Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/3130332e3139302e37362e302f32332d3234203d3e2034383030.roa
File:                     3130332e3139302e37362e302f32332d3234203d3e2034383030.roa (raw, json)
Hash identifier:          AYXfpwSS/VcD/Xo07P+SgDxOWSZoEQ4Wu+i9pDga8RE=
Subject key identifier:   37:C1:06:E4:69:C3:A9:BD:35:41:B8:D3:59:CD:F8:C4:21:F5:3E:2E
Certificate issuer:       /CN=A5D12164B9484E51D4BE4B03823526989B147558
Certificate serial:       614B919B58466ED65B13935BEA322A645222E689
Authority key identifier: A5:D1:21:64:B9:48:4E:51:D4:BE:4B:03:82:35:26:98:9B:14:75:58
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/3130332e3139302e37362e302f32332d3234203d3e2034383030.roa
Signing time:             Mon 14 Apr 2025 09:01:08 +0000
ROA not before:           Mon 14 Apr 2025 08:56:08 +0000
ROA not after:            Mon 13 Apr 2026 09:01:08 +0000
asID:                     4800
IP address blocks:        103.190.76.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.crl
                          rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 00:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:4b:91:9b:58:46:6e:d6:5b:13:93:5b:ea:32:2a:64:52:22:e6:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5D12164B9484E51D4BE4B03823526989B147558
        Validity
            Not Before: Apr 14 08:56:08 2025 GMT
            Not After : Apr 13 09:01:08 2026 GMT
        Subject: CN=37C106E469C3A9BD3541B8D359CDF8C421F53E2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1a:15:45:96:6b:92:c6:6b:67:5b:40:81:c2:
                    52:85:27:8f:8e:22:ad:04:5f:c4:3b:b6:da:a0:89:
                    71:16:a9:44:4e:b2:0c:f9:69:60:2b:55:b4:77:51:
                    87:53:c4:69:3f:56:cf:95:dc:b4:9d:84:d4:76:f9:
                    23:08:46:27:00:77:e3:9a:3d:af:97:51:33:63:05:
                    c0:fd:4a:18:85:55:ea:26:a8:2f:27:4a:fe:49:4c:
                    d6:83:df:f5:f1:8b:09:40:e1:ba:23:76:61:e0:e3:
                    e8:4b:dd:47:0c:fe:13:ca:8c:d5:3f:59:97:e2:4f:
                    31:b4:49:86:04:73:91:6d:d9:6b:d5:e5:17:92:69:
                    a2:fe:e9:b0:a6:e1:01:7b:ce:2e:66:18:8b:40:3b:
                    0c:71:8b:99:17:a0:31:f6:20:61:29:03:c2:39:e4:
                    55:92:f7:50:ef:2c:82:76:c6:ac:a4:c3:9c:d7:77:
                    f8:bf:af:91:a2:c2:84:72:d5:07:b0:c0:81:c4:18:
                    44:19:a1:81:4e:0d:9f:b9:f6:ab:e3:f6:23:5f:a1:
                    e7:4b:b5:77:82:1d:1d:43:fb:a2:b2:c7:07:85:26:
                    2a:12:9d:75:0d:f4:c6:35:48:92:aa:f7:e2:41:95:
                    31:b4:70:a7:32:a4:86:ac:f9:ef:8e:39:53:b3:3d:
                    14:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C1:06:E4:69:C3:A9:BD:35:41:B8:D3:59:CD:F8:C4:21:F5:3E:2E
            X509v3 Authority Key Identifier:
                keyid:A5:D1:21:64:B9:48:4E:51:D4:BE:4B:03:82:35:26:98:9B:14:75:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/3130332e3139302e37362e302f32332d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:1a:c1:1e:b1:e1:8e:43:1d:d5:db:2a:a7:07:7c:28:d2:ab:
         48:8c:0d:dc:3a:b9:e2:34:d5:0e:92:00:53:9d:72:52:2b:b9:
         5e:86:16:3c:1f:e6:81:82:ed:78:e1:cd:ba:8d:2c:22:71:24:
         07:68:79:ff:27:03:41:66:ab:83:d5:fd:a1:ab:b7:80:dd:e3:
         41:e7:b4:d3:bd:2c:39:1b:dc:eb:3f:9b:5c:12:d1:2c:b4:42:
         52:a1:65:75:55:e7:58:79:fc:73:1f:72:00:0f:ba:9b:6a:cd:
         94:77:ef:32:5a:c3:48:10:ef:93:86:ec:54:72:fb:37:34:33:
         9d:eb:d0:19:b5:2f:84:97:7a:87:3a:0e:ec:8a:49:ee:07:9e:
         17:0f:ae:cd:a4:6f:05:ef:78:2e:4b:70:76:f8:d3:8f:e2:34:
         6b:46:53:98:1c:e1:32:81:36:c8:44:d4:46:26:44:71:98:c2:
         45:e3:0c:e6:71:7f:89:ae:a8:10:76:f0:8a:d2:31:44:3b:a8:
         e6:59:7a:94:c0:c9:25:4a:61:de:0b:0c:aa:49:3f:2e:35:76:
         d9:b7:91:64:2a:ec:61:ec:52:3c:1c:60:33:f3:53:12:59:d1:
         f0:9f:23:39:3f:b1:a6:6f:66:93:a7:2c:18:e3:26:4f:09:ea:
         88:df:50:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:25 2025 by rpki-client on console.sobornost.net