Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/3130332e3135332e3138382e302f32332d3234203d3e20313531303030.roa
File:                     3130332e3135332e3138382e302f32332d3234203d3e20313531303030.roa (raw, json)
Hash identifier:          swFGOhGRguY6xbHl+4Isnl0Fys0RcqGksCRObsxxYUI=
Subject key identifier:   13:A8:D7:E0:06:0C:97:B0:8E:D6:D7:E9:6D:F8:2C:22:BB:D0:FD:DF
Certificate issuer:       /CN=1BA144741407FB84B27FEDFC33E86A5D5F5704C5
Certificate serial:       78A07EB655B880D1C6E8CA8671CCE0DC49B6C9FA
Authority key identifier: 1B:A1:44:74:14:07:FB:84:B2:7F:ED:FC:33:E8:6A:5D:5F:57:04:C5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/3130332e3135332e3138382e302f32332d3234203d3e20313531303030.roa
Signing time:             Wed 09 Apr 2025 10:00:51 +0000
ROA not before:           Wed 09 Apr 2025 09:55:51 +0000
ROA not after:            Wed 08 Apr 2026 10:00:51 +0000
asID:                     151000
IP address blocks:        103.153.188.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.crl
                          rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 14:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a0:7e:b6:55:b8:80:d1:c6:e8:ca:86:71:cc:e0:dc:49:b6:c9:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BA144741407FB84B27FEDFC33E86A5D5F5704C5
        Validity
            Not Before: Apr  9 09:55:51 2025 GMT
            Not After : Apr  8 10:00:51 2026 GMT
        Subject: CN=13A8D7E0060C97B08ED6D7E96DF82C22BBD0FDDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b7:05:29:68:6c:3f:cd:6a:59:6b:03:96:b1:
                    dd:34:5f:73:d9:c2:ab:63:f9:b5:95:02:25:f1:22:
                    03:c5:ce:2b:b5:06:f5:e1:51:a5:c9:6f:17:0a:5c:
                    43:5c:60:9e:0b:e5:50:26:ce:49:16:db:af:9c:29:
                    bd:3b:ee:c3:d1:f2:15:e0:0c:88:ad:7e:0c:c0:64:
                    d0:91:bd:69:20:28:d7:68:4b:c4:c9:e8:19:54:1c:
                    f0:cd:00:af:d4:42:3c:88:42:ff:4f:95:9d:98:4a:
                    20:85:e0:31:6a:1e:30:3b:2f:c5:f4:b4:52:9d:94:
                    43:95:19:41:95:b5:16:41:c3:9a:c4:54:07:cb:12:
                    47:86:fa:85:b6:43:18:d4:e6:c4:c1:60:e6:b1:96:
                    43:d4:0a:0c:a3:74:8b:44:cd:fa:04:bf:b2:02:75:
                    ed:f6:6c:31:c5:82:e9:8e:8d:27:d3:92:06:3d:7b:
                    0b:21:d6:e7:1b:06:ec:b9:1f:74:38:61:3d:89:10:
                    fc:2e:37:93:a4:e6:d9:72:47:ad:3d:8d:66:3a:48:
                    6b:17:7c:5a:4f:bf:cf:db:95:13:40:b4:13:26:7d:
                    a1:a6:ae:b8:73:54:26:06:bb:10:1a:93:20:ed:c5:
                    bd:72:b7:59:7e:3f:99:ec:9d:0c:b2:56:09:d1:76:
                    8f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A8:D7:E0:06:0C:97:B0:8E:D6:D7:E9:6D:F8:2C:22:BB:D0:FD:DF
            X509v3 Authority Key Identifier:
                keyid:1B:A1:44:74:14:07:FB:84:B2:7F:ED:FC:33:E8:6A:5D:5F:57:04:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/3130332e3135332e3138382e302f32332d3234203d3e20313531303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:32:a2:e1:a6:c9:f7:a0:13:ee:ea:a3:d8:07:b0:0c:ba:7e:
         96:3b:c1:e0:87:f9:0a:8a:63:0f:e2:23:7e:df:fe:92:d9:e7:
         97:86:7c:d4:4b:3f:df:ee:6a:a9:c8:ed:dd:26:e6:82:30:96:
         48:46:f0:cf:1d:d0:0d:50:f5:a0:4a:97:cd:87:59:fe:07:d7:
         44:52:cc:51:57:bf:75:80:a9:ab:c6:f7:1d:22:bb:d0:4d:88:
         02:0e:79:12:c3:8e:61:7c:2c:a3:dc:27:d5:dc:bc:ad:fd:64:
         53:ce:fd:f0:de:5c:ea:4f:d7:68:18:b8:b9:2c:d2:fb:ff:4d:
         1a:37:49:8c:5c:52:c5:25:7e:37:86:2a:b2:ba:49:e5:b0:2e:
         31:a5:70:f7:95:3c:70:f0:f5:3f:ee:7f:1a:db:6f:31:61:a6:
         6a:c8:c5:24:ae:8d:c3:4d:40:35:a7:f0:13:ae:6b:de:0b:0e:
         83:d4:15:1a:4a:c5:b3:f7:7b:cb:dc:e7:6f:69:6d:6f:08:b0:
         e0:22:9b:b2:68:3f:7b:14:36:51:df:e6:3d:a2:26:2d:57:1f:
         a4:b2:4d:22:e7:d4:1f:55:32:70:13:bf:09:c8:96:4e:aa:ff:
         e0:90:ee:f8:1b:94:22:5e:36:c5:d5:eb:06:9f:06:7f:30:cc:
         40:e7:17:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:06 2025 by rpki-client on console.sobornost.net