Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/3130332e3138382e3137342e302f32332d3233203d3e203538333639.roa
File:                     3130332e3138382e3137342e302f32332d3233203d3e203538333639.roa (raw, json)
Hash identifier:          QklyP1dvX/5DYZK2HcWTPqmmMUQSin71ViC/dExkFg4=
Subject key identifier:   8C:DA:3C:1E:60:8C:D4:24:4D:DC:52:34:DC:D7:20:AA:30:A9:D3:1A
Certificate issuer:       /CN=DC19ED76CCD72AB435328C48847EF794698443FE
Certificate serial:       2CAA7DD30C52C7AF33C048E703440A73AE56E140
Authority key identifier: DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/3130332e3138382e3137342e302f32332d3233203d3e203538333639.roa
Signing time:             Wed 23 Apr 2025 10:02:37 +0000
ROA not before:           Wed 23 Apr 2025 09:57:37 +0000
ROA not after:            Wed 22 Apr 2026 10:02:37 +0000
asID:                     58369
IP address blocks:        103.188.174.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.crl
                          rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 21:09:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:aa:7d:d3:0c:52:c7:af:33:c0:48:e7:03:44:0a:73:ae:56:e1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC19ED76CCD72AB435328C48847EF794698443FE
        Validity
            Not Before: Apr 23 09:57:37 2025 GMT
            Not After : Apr 22 10:02:37 2026 GMT
        Subject: CN=8CDA3C1E608CD4244DDC5234DCD720AA30A9D31A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c2:cb:73:10:ee:06:07:9c:c6:63:45:6e:37:
                    a2:22:b5:59:78:08:66:7c:e5:7a:f6:1b:7f:08:df:
                    36:6e:c9:4d:29:8d:67:6b:76:cb:47:67:b7:07:20:
                    e8:ad:58:81:a3:2c:4d:27:2b:ec:db:00:54:a2:be:
                    0b:b6:29:fa:5f:7c:35:9f:2c:58:f3:38:a3:bf:77:
                    78:ef:ea:d2:d3:2e:f9:ee:bf:15:5c:3b:14:67:bc:
                    8b:e3:32:05:c1:54:8a:f8:37:47:95:b9:a3:d2:f1:
                    0d:40:36:a2:35:73:9b:56:89:4b:6d:d7:4a:a1:cd:
                    e5:49:b9:5b:b5:26:62:00:cf:31:b4:74:4a:e2:95:
                    ba:8b:57:66:65:6e:95:53:04:7a:66:c1:55:a0:0b:
                    36:ef:fe:cf:0e:dd:d2:3a:8d:ae:30:49:26:f2:c0:
                    0e:b0:1d:cf:dd:17:c9:49:b9:4d:dc:7e:06:2f:89:
                    83:b3:f4:7c:85:87:0c:b7:f1:b2:dd:41:3f:69:ee:
                    8e:98:de:87:0c:46:67:b0:49:ea:03:df:5a:6b:4c:
                    e3:cd:21:09:97:79:07:8f:92:d6:ab:e1:47:30:9d:
                    b0:a4:08:b7:5e:5b:35:d2:86:59:43:52:07:22:6a:
                    61:fc:7f:67:d9:ee:82:60:1c:32:f3:c7:46:7d:8d:
                    6c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:DA:3C:1E:60:8C:D4:24:4D:DC:52:34:DC:D7:20:AA:30:A9:D3:1A
            X509v3 Authority Key Identifier:
                keyid:DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/3130332e3138382e3137342e302f32332d3233203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:8d:6e:e7:6f:70:78:81:39:4c:47:f1:67:ae:ce:3a:9a:f1:
         64:10:16:ee:bd:b2:86:12:57:7c:55:f2:46:50:95:fa:fa:a0:
         f1:a7:ed:d4:f9:05:c9:be:00:9c:53:b2:89:2c:ca:3f:e3:1c:
         75:2f:8f:53:b2:2c:25:06:e1:60:6e:1b:72:9c:20:04:b8:69:
         41:28:bd:71:d4:c4:b2:2d:7c:68:fe:21:45:b7:f1:37:c4:51:
         c5:7c:5a:82:38:13:e6:b0:39:d0:e5:e0:99:4a:16:42:b3:9c:
         6f:22:aa:66:05:1f:e2:0e:7b:86:56:47:f5:7e:86:38:98:1b:
         a4:c3:27:2f:40:cf:e2:fe:f7:06:e9:00:70:db:81:0f:67:93:
         1d:e5:3c:78:34:f6:d0:5e:94:bf:f4:13:90:fd:5c:28:a2:c1:
         97:9d:b2:dd:c2:53:8e:3f:39:af:f5:9b:d4:8a:85:ee:80:65:
         e6:15:2b:5d:bb:0a:4f:7e:c3:cf:56:9e:34:83:85:ea:06:de:
         c3:5f:3c:bc:37:7a:4d:47:ef:a1:ec:3c:52:23:ed:4d:1e:45:
         e4:e1:50:63:2d:4f:10:a3:db:28:dc:27:cc:a0:33:a9:0b:a5:
         da:fd:51:6c:df:cc:f0:af:80:23:8f:98:b5:e1:22:c8:f1:ae:
         5e:2c:97:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:11:51 2025 by rpki-client on console.sobornost.net