Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/3130332e3130372e38342e302f32342d3234203d3e20313336383739.roa
File:                     3130332e3130372e38342e302f32342d3234203d3e20313336383739.roa (raw, json)
Hash identifier:          XJya992fgeumEsyzLHSliCXeCsu4l890cLRsCVZbrLE=
Subject key identifier:   BE:70:70:D1:E6:AC:CA:2C:B8:44:0A:A9:28:0A:DA:2C:F2:96:FA:D5
Certificate issuer:       /CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1
Certificate serial:       2AD6F7F03FEE973F8AA3C91154772D52F1F98959
Authority key identifier: 22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/3130332e3130372e38342e302f32342d3234203d3e20313336383739.roa
Signing time:             Fri 21 Feb 2025 09:00:01 +0000
ROA not before:           Fri 21 Feb 2025 08:55:01 +0000
ROA not after:            Fri 20 Feb 2026 09:00:01 +0000
asID:                     136879
IP address blocks:        103.107.84.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl
                          rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:d6:f7:f0:3f:ee:97:3f:8a:a3:c9:11:54:77:2d:52:f1:f9:89:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1
        Validity
            Not Before: Feb 21 08:55:01 2025 GMT
            Not After : Feb 20 09:00:01 2026 GMT
        Subject: CN=BE7070D1E6ACCA2CB8440AA9280ADA2CF296FAD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d4:46:79:47:98:35:0b:9f:f8:8f:90:44:15:
                    31:7f:95:64:6d:83:d4:96:72:48:2d:64:6a:c8:5b:
                    6a:c5:34:2e:37:38:5f:06:f5:76:3d:c9:3b:f1:52:
                    c1:c4:87:58:8d:a2:81:70:ec:e1:7f:fd:97:19:e8:
                    f7:f1:fb:bc:96:56:fc:ea:56:fe:30:bd:86:73:ce:
                    cf:e6:46:24:3b:15:17:9d:7b:42:04:3b:e7:6a:40:
                    b1:0d:06:0c:ac:49:c3:6e:4b:55:bd:fb:8a:ad:34:
                    68:c8:38:ee:71:ed:37:c3:84:8e:ef:d2:85:04:fe:
                    85:d8:1e:f2:a3:fa:48:c4:f1:5c:b9:1c:9c:25:dd:
                    87:5a:4b:98:62:a5:9c:4d:1d:b2:9d:24:f7:fc:4a:
                    05:ec:14:2d:34:c8:44:ae:55:06:24:d2:ca:96:f1:
                    ac:1c:42:d6:87:d0:fb:15:4f:99:80:44:6e:9c:96:
                    ec:0d:9a:f8:c1:9f:c1:9f:61:a8:df:d4:40:ec:fd:
                    2a:ec:30:e4:37:8f:18:1d:d2:04:b7:8f:97:62:e4:
                    99:be:99:aa:8f:bc:ec:a5:34:cb:d1:a3:b3:3b:19:
                    bb:15:75:ca:f8:0b:5b:54:2f:55:7b:aa:f3:b4:d1:
                    9a:07:0b:97:7b:85:72:ac:44:29:c8:47:94:07:f4:
                    11:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:70:70:D1:E6:AC:CA:2C:B8:44:0A:A9:28:0A:DA:2C:F2:96:FA:D5
            X509v3 Authority Key Identifier:
                keyid:22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/3130332e3130372e38342e302f32342d3234203d3e20313336383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.107.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:c5:5f:b0:c0:2e:92:86:7c:4d:cf:d5:4a:b5:ef:a0:cc:83:
         fa:fd:10:d2:dc:9d:67:8d:39:5f:40:bc:a4:9c:2a:9b:7d:83:
         96:bf:fd:b6:dd:3f:94:5c:a4:24:5a:98:ef:eb:12:9f:34:db:
         ba:af:9e:2c:e1:99:0d:f1:12:c0:09:23:ae:06:7e:c0:86:3b:
         d0:c9:d6:40:1d:45:4e:bd:33:24:2a:91:dc:ed:9e:c5:5e:d3:
         8f:d0:05:e1:bd:c6:ec:16:d9:fb:3a:e1:b6:03:b9:c6:0b:8f:
         1c:0a:32:04:e4:9b:97:d0:55:fe:8d:df:f5:09:85:97:8b:94:
         06:d0:27:2e:b8:35:49:af:28:b9:ab:d8:fb:f1:e3:b9:01:79:
         56:21:ee:6c:4e:95:6b:c8:a3:42:03:f8:4b:89:2a:7c:cf:25:
         94:81:18:ff:c2:07:77:01:0f:29:8c:aa:a2:0a:40:4b:64:76:
         63:e0:5c:28:60:17:35:0c:54:44:d2:49:91:cd:37:fc:23:de:
         26:0d:8d:e4:f3:dc:8f:e3:b2:34:c3:b1:b8:38:51:40:05:7f:
         55:ab:74:b9:92:df:23:05:61:f5:30:f1:a8:16:c7:88:7d:ce:
         1a:4c:f6:cb:14:53:e6:36:fb:ab:db:cd:15:c8:a4:c1:34:26:
         79:04:31:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:24 2025 by rpki-client on console.sobornost.net