Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/3130332e3138342e31382e302f32332d3233203d3e20313439363735.roa
File:                     3130332e3138342e31382e302f32332d3233203d3e20313439363735.roa (raw, json)
Hash identifier:          8hPXkuW34xkK66/r5oL+jYYUmOueTjKMrZh36goENDw=
Subject key identifier:   5F:65:82:66:F0:C4:AF:82:BB:F8:1B:A3:0E:13:09:36:02:03:30:43
Certificate issuer:       /CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B
Certificate serial:       4F67DC9BEDBC6A2B3836789FB8FAF630E4C3F9A1
Authority key identifier: 5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/3130332e3138342e31382e302f32332d3233203d3e20313439363735.roa
Signing time:             Tue 08 Apr 2025 10:00:02 +0000
ROA not before:           Tue 08 Apr 2025 09:55:02 +0000
ROA not after:            Tue 07 Apr 2026 10:00:02 +0000
asID:                     149675
IP address blocks:        103.184.18.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl
                          rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 17:17:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:67:dc:9b:ed:bc:6a:2b:38:36:78:9f:b8:fa:f6:30:e4:c3:f9:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B
        Validity
            Not Before: Apr  8 09:55:02 2025 GMT
            Not After : Apr  7 10:00:02 2026 GMT
        Subject: CN=5F658266F0C4AF82BBF81BA30E13093602033043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:85:2a:9f:d1:b7:9d:9a:ce:bc:e0:d8:5d:e9:
                    64:14:32:54:c6:8f:51:3b:33:ac:d9:b1:c7:41:3f:
                    b6:40:56:da:1c:ba:72:d7:6d:1e:b0:e3:a8:02:3c:
                    cb:b2:62:31:60:46:4a:c1:f3:69:8a:d2:67:08:ed:
                    cb:27:bb:69:ca:5d:43:47:bf:41:6c:d7:f9:90:1e:
                    3c:39:67:46:79:db:d7:5e:73:0e:05:6d:25:3e:c1:
                    2c:c5:8c:86:04:8d:cd:ed:8a:3b:f5:c8:61:64:4a:
                    9b:c5:38:a3:a4:5a:ef:88:41:55:72:99:e6:1b:39:
                    f9:fe:0a:00:45:4a:8e:b7:0b:c7:2c:07:05:1b:28:
                    5b:a7:1b:fb:98:d3:c2:1f:36:e5:52:43:1a:c9:b4:
                    12:67:24:44:c5:19:f0:b1:75:fa:d8:af:81:0c:10:
                    b4:88:fe:f3:44:35:4b:e3:0f:68:f3:8d:c3:6d:79:
                    ce:41:5f:8e:f8:69:40:45:94:7f:26:2b:d1:c6:51:
                    81:85:96:5f:2c:db:d6:d2:a4:19:9d:9a:42:db:53:
                    ea:a8:67:7a:22:74:ff:d2:f9:cc:bb:18:ec:d2:0b:
                    7e:c8:26:dc:ea:97:ee:25:f7:18:9a:0b:54:43:f4:
                    8d:9a:8c:c8:d3:f8:9b:2a:4f:d0:1e:2f:19:f7:fc:
                    5a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:65:82:66:F0:C4:AF:82:BB:F8:1B:A3:0E:13:09:36:02:03:30:43
            X509v3 Authority Key Identifier:
                keyid:5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/3130332e3138342e31382e302f32332d3233203d3e20313439363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:d5:88:e3:05:ae:36:9f:a6:05:e7:41:db:2f:62:7d:c7:d9:
         02:fc:ea:d5:3e:16:43:57:f9:2d:c7:7e:63:76:c0:fc:9e:1e:
         cd:88:0a:b3:38:78:2e:55:9a:a4:45:f3:34:4d:01:6a:bc:b8:
         18:07:3e:3b:4e:79:4e:09:d1:b6:2b:f1:73:8c:b2:92:87:71:
         38:69:1e:e3:5e:f3:57:18:36:cd:92:22:62:5d:fb:14:90:6f:
         dc:b0:d1:28:3a:40:e6:b0:74:d5:28:92:b4:91:be:79:3a:fa:
         2c:ac:fb:c6:df:f3:35:db:19:8f:d3:f0:f5:8f:c4:e8:e4:3f:
         77:76:14:57:cb:85:1e:d0:c4:00:48:e5:1a:a2:cb:bb:70:95:
         af:8c:ed:bc:d0:49:ca:05:af:df:c6:11:47:ed:2b:b9:28:35:
         0e:8f:c4:00:67:f0:a1:d8:d9:cc:80:e0:37:ff:f5:4e:12:b3:
         d4:64:17:85:04:67:41:67:7d:53:af:4e:0a:81:31:05:b4:0c:
         f0:4b:63:c4:b3:75:80:3b:9c:0a:9d:1e:c2:7b:84:47:f7:b7:
         76:ff:df:b7:dc:65:be:88:19:e9:66:a7:f6:78:9f:2e:11:e1:
         41:ba:85:bc:ba:80:b2:d1:59:01:29:e5:ca:e7:5b:bc:4b:4a:
         5d:58:f0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 13:39:00 2025 by rpki-client on console.sobornost.net