Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/3130332e3139372e3138382e302f32322d3234203d3e20313333383030.roa
File:                     3130332e3139372e3138382e302f32322d3234203d3e20313333383030.roa (raw, json)
Hash identifier:          Q/xd/HC1bBeKjBCyWCDiCLVtwZ9rHYa7nKWTycy4dgg=
Subject key identifier:   86:9B:02:06:CF:9F:4A:EB:BE:6E:9A:7F:22:0B:3E:83:7C:A5:F6:A2
Certificate issuer:       /CN=8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B
Certificate serial:       39608545CB8E3A3BBF1AF4AD702F82FB48F4CCBE
Authority key identifier: 8E:E9:EE:E4:6E:A0:F8:60:38:5C:88:0C:00:E2:EE:5A:59:D6:EA:9B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/3130332e3139372e3138382e302f32322d3234203d3e20313333383030.roa
Signing time:             Fri 25 Apr 2025 06:14:54 +0000
ROA not before:           Fri 25 Apr 2025 06:09:54 +0000
ROA not after:            Fri 24 Apr 2026 06:14:54 +0000
asID:                     133800
IP address blocks:        103.197.188.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl
                          rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:60:85:45:cb:8e:3a:3b:bf:1a:f4:ad:70:2f:82:fb:48:f4:cc:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B
        Validity
            Not Before: Apr 25 06:09:54 2025 GMT
            Not After : Apr 24 06:14:54 2026 GMT
        Subject: CN=869B0206CF9F4AEBBE6E9A7F220B3E837CA5F6A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:94:6b:98:66:2e:88:b6:ac:20:94:12:42:cc:
                    1a:bf:a0:57:e9:e2:64:a9:88:62:ca:f1:e1:90:bf:
                    1f:4e:0b:35:64:38:30:56:e2:d3:02:26:c1:cb:61:
                    59:a6:0c:c7:3d:4b:bf:32:e4:69:cc:0f:ca:58:9f:
                    25:75:ed:a6:cb:8e:8d:5e:e5:ef:d4:86:4b:5d:e5:
                    c6:87:c8:3d:a2:93:1d:2c:20:d4:17:62:64:f1:44:
                    03:a6:80:08:73:4b:fb:27:6d:57:62:78:62:1e:9c:
                    7b:06:ef:80:ab:44:19:fe:a9:0f:12:58:78:80:7c:
                    c0:49:63:73:db:6b:f1:01:42:32:e6:e3:40:86:b5:
                    45:21:7a:60:35:45:8c:ce:17:c9:3c:f5:36:1f:51:
                    59:e3:ea:66:1f:70:ad:09:77:e5:78:91:5f:f8:5c:
                    97:ed:80:2d:f9:67:b0:a3:7f:93:85:b4:d8:af:26:
                    a0:26:40:3d:e5:8d:38:e8:0c:40:7c:40:57:b9:b2:
                    17:9c:ea:c4:10:2e:cd:df:f8:01:42:e3:9d:f1:77:
                    06:af:56:c4:08:ba:f6:e2:e4:3b:89:23:4e:2c:82:
                    5a:23:9e:ac:bc:62:d0:80:48:a6:c7:3f:57:4b:05:
                    05:f2:55:46:d2:3c:5c:39:41:e2:57:ee:71:bf:d2:
                    42:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:9B:02:06:CF:9F:4A:EB:BE:6E:9A:7F:22:0B:3E:83:7C:A5:F6:A2
            X509v3 Authority Key Identifier:
                keyid:8E:E9:EE:E4:6E:A0:F8:60:38:5C:88:0C:00:E2:EE:5A:59:D6:EA:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/3130332e3139372e3138382e302f32322d3234203d3e20313333383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.197.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:4e:02:4f:c9:56:72:f0:35:a6:34:e4:7e:e9:bf:2e:b9:3b:
         da:c5:22:e9:bd:07:ee:4b:cb:7b:14:24:f0:60:42:9a:19:44:
         c5:6e:c7:80:5c:e7:94:10:7e:69:d9:dc:4e:41:5a:51:c2:43:
         b4:ef:fa:bf:1e:ab:5e:76:df:ae:2c:a1:49:57:37:24:ff:50:
         5d:68:f4:69:1d:f4:46:7a:22:29:ea:7e:91:45:50:cb:59:f3:
         95:ba:f2:61:cc:f6:fd:5a:ac:09:d2:6a:92:1c:75:9f:9e:31:
         ec:bd:15:e3:ab:ad:79:a9:7b:b3:79:78:60:02:9a:68:91:e4:
         13:24:23:5a:12:1c:d4:8d:29:b6:fd:7d:d6:dc:c7:3d:90:aa:
         0c:54:b1:bf:92:5b:a7:6f:c9:98:86:24:d0:c3:37:0a:a9:8c:
         3d:a2:a2:f0:7e:2f:ac:2f:94:cb:e0:5e:81:ae:6a:8c:72:75:
         1b:00:c3:7e:bd:50:98:29:e1:8a:26:c4:d9:66:47:4d:fb:af:
         82:5e:43:f4:a8:1c:68:d2:f7:2a:48:c7:29:bc:d7:88:03:74:
         1d:5a:9d:09:79:82:84:46:30:48:71:51:6c:49:bd:81:fe:ea:
         aa:ce:56:0b:86:cf:af:c6:f9:91:ad:de:a7:0f:e1:19:60:bd:
         79:31:73:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:21:08 2025 by rpki-client on console.sobornost.net