Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/3130332e3136312e3133342e302f32332d3233203d3e203539323832.roa
File:                     3130332e3136312e3133342e302f32332d3233203d3e203539323832.roa (raw, json)
Hash identifier:          dsbjoyKjKxL4iwUB8V3WadTuSmVRqe7mRaojqe/cx6g=
Subject key identifier:   03:B4:AC:C7:AD:50:90:E7:CF:65:D4:20:F2:37:2F:8B:B4:C2:80:53
Certificate issuer:       /CN=115880D133393FF2D96A5861679B5166AFDB1248
Certificate serial:       1E58BEE8802A4A0CEBB86FAF99761CD5E36247E9
Authority key identifier: 11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/3130332e3136312e3133342e302f32332d3233203d3e203539323832.roa
Signing time:             Thu 24 Apr 2025 05:02:21 +0000
ROA not before:           Thu 24 Apr 2025 04:57:21 +0000
ROA not after:            Thu 23 Apr 2026 05:02:21 +0000
asID:                     59282
IP address blocks:        103.161.134.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl
                          rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 08:44:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:58:be:e8:80:2a:4a:0c:eb:b8:6f:af:99:76:1c:d5:e3:62:47:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=115880D133393FF2D96A5861679B5166AFDB1248
        Validity
            Not Before: Apr 24 04:57:21 2025 GMT
            Not After : Apr 23 05:02:21 2026 GMT
        Subject: CN=03B4ACC7AD5090E7CF65D420F2372F8BB4C28053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:17:f3:a3:7b:88:c8:28:3f:60:ae:99:86:c2:
                    7e:ae:21:cd:05:54:ee:60:2b:7f:3b:62:bd:b1:6f:
                    ac:a6:bc:6a:e4:c7:06:eb:78:ba:fb:8e:e3:62:d7:
                    f0:5c:81:ca:73:75:c7:22:0d:26:80:60:87:72:9d:
                    2e:a7:d1:b6:d3:fb:3b:ea:8f:bd:9b:a3:90:b9:f7:
                    f0:aa:1a:af:5b:25:e6:53:55:e1:90:44:85:ea:72:
                    71:02:d7:59:4a:89:75:1d:c7:2f:bd:9b:21:a5:b4:
                    6d:70:69:05:ae:de:f2:28:88:9e:0b:c2:ec:4c:a0:
                    d0:47:04:14:90:cf:a3:46:61:84:a9:8d:94:9c:de:
                    e0:f8:87:0d:c3:70:d6:5c:e3:94:c6:6f:bd:40:61:
                    8e:00:c9:3e:dd:2b:33:28:da:9f:c0:b3:5f:74:a7:
                    97:b8:7a:56:12:1a:bd:2e:d4:28:bc:da:97:6f:5a:
                    d7:f8:bd:0c:0c:fd:9c:5b:cb:48:87:52:9f:d3:06:
                    f4:fc:5e:ee:a7:2b:f0:7f:54:ee:ac:07:d3:9c:07:
                    03:31:f3:e2:7e:86:20:f9:d5:62:8e:1f:b1:83:ee:
                    a9:fe:d2:b8:a5:7c:7b:ea:50:a8:9c:8a:3a:3c:36:
                    d5:87:63:9a:85:a4:0b:f9:49:29:45:c1:c5:d9:85:
                    5d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B4:AC:C7:AD:50:90:E7:CF:65:D4:20:F2:37:2F:8B:B4:C2:80:53
            X509v3 Authority Key Identifier:
                keyid:11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/3130332e3136312e3133342e302f32332d3233203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:94:16:0a:a2:77:d9:da:5f:45:fe:aa:70:ff:0a:cd:3c:20:
         1f:c5:7e:a0:b1:cc:58:3d:6f:d2:ca:7b:61:52:d4:b8:34:be:
         a6:60:70:64:66:4b:ba:8a:62:86:2c:55:c6:79:0b:4e:34:43:
         f2:7f:34:cb:a7:9b:7a:2f:79:34:9a:47:d7:bd:df:a0:18:3f:
         23:59:e0:a8:21:1c:48:54:9e:19:f2:25:30:e1:aa:ff:73:fc:
         88:cb:5c:1b:d1:75:93:7a:da:ac:38:15:4e:8a:7d:43:6a:10:
         6a:4a:65:b2:3b:7c:37:70:21:8f:c4:5d:5c:85:0d:4a:db:4d:
         d7:1f:65:3e:85:0d:2f:4f:40:55:6e:70:33:0c:aa:ba:c5:40:
         f8:5b:1f:32:69:da:98:10:c3:2d:8c:bb:22:36:c1:92:5a:7c:
         08:2d:02:14:ba:3f:fc:95:90:99:18:2d:9f:25:b7:61:40:80:
         90:60:7c:d9:a0:d1:f9:3b:38:6c:21:8c:86:28:26:e9:87:30:
         48:35:0b:d5:68:23:80:c8:8e:aa:f2:02:7e:66:c4:9b:1a:bb:
         2d:17:e5:dc:4e:ca:ff:d2:0c:56:7a:b9:93:03:82:93:a2:11:
         83:90:3a:78:cc:ce:29:0d:e8:e9:23:80:1a:3b:ad:e5:68:5c:
         a9:9b:70:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 06:49:50 2025 by rpki-client on console.sobornost.net