Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/3130332e3138382e3234392e302f32342d3234203d3e20313439393038.roa
File:                     3130332e3138382e3234392e302f32342d3234203d3e20313439393038.roa (raw, json)
Hash identifier:          Pil6JjAZAhk6oGR6yVNwjzUnJBqxVVzN/QVFAe7clnM=
Subject key identifier:   9C:0A:DA:4B:40:8B:7F:7C:DE:F9:96:5F:B2:B0:5F:2D:C1:D0:1F:A6
Certificate issuer:       /CN=1154D920B6A4209131871530AEE1F8B8A3D303D6
Certificate serial:       2A3FF7D0EF41197C588EB4344E594F06DB462952
Authority key identifier: 11:54:D9:20:B6:A4:20:91:31:87:15:30:AE:E1:F8:B8:A3:D3:03:D6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/3130332e3138382e3234392e302f32342d3234203d3e20313439393038.roa
Signing time:             Wed 23 Apr 2025 04:00:33 +0000
ROA not before:           Wed 23 Apr 2025 03:55:33 +0000
ROA not after:            Wed 22 Apr 2026 04:00:33 +0000
asID:                     149908
IP address blocks:        103.188.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.crl
                          rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Apr 2025 15:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:3f:f7:d0:ef:41:19:7c:58:8e:b4:34:4e:59:4f:06:db:46:29:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1154D920B6A4209131871530AEE1F8B8A3D303D6
        Validity
            Not Before: Apr 23 03:55:33 2025 GMT
            Not After : Apr 22 04:00:33 2026 GMT
        Subject: CN=9C0ADA4B408B7F7CDEF9965FB2B05F2DC1D01FA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fb:f7:55:77:64:fe:4f:31:d2:59:25:fc:87:
                    fc:34:7b:0b:26:56:6d:8b:0c:3f:d0:4f:15:69:98:
                    0e:06:11:6b:66:66:4e:4c:ec:70:20:67:d2:66:62:
                    7f:9c:31:31:0c:bd:cb:b9:bc:6f:87:01:19:da:a6:
                    2e:9e:f9:75:f8:c2:2e:30:39:0e:30:17:95:bc:79:
                    a8:1b:ca:32:ea:f5:9a:4f:3f:a4:84:bd:14:b2:4d:
                    ab:ec:0a:05:a3:70:ee:53:df:21:d1:04:5e:b8:f2:
                    1d:b3:4c:7b:eb:7e:f3:70:26:6e:3b:7b:eb:d5:64:
                    30:36:39:b7:30:43:f2:be:b5:fc:da:c1:40:c0:a3:
                    1f:b2:2d:0d:fb:2b:69:ab:65:dd:0b:84:b4:20:52:
                    05:42:f0:38:34:63:26:19:c4:b8:34:a4:06:e1:97:
                    6b:39:9a:7b:cb:21:f6:db:e3:a8:40:d3:da:dc:b1:
                    71:29:fb:70:df:78:0a:d2:f7:35:c2:00:3d:b8:82:
                    c6:01:a1:63:05:f9:18:f8:98:c5:e2:e5:05:1f:a7:
                    c7:1d:4b:00:3d:fb:00:66:2a:2d:1e:42:cc:23:5c:
                    c8:f4:f4:09:83:45:78:54:a5:2e:53:1d:1c:e1:86:
                    b9:aa:73:1d:d9:7e:b0:62:6f:b1:e9:50:ea:bc:d0:
                    93:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:0A:DA:4B:40:8B:7F:7C:DE:F9:96:5F:B2:B0:5F:2D:C1:D0:1F:A6
            X509v3 Authority Key Identifier:
                keyid:11:54:D9:20:B6:A4:20:91:31:87:15:30:AE:E1:F8:B8:A3:D3:03:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/3130332e3138382e3234392e302f32342d3234203d3e20313439393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:d3:29:41:cf:fb:12:6c:b4:19:74:05:4a:50:de:be:2c:18:
         b2:39:f5:5c:f3:63:95:50:09:0b:40:b9:7f:dc:30:8b:d5:c7:
         e9:72:7b:64:54:c1:78:48:7f:e9:88:7e:d0:30:f9:5e:82:66:
         26:0e:07:37:7f:f8:d0:ed:96:3c:40:20:71:cc:c0:1a:61:74:
         f6:88:ea:eb:ea:44:95:e6:db:cd:8a:fd:fc:f3:e4:8d:78:5f:
         8d:99:29:06:5d:c7:6a:09:ac:87:91:c0:80:96:98:2c:b8:d6:
         cf:8a:b3:08:04:bc:cc:6a:f8:9e:31:29:7f:0b:d7:2a:a6:1c:
         76:59:ec:e8:d2:84:f8:21:4e:39:38:60:2c:af:1e:6b:c3:9b:
         62:67:e5:92:a4:c1:bf:78:db:9d:46:f3:ab:d4:d9:98:f0:8f:
         64:bb:88:25:e1:b1:2d:30:3f:8a:7b:26:84:97:96:29:ed:79:
         8b:c3:f1:25:bc:d5:80:b7:b9:f0:be:d4:19:c9:30:86:3f:43:
         91:2f:ac:12:d0:0e:1e:d9:9b:6b:f9:49:b0:65:64:f9:4d:95:
         99:3b:05:c4:66:1d:63:58:e3:2a:65:15:e9:a8:04:d1:aa:e9:
         76:ad:aa:88:be:ba:30:53:a4:d5:06:e6:42:c7:55:3c:7e:14:
         25:3a:6b:eb
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUKj/30O9BGXxYjrQ0TllPBttGKVIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTE1NEQ5MjBCNkE0MjA5MTMxODcxNTMwQUVFMUY4QjhB
M0QzMDNENjAeFw0yNTA0MjMwMzU1MzNaFw0yNjA0MjIwNDAwMzNaMDMxMTAvBgNV
BAMTKDlDMEFEQTRCNDA4QjdGN0NERUY5OTY1RkIyQjA1RjJEQzFEMDFGQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy+/dVd2T+TzHSWSX8h/w0ewsm
Vm2LDD/QTxVpmA4GEWtmZk5M7HAgZ9JmYn+cMTEMvcu5vG+HARnapi6e+XX4wi4w
OQ4wF5W8eagbyjLq9ZpPP6SEvRSyTavsCgWjcO5T3yHRBF648h2zTHvrfvNwJm47
e+vVZDA2ObcwQ/K+tfzawUDAox+yLQ37K2mrZd0LhLQgUgVC8Dg0YyYZxLg0pAbh
l2s5mnvLIfbb46hA09rcsXEp+3DfeArS9zXCAD24gsYBoWMF+Rj4mMXi5QUfp8cd
SwA9+wBmKi0eQswjXMj09AmDRXhUpS5THRzhhrmqcx3ZfrBib7HpUOq80JPnAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUnAraS0CLf3ze+ZZfsrBfLcHQH6YwHwYDVR0j
BBgwFoAUEVTZILakIJExhxUwruH4uKPTA9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
NDY3ZWMzMy01YTcyLTRjNjUtOWZkMy02NmVmODQ3OTM5NGQvMC8xMTU0RDkyMEI2
QTQyMDkxMzE4NzE1MzBBRUUxRjhCOEEzRDMwM0Q2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTE1NEQ5MjBCNkE0MjA5MTMxODcxNTMwQUVFMUY4QjhBM0Qz
MDNENi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc0NjdlYzMzLTVhNzItNGM2NS05
ZmQzLTY2ZWY4NDc5Mzk0ZC8wLzMxMzAzMzJlMzEzODM4MmUzMjM0MzkyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzOTMwMzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnvPkwDQYJ
KoZIhvcNAQELBQADggEBACHTKUHP+xJstBl0BUpQ3r4sGLI59VzzY5VQCQtAuX/c
MIvVx+lye2RUwXhIf+mIftAw+V6CZiYOBzd/+NDtljxAIHHMwBphdPaI6uvqRJXm
282K/fzz5I14X42ZKQZdx2oJrIeRwICWmCy41s+KswgEvMxq+J4xKX8L1yqmHHZZ
7OjShPghTjk4YCyvHmvDm2Jn5ZKkwb94251G86vU2Zjwj2S7iCXhsS0wP4p7JoSX
linteYvD8SW81YC3ufC+1BnJMIY/Q5EvrBLQDh7Zm2v5SbBlZPlNlZk7BcRmHWNY
4yplFemoBNGq6Xatqoi+ujBTpNUG5kLHVTx+FCU6a+s=
-----END CERTIFICATE-----
Generated at Sun Apr 27 17:03:55 2025 by rpki-client on console.sobornost.net