Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/3130332e3138372e3131342e302f32342d3234203d3e203633383738.roa
File:                     3130332e3138372e3131342e302f32342d3234203d3e203633383738.roa (raw, json)
Hash identifier:          Dbua1W+dq/k6Z9uQfXqPhRIcFQdPJ4Cp3vbD2GRN4CU=
Subject key identifier:   63:12:F9:33:AE:1C:2D:50:1B:E5:FD:EC:B4:7C:E0:6D:65:79:54:70
Certificate issuer:       /CN=1DE04B1502D06C1C133ACE901223884FB36B2638
Certificate serial:       2FC11FD4E3F29DC4CDC7F9ABA02802F0AA225D60
Authority key identifier: 1D:E0:4B:15:02:D0:6C:1C:13:3A:CE:90:12:23:88:4F:B3:6B:26:38
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/3130332e3138372e3131342e302f32342d3234203d3e203633383738.roa
Signing time:             Tue 01 Apr 2025 05:00:01 +0000
ROA not before:           Tue 01 Apr 2025 04:55:01 +0000
ROA not after:            Tue 31 Mar 2026 05:00:01 +0000
asID:                     63878
IP address blocks:        103.187.114.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.crl
                          rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 12:29:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c1:1f:d4:e3:f2:9d:c4:cd:c7:f9:ab:a0:28:02:f0:aa:22:5d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DE04B1502D06C1C133ACE901223884FB36B2638
        Validity
            Not Before: Apr  1 04:55:01 2025 GMT
            Not After : Mar 31 05:00:01 2026 GMT
        Subject: CN=6312F933AE1C2D501BE5FDECB47CE06D65795470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0a:7c:82:63:76:72:e5:1a:d0:1a:4c:0b:84:
                    7c:7d:cf:6b:b4:bf:d3:c1:e1:db:2b:9a:d6:52:75:
                    df:26:a8:3d:64:6a:2f:c8:da:ca:fb:20:8c:2f:aa:
                    08:43:7d:d4:b3:b7:4b:d8:7e:3b:c8:e2:c6:31:cd:
                    f1:5e:1d:77:c5:67:63:36:72:1a:9a:fb:7f:96:0b:
                    6f:d6:a6:b8:89:1d:5c:61:9f:a3:40:69:15:5a:cc:
                    2c:c9:07:06:22:d1:9a:1b:96:fc:1d:ef:90:e8:f6:
                    18:4b:c4:d1:95:56:42:f5:17:85:a9:b7:f4:3b:f4:
                    f0:eb:cc:ba:67:28:35:a2:20:d7:6e:bf:9d:7f:2b:
                    85:cd:11:e9:89:3a:c6:9b:6b:d6:dc:49:ec:96:08:
                    8c:96:03:c7:d8:48:a4:b2:a0:0a:b0:29:80:ad:9f:
                    c6:55:c6:c9:7d:71:57:eb:98:00:a9:d7:e1:34:75:
                    ee:d3:69:d2:02:73:d9:d6:9e:59:36:7a:62:56:11:
                    f6:29:80:51:7a:aa:b7:65:39:81:29:07:81:e8:5a:
                    7b:e2:14:89:4f:c0:a0:71:e0:b4:34:ed:8a:f9:f8:
                    1e:81:4d:7d:1c:60:3e:66:dd:04:d1:49:d5:60:2a:
                    dd:6a:29:20:d7:5f:54:c1:7f:de:57:3a:ca:80:f8:
                    ab:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:12:F9:33:AE:1C:2D:50:1B:E5:FD:EC:B4:7C:E0:6D:65:79:54:70
            X509v3 Authority Key Identifier:
                keyid:1D:E0:4B:15:02:D0:6C:1C:13:3A:CE:90:12:23:88:4F:B3:6B:26:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/3130332e3138372e3131342e302f32342d3234203d3e203633383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:51:93:22:28:59:41:e9:dc:3a:0a:9c:05:e4:0c:5e:06:f3:
         7e:25:2b:80:79:8c:ac:b6:50:16:2e:70:81:22:0b:9c:fe:c8:
         a0:e1:e3:b7:3c:b1:ba:9f:0a:19:48:09:b0:de:1e:4d:18:00:
         73:bb:f9:41:e8:f2:43:5c:bb:b2:38:2b:9a:08:8d:e5:f4:4a:
         c5:8c:36:35:4f:43:3b:6c:2d:9f:81:4a:84:f0:d2:ec:d3:b4:
         0c:06:e5:6e:39:b2:53:67:1b:be:7a:24:51:23:f3:69:d7:6e:
         7e:7e:c1:30:ea:90:cc:c4:8e:2a:65:b9:3d:31:35:41:55:d1:
         4a:13:a6:54:10:0e:46:9e:06:ae:e8:d9:87:95:65:8c:f4:e4:
         a1:de:71:3b:ff:03:ae:8d:53:81:0f:1d:21:1f:f6:15:20:63:
         10:ae:1e:1f:7f:eb:67:b7:04:66:01:7b:8e:57:b3:9d:0c:e1:
         bc:9f:d9:d3:a8:26:be:49:c4:aa:eb:8d:4c:e5:c4:f4:78:a5:
         2c:87:20:00:67:b7:8a:81:b6:ba:4c:52:f5:2b:6b:ce:1f:a9:
         2d:20:3c:e2:d0:d1:7b:2e:62:a4:f1:20:3f:4f:13:32:47:c2:
         47:ad:4a:0e:de:59:6d:c6:0d:e9:4e:79:34:9b:e8:6f:79:08:
         ac:6e:00:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 17:38:31 2025 by rpki-client on console.sobornost.net