Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/3130332e3137302e33302e302f32342d3234203d3e20313432333636.roa
File:                     3130332e3137302e33302e302f32342d3234203d3e20313432333636.roa (raw, json)
Hash identifier:          L9UqHBOT0KM8Y3HKq7TuZiV7NwWM18YFSbtkcApuAS0=
Subject key identifier:   4B:9A:B4:71:C7:37:AC:7C:54:70:2B:89:7E:AF:E0:21:02:A0:03:47
Certificate issuer:       /CN=0110A7C2C5E7B74C89B036FFF78974619577D31C
Certificate serial:       04EF06E68927B77C2E26BBA35BE2FC959E61599D
Authority key identifier: 01:10:A7:C2:C5:E7:B7:4C:89:B0:36:FF:F7:89:74:61:95:77:D3:1C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/3130332e3137302e33302e302f32342d3234203d3e20313432333636.roa
Signing time:             Tue 15 Apr 2025 04:00:01 +0000
ROA not before:           Tue 15 Apr 2025 03:55:01 +0000
ROA not after:            Tue 14 Apr 2026 04:00:01 +0000
asID:                     142366
IP address blocks:        103.170.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.crl
                          rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 09:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ef:06:e6:89:27:b7:7c:2e:26:bb:a3:5b:e2:fc:95:9e:61:59:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0110A7C2C5E7B74C89B036FFF78974619577D31C
        Validity
            Not Before: Apr 15 03:55:01 2025 GMT
            Not After : Apr 14 04:00:01 2026 GMT
        Subject: CN=4B9AB471C737AC7C54702B897EAFE02102A00347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f9:3a:08:41:02:5e:96:e1:e1:f9:9d:3f:6e:
                    d3:63:f2:15:40:a6:e3:6c:ec:d1:1a:dc:12:98:9c:
                    37:13:ad:0b:6b:47:52:9a:6b:fd:74:e8:28:d7:63:
                    e6:85:37:0f:0b:3c:c1:37:2f:71:01:e1:0f:21:3c:
                    cd:a3:3e:ce:1d:20:96:0b:64:07:bb:43:01:6a:18:
                    f0:bd:ea:04:0e:e6:4f:ef:e1:dc:a6:37:af:08:f5:
                    0f:b7:e8:97:b1:a5:a1:1c:f7:a1:a5:6c:75:ae:7a:
                    f9:e3:d3:42:63:09:aa:1d:9a:5d:a2:c0:ff:6e:c1:
                    37:5a:04:66:80:12:c1:9d:77:ed:31:66:48:14:59:
                    f0:a1:5f:21:1c:94:64:eb:2a:63:66:d3:c0:5b:64:
                    a5:10:46:5a:b2:98:e0:37:11:f1:3b:ce:a6:1c:62:
                    46:ee:9b:0f:48:71:f6:a4:2a:9e:c7:b8:a3:d2:08:
                    b2:f3:82:78:6b:f7:12:24:30:c5:d3:69:51:ad:57:
                    7c:fc:b7:84:8b:34:47:c2:a9:ee:27:df:49:75:ae:
                    1a:29:a0:f6:d0:e2:74:4c:38:84:ec:9e:88:ea:6a:
                    7c:2e:16:67:ba:a5:7c:8b:c8:aa:ca:a5:83:61:7b:
                    78:1b:2f:c5:31:88:67:bf:c6:5c:25:2a:ba:85:7f:
                    29:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:9A:B4:71:C7:37:AC:7C:54:70:2B:89:7E:AF:E0:21:02:A0:03:47
            X509v3 Authority Key Identifier:
                keyid:01:10:A7:C2:C5:E7:B7:4C:89:B0:36:FF:F7:89:74:61:95:77:D3:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/3130332e3137302e33302e302f32342d3234203d3e20313432333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:e5:17:48:32:6f:e1:e6:56:b5:ad:2b:6a:95:03:f8:d8:e1:
         55:79:e9:60:79:51:3a:9e:9e:cf:fe:8c:f7:a4:6e:ff:a6:98:
         43:8d:54:f2:eb:2f:13:36:e8:eb:6e:ab:e7:01:ad:ba:3c:a2:
         6b:26:0b:25:aa:ec:57:34:e4:6e:3d:11:8a:ee:96:f3:49:96:
         b2:01:c2:5d:f2:0f:8c:88:93:b8:77:91:73:54:3f:fd:f7:70:
         72:59:92:8f:f9:54:e6:17:9e:ee:a9:76:c8:44:de:0f:50:81:
         bc:47:d0:fb:4d:5a:0c:60:79:e1:6d:f0:a3:7b:e2:06:90:7b:
         fe:7d:99:35:4d:2f:c0:70:8e:fe:a1:13:a8:30:aa:f7:60:d9:
         ea:ab:c7:a4:33:f0:83:a5:05:18:a7:89:d2:20:52:57:93:68:
         2a:3b:58:f3:08:53:08:d7:dc:25:78:ad:ee:bd:a2:7f:a2:cf:
         63:a1:22:7d:e4:a7:13:e4:60:56:09:06:cf:60:74:64:05:b1:
         5a:19:ae:54:0d:8b:83:be:30:23:87:9f:26:e5:b5:47:ea:a9:
         05:fc:f5:da:ad:df:f7:ce:c7:01:ba:7c:ec:e1:8d:76:d5:4f:
         d8:b4:ad:02:bf:f4:5a:0d:8a:33:a1:62:b2:1e:6e:d7:c1:0d:
         f9:66:ef:4b
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUBO8G5oknt3wuJrujW+L8lZ5hWZ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDExMEE3QzJDNUU3Qjc0Qzg5QjAzNkZGRjc4OTc0NjE5
NTc3RDMxQzAeFw0yNTA0MTUwMzU1MDFaFw0yNjA0MTQwNDAwMDFaMDMxMTAvBgNV
BAMTKDRCOUFCNDcxQzczN0FDN0M1NDcwMkI4OTdFQUZFMDIxMDJBMDAzNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1+ToIQQJeluHh+Z0/btNj8hVA
puNs7NEa3BKYnDcTrQtrR1Kaa/106CjXY+aFNw8LPME3L3EB4Q8hPM2jPs4dIJYL
ZAe7QwFqGPC96gQO5k/v4dymN68I9Q+36JexpaEc96GlbHWuevnj00JjCaodml2i
wP9uwTdaBGaAEsGdd+0xZkgUWfChXyEclGTrKmNm08BbZKUQRlqymOA3EfE7zqYc
Ykbumw9IcfakKp7HuKPSCLLzgnhr9xIkMMXTaVGtV3z8t4SLNEfCqe4n30l1rhop
oPbQ4nRMOITsnojqanwuFme6pXyLyKrKpYNhe3gbL8UxiGe/xlwlKrqFfymxAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUS5q0ccc3rHxUcCuJfq/gIQKgA0cwHwYDVR0j
BBgwFoAUARCnwsXnt0yJsDb/94l0YZV30xwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
NzBkZmI1YS04NDVlLTRkZGYtYWNhNy1hOWIzMWMzMWRmZjQvMC8wMTEwQTdDMkM1
RTdCNzRDODlCMDM2RkZGNzg5NzQ2MTk1NzdEMzFDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDExMEE3QzJDNUU3Qjc0Qzg5QjAzNkZGRjc4OTc0NjE5NTc3
RDMxQy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E3MGRmYjVhLTg0NWUtNGRkZi1h
Y2E3LWE5YjMxYzMxZGZmNC8wLzMxMzAzMzJlMzEzNzMwMmUzMzMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDMyMzMzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6oeMA0GCSqG
SIb3DQEBCwUAA4IBAQCr5RdIMm/h5la1rStqlQP42OFVeelgeVE6np7P/oz3pG7/
pphDjVTy6y8TNujrbqvnAa26PKJrJgslquxXNORuPRGK7pbzSZayAcJd8g+MiJO4
d5FzVD/993ByWZKP+VTmF57uqXbIRN4PUIG8R9D7TVoMYHnhbfCje+IGkHv+fZk1
TS/AcI7+oROoMKr3YNnqq8ekM/CDpQUYp4nSIFJXk2gqO1jzCFMI19wleK3uvaJ/
os9joSJ95KcT5GBWCQbPYHRkBbFaGa5UDYuDvjAjh58m5bVH6qkF/PXard/3zscB
unzs4Y121U/YtK0Cv/RaDYozoWKyHm7XwQ35Zu9L
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:13:44 2025 by rpki-client on console.sobornost.net