Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/3130332e3138342e31382e302f32342d3234203d3e20313439363735.roa
File:                     3130332e3138342e31382e302f32342d3234203d3e20313439363735.roa (raw, json)
Hash identifier:          4BUtx10alv/ZZ9FJolZJ3I8WhlB5v1F5iKW6alQrr7c=
Subject key identifier:   C3:DA:B6:B7:5A:AE:73:54:47:B1:4F:8C:B5:0E:0D:D0:9A:9C:C9:7F
Certificate issuer:       /CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B
Certificate serial:       30D2B5FD23D7B795CF398911F829C3318F494057
Authority key identifier: 5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/3130332e3138342e31382e302f32342d3234203d3e20313439363735.roa
Signing time:             Tue 08 Apr 2025 10:00:02 +0000
ROA not before:           Tue 08 Apr 2025 09:55:02 +0000
ROA not after:            Tue 07 Apr 2026 10:00:02 +0000
asID:                     149675
IP address blocks:        103.184.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl
                          rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 17:17:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:d2:b5:fd:23:d7:b7:95:cf:39:89:11:f8:29:c3:31:8f:49:40:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B
        Validity
            Not Before: Apr  8 09:55:02 2025 GMT
            Not After : Apr  7 10:00:02 2026 GMT
        Subject: CN=C3DAB6B75AAE735447B14F8CB50E0DD09A9CC97F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:61:43:83:d4:ac:03:a9:7a:03:d7:67:f4:aa:
                    59:ae:dd:ec:54:c4:62:30:61:8b:04:04:13:74:53:
                    30:96:87:cc:a8:c0:97:2c:77:66:24:75:e4:79:e1:
                    7c:aa:34:2a:6e:ca:ba:01:2e:49:bd:18:07:35:ad:
                    8e:8a:0e:d8:70:90:f0:8f:d7:72:36:37:74:62:bb:
                    41:65:69:91:b0:c1:1e:ec:6a:14:2b:e9:a2:38:a6:
                    32:c2:cd:2e:cb:6a:78:45:08:a9:2c:75:05:05:0f:
                    b8:5d:cf:4d:2e:86:95:cf:1d:df:38:a9:e9:8e:94:
                    87:2f:07:fa:66:a6:e3:35:e1:d5:3b:b2:5d:8c:5b:
                    75:b1:9e:66:2d:a8:cc:d5:3f:6b:5a:4e:20:dc:b3:
                    cf:9e:e2:31:b7:0e:a1:e3:7f:f6:7c:66:7e:57:eb:
                    5e:e5:2a:1e:ab:88:ee:a0:c9:4a:37:5e:05:ce:59:
                    26:0b:5f:9f:6f:97:8a:02:de:4f:1b:3a:09:2f:f2:
                    0b:ac:4b:62:04:e2:d6:a8:b6:1a:9a:c7:01:44:eb:
                    f1:c9:10:3a:a3:9f:9c:2d:8c:09:0f:92:44:e1:3d:
                    fe:81:5a:f8:b2:28:e8:ea:ea:88:c0:8f:c2:e9:37:
                    a9:05:88:e9:92:a6:37:f4:b8:e4:37:bb:49:ba:89:
                    e9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:DA:B6:B7:5A:AE:73:54:47:B1:4F:8C:B5:0E:0D:D0:9A:9C:C9:7F
            X509v3 Authority Key Identifier:
                keyid:5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/3130332e3138342e31382e302f32342d3234203d3e20313439363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:f4:10:7a:28:ed:d2:97:6e:5e:e2:1b:95:f2:1e:42:a5:0e:
         bb:65:81:24:a8:96:ca:54:1e:14:3b:77:65:5b:73:70:36:10:
         15:91:82:39:d3:18:0e:e0:1f:fd:37:1a:fd:25:4d:a3:47:73:
         7e:1d:8e:5a:ea:12:49:5d:0b:a4:fe:59:0e:9e:42:bd:f5:db:
         03:30:66:5e:e8:8b:2d:50:d0:59:cc:5e:6c:ca:54:14:8b:66:
         fd:fd:2a:51:48:b0:17:1f:07:e0:6f:60:f5:af:00:03:87:90:
         d0:ea:fb:02:8c:b6:a3:a6:16:d7:f3:ca:f5:eb:ec:63:8d:c5:
         c5:e5:14:3f:02:78:47:da:02:ef:fd:f2:19:fc:a7:38:bb:bd:
         8b:76:b5:68:8b:4f:ac:48:83:25:85:ea:03:3f:40:7b:1f:c2:
         11:10:4f:c1:8c:db:ac:a0:ec:26:46:42:a7:2e:13:26:c6:c4:
         52:63:96:1d:49:89:f2:16:40:b5:93:52:00:e9:a4:24:81:6e:
         5c:83:ec:75:17:1a:9b:7a:15:4e:f4:00:b8:d6:02:9d:fd:b6:
         37:3f:73:3b:1c:9b:c9:78:8b:6d:d3:24:a6:a6:6b:83:9c:20:
         c2:b9:88:5f:1b:9d:97:d2:4f:8a:44:51:f8:b5:70:78:54:82:
         57:13:5c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 13:39:00 2025 by rpki-client on console.sobornost.net