Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/3130332e3138342e31322e302f32332d3234203d3e20313531303030.roa
File:                     3130332e3138342e31322e302f32332d3234203d3e20313531303030.roa (raw, json)
Hash identifier:          Nm3m5tocLRAVbY4DRmLGKJyvH8opyslr8Wu/151pWIw=
Subject key identifier:   69:E2:48:A5:EF:59:F2:87:41:4E:3A:88:D4:09:48:6B:5E:B7:0D:3C
Certificate issuer:       /CN=688200169D93CC55E48C5F39388BF1F8A3D61AEC
Certificate serial:       1CF67B58090F8F062BDEA70A989CF88A95020EAA
Authority key identifier: 68:82:00:16:9D:93:CC:55:E4:8C:5F:39:38:8B:F1:F8:A3:D6:1A:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/3130332e3138342e31322e302f32332d3234203d3e20313531303030.roa
Signing time:             Wed 09 Apr 2025 10:02:21 +0000
ROA not before:           Wed 09 Apr 2025 09:57:21 +0000
ROA not after:            Wed 08 Apr 2026 10:02:21 +0000
asID:                     151000
IP address blocks:        103.184.12.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl
                          rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Apr 2025 15:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:f6:7b:58:09:0f:8f:06:2b:de:a7:0a:98:9c:f8:8a:95:02:0e:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=688200169D93CC55E48C5F39388BF1F8A3D61AEC
        Validity
            Not Before: Apr  9 09:57:21 2025 GMT
            Not After : Apr  8 10:02:21 2026 GMT
        Subject: CN=69E248A5EF59F287414E3A88D409486B5EB70D3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e8:73:f4:fe:09:2c:da:94:d8:91:1b:62:ee:
                    01:5c:99:a6:c4:10:b1:21:12:11:98:0d:97:14:20:
                    3d:5a:fb:30:5c:ce:20:09:f9:3d:c5:a8:1b:33:77:
                    ad:e0:d5:a1:60:9d:60:af:9b:30:cc:71:6e:c9:95:
                    4a:55:4a:74:49:46:60:47:1a:25:ce:1d:52:1a:22:
                    ce:d8:20:a3:eb:ee:1d:45:b2:48:a1:7f:a2:86:3e:
                    6d:2a:96:0b:5f:7a:08:fe:ca:ca:79:ce:f8:17:3a:
                    77:ef:7a:cf:77:b7:19:34:82:4a:97:f3:d0:fe:ba:
                    2c:41:82:3a:c5:71:71:39:64:16:ff:f6:9c:5b:dd:
                    7f:ff:e9:e8:6f:6f:61:47:d3:a2:c8:5c:73:36:e0:
                    3e:8a:a3:fa:0a:20:3a:50:f0:ee:ab:9e:7e:61:5b:
                    3a:fe:1f:19:c9:2a:50:68:95:06:c6:8c:cf:7e:93:
                    6c:99:87:fc:06:01:2e:a8:c2:ed:15:ae:55:61:f3:
                    6d:cd:98:55:8a:8f:f2:35:61:b9:d0:a4:27:dd:af:
                    65:cb:dc:0f:22:d5:35:9c:d9:82:c3:98:ef:a0:71:
                    ca:9b:9b:41:61:1b:02:0b:c9:57:e1:d8:0d:f2:4e:
                    50:c4:70:37:ce:07:8d:21:d6:dc:b9:92:12:06:ee:
                    72:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E2:48:A5:EF:59:F2:87:41:4E:3A:88:D4:09:48:6B:5E:B7:0D:3C
            X509v3 Authority Key Identifier:
                keyid:68:82:00:16:9D:93:CC:55:E4:8C:5F:39:38:8B:F1:F8:A3:D6:1A:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/3130332e3138342e31322e302f32332d3234203d3e20313531303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:a1:52:71:53:dc:90:61:a3:1d:b3:a5:88:63:f4:41:de:b8:
         f8:68:c7:c2:00:06:f2:1a:85:ef:18:85:1c:25:0f:86:0b:f4:
         01:c8:40:db:7e:a1:73:c8:75:25:12:56:86:1e:2d:35:e3:d7:
         08:a3:c2:1e:4f:cd:12:b0:9e:48:8e:d1:00:d1:6f:48:38:5d:
         1d:83:f3:f2:91:3d:ec:10:64:71:a4:b0:b2:42:1b:fd:ff:f5:
         1b:36:5d:13:38:f9:cd:da:71:33:51:3d:d5:b5:38:b8:28:a2:
         94:2b:db:2e:2f:06:00:93:44:c6:a1:4d:74:4e:4e:08:78:b7:
         fc:ee:0c:f0:88:6f:43:ff:11:df:41:2c:e2:67:93:32:c8:32:
         fd:7f:2a:fc:25:57:3d:8c:bd:42:04:13:e5:a3:e5:cd:c7:ee:
         0d:8f:8f:7e:6f:1d:b3:2c:d5:5b:78:52:97:75:84:6e:6b:56:
         38:e8:39:76:92:b2:80:60:b3:04:2f:0a:87:79:7b:7a:37:32:
         e0:ad:a6:ee:32:ca:2f:e7:e1:61:d7:03:86:5f:c0:dd:e8:52:
         0d:3c:15:21:74:27:40:47:b5:f8:21:df:4c:9a:64:62:6d:04:
         f8:26:a1:76:e6:8c:b0:d5:6a:50:a0:c1:12:03:4a:5b:a3:19:
         95:e2:78:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:03:55 2025 by rpki-client on console.sobornost.net