:f2:db:14:09:bc:47:d2:b2:c9:36:ee:
         8e:79:f1:a9:d3:1c:6f:0c:1f:03:5b:81:ee:17:2b:f6:90:03:
         ea:b0:6b:51:53:e1:08:94:2b:59:55:b7:fa:6b:11:7c:be:91:
         e8:89:6a:15:36:13:ea:a0:2d:69:82:3a:c1:85:d3:99:17:aa:
         02:bb:29:0f:40:51:25:86:d9:75:e6:31:04:c9:c9:3b:b3:49:
         39:da:2b:f0:8c:bd:2e:ac:77:ce:ae:a0:66:29:c7:87:54:fd:
         60:24:ae:44:9a:76:b1:49:1d:99:ed:32:11:89:ae:48:2a:fa:
         c0:d0:48:96:79:54:52:73:9c:4d:c0:1c:50:19:db:2c:fc:f5:
         73:05:b7:0b
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUcFKEkTFm+ewxfseMLtOH/4/00F0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZEODk0
NUYyOUVERTAeFw0yNTA0MDkwNDU1MDJaFw0yNjA0MDgwNTAwMDJaMDMxMTAvBgNV
BAMTKDA0OTc2NjlCMkY3ODI2NjU2Q0JGQjEzRUEwNjhCMDU1RTYyQ0VDNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBfAZwf0UGeRG+59IVNOn/o3MM
QBptuechIbIngYcyRv27ENmlTehaRUDsbjGTWWPq5RlvI4guRyZJlg9LC4ZJDSQ1
83JpS9t9uhny0EKP99NCUBDy3J35gCQpC3yf2c7U4CBvrw/nc+IvMal3FLkiu/8Y
YgLl1udWKzXyTDrp5TZoHuXgwmwO7Bc4LtAzjMSq+PEBDVWRiAwJ3tqKn8O3Qk7S
GY5eK1W0mVMiwfIqkCfo1gPDoWmQ9Msw4EAzyYXm+JH7ZYb7b8iOA92ClpxDQOKx
9oSb9Acy8FnkUMA5YzQOXOEvjzmMpYTkiNgOtj8d5j4mPfQjSO1ZaXHiuN4rAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUBJdmmy94JmVsv7E+oGiwVeYs7G0wHwYDVR0j
BBgwFoAU7JqrkQBwU+Y84X+Y10/9iUXynt4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
YmI0M2VjOC1mNTgyLTQwMjUtOGYzNi0zY2VhNTM5ZDBiMDkvMC9FQzlBQUI5MTAw
NzA1M0U2M0NFMTdGOThENzRGRkQ4OTQ1RjI5RURFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRUM5QUFCOTEwMDcwNTNFNjNDRTE3Rjk4RDc0RkZEODk0NUYy
OUVERS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzViYjQzZWM4LWY1ODItNDAyNS04
ZjM2LTNjZWE1MzlkMGIwOS8wLzMxMzAzMzJlMzUzMzJlMzIzODJlMzAyZjMyMzMy
ZDMyMzQyMDNkM2UyMDMxMzMzOTM5MzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWc1HDANBgkqhkiG
9w0BAQsFAAOCAQEAhjs9NTAPBrERX6cjxdIElNzkIawFkfXXufwOMnSYZEkLwZY0
dAnK1iuREutlqx8284AyTztp1YNzRDmdCbsOcNzgvUyGyE6447OUjxLG0cfZ6/gb
KQouft7mz31dgptSJdPW8O9fH142iBIh8F0yyBN1LPLbFAm8R9KyyTbujnnxqdMc
bwwfA1uB7hcr9pAD6rBrUVPhCJQrWVW3+msRfL6R6IlqFTYT6qAtaYI6wYXTmReq
ArspD0BRJYbZdeYxBMnJO7NJOdor8Iy9Lqx3zq6gZinHh1T9YCSuRJp2sUkdme0y
EYmuSCr6wNBIlnlUUnOcTcAcUBnbLPz1cwW3Cw==
-----END CERTIFICATE-----
Generated at Wed Apr 23 15:33:57 2025 by rpki-client on console.sobornost.net