Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/3130332e3135352e3139332e302f32342d3234203d3e20313431303639.roa
File:                     3130332e3135352e3139332e302f32342d3234203d3e20313431303639.roa (raw, json)
Hash identifier:          SFmXn9PezsJj2J+n/KO+JoUR1XmcH1D+ZwQywLjd4NQ=
Subject key identifier:   5D:29:85:EA:4A:CA:2C:79:AA:01:6A:DC:78:B7:D9:D3:D9:47:B7:7F
Certificate issuer:       /CN=98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA
Certificate serial:       49373D3EEB79C40D54ACA9B08440992E2E9EBCC2
Authority key identifier: 98:FF:48:FF:AD:3C:C9:E9:87:8D:3F:A7:4E:0E:EA:79:CA:13:F0:FA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/3130332e3135352e3139332e302f32342d3234203d3e20313431303639.roa
Signing time:             Mon 03 Mar 2025 20:00:00 +0000
ROA not before:           Mon 03 Mar 2025 19:55:00 +0000
ROA not after:            Mon 02 Mar 2026 20:00:00 +0000
asID:                     141069
IP address blocks:        103.155.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.crl
                          rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 09:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:37:3d:3e:eb:79:c4:0d:54:ac:a9:b0:84:40:99:2e:2e:9e:bc:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA
        Validity
            Not Before: Mar  3 19:55:00 2025 GMT
            Not After : Mar  2 20:00:00 2026 GMT
        Subject: CN=5D2985EA4ACA2C79AA016ADC78B7D9D3D947B77F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3b:56:60:3f:63:de:4f:d9:10:ee:a7:d8:99:
                    9d:81:17:60:df:97:b0:98:eb:cd:fd:8d:55:e0:60:
                    27:0b:f9:f0:33:73:91:4f:cd:18:0c:d7:89:0e:23:
                    8a:12:4b:c4:82:97:ae:b6:3b:c5:3f:96:e1:19:3b:
                    4b:41:e6:f6:01:3c:a0:9d:84:39:d2:97:e1:cf:b0:
                    e2:a6:7e:91:08:7c:f1:d2:3f:18:c3:87:cc:40:1e:
                    b1:ca:6b:ac:53:af:40:38:19:cb:f4:3d:35:ef:6f:
                    82:e8:8f:1d:d2:d1:eb:b7:9d:be:05:4a:67:1b:cd:
                    2b:0b:79:32:c8:50:a7:d6:40:4b:62:33:fe:d8:b7:
                    90:23:dd:9e:0c:f4:da:69:5f:57:ef:05:6b:5d:af:
                    12:95:2e:a6:e5:5d:fb:55:51:3d:b7:d3:c5:ac:b3:
                    c1:52:86:05:a2:07:36:1a:fb:5f:b7:df:52:d4:77:
                    f6:2d:97:f7:94:ce:bb:4b:1b:f5:1e:13:43:99:29:
                    9d:80:30:9f:e1:b9:e7:44:55:87:d1:32:d6:89:0f:
                    74:34:e9:d3:67:75:20:4f:09:72:c3:ab:cf:2b:74:
                    84:89:2d:bb:22:8d:0c:34:0a:ef:f2:9d:1b:82:06:
                    b7:cb:33:03:bb:11:cf:42:c4:6c:a0:6c:79:16:11:
                    ad:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:29:85:EA:4A:CA:2C:79:AA:01:6A:DC:78:B7:D9:D3:D9:47:B7:7F
            X509v3 Authority Key Identifier:
                keyid:98:FF:48:FF:AD:3C:C9:E9:87:8D:3F:A7:4E:0E:EA:79:CA:13:F0:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98FF48FFAD3CC9E9878D3FA74E0EEA79CA13F0FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b450d956-9b00-46c1-a631-3564e186a079/0/3130332e3135352e3139332e302f32342d3234203d3e20313431303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:a8:42:ac:40:fa:34:5c:e5:c6:57:9f:88:c8:f9:76:3e:b2:
         6e:de:92:31:e1:38:ac:43:73:ee:74:e5:7f:78:f0:43:cd:ab:
         96:c4:38:1d:5d:c6:ac:ec:bc:96:cc:9f:05:b4:b5:48:57:9f:
         b6:d2:84:d7:7b:02:86:2a:07:f3:26:ec:bf:6e:66:46:46:04:
         21:f0:0f:57:cd:79:db:49:7d:7e:d6:c3:62:af:9a:42:3d:bf:
         6d:95:f5:0e:10:af:f3:0e:8f:37:0e:8d:f9:16:f5:cf:e3:fa:
         d1:ee:58:75:5a:c3:92:1e:db:30:55:7b:35:36:4a:99:c8:bd:
         24:93:35:00:bf:35:eb:44:73:1a:61:6b:b7:2c:dc:6b:19:93:
         29:27:fe:cd:d9:e2:52:ff:19:b1:e6:af:6a:28:d3:82:f4:33:
         f4:b0:a5:f7:dc:c1:9e:d2:ae:3c:af:b3:72:46:ec:d1:86:0e:
         1c:43:cb:42:de:6b:c4:44:ad:cb:4d:cf:7a:1e:a4:09:cb:61:
         01:22:4a:d4:fe:91:36:a5:90:b0:b8:ef:8f:43:fa:b4:8c:95:
         ab:35:87:12:59:5c:c6:cd:b9:ef:20:a8:d4:7e:60:dc:8f:c4:
         5e:d9:ce:6c:54:e7:28:d6:98:c1:59:0a:05:e4:10:71:f2:7e:
         2f:cc:41:98
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUSTc9Put5xA1UrKmwhECZLi6evMIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOThGRjQ4RkZBRDNDQzlFOTg3OEQzRkE3NEUwRUVBNzlD
QTEzRjBGQTAeFw0yNTAzMDMxOTU1MDBaFw0yNjAzMDIyMDAwMDBaMDMxMTAvBgNV
BAMTKDVEMjk4NUVBNEFDQTJDNzlBQTAxNkFEQzc4QjdEOUQzRDk0N0I3N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7O1ZgP2PeT9kQ7qfYmZ2BF2Df
l7CY6839jVXgYCcL+fAzc5FPzRgM14kOI4oSS8SCl662O8U/luEZO0tB5vYBPKCd
hDnSl+HPsOKmfpEIfPHSPxjDh8xAHrHKa6xTr0A4Gcv0PTXvb4Lojx3S0eu3nb4F
SmcbzSsLeTLIUKfWQEtiM/7Yt5Aj3Z4M9NppX1fvBWtdrxKVLqblXftVUT2308Ws
s8FShgWiBzYa+1+331LUd/Ytl/eUzrtLG/UeE0OZKZ2AMJ/huedEVYfRMtaJD3Q0
6dNndSBPCXLDq88rdISJLbsijQw0Cu/ynRuCBrfLMwO7Ec9CxGygbHkWEa2fAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUXSmF6krKLHmqAWrceLfZ09lHt38wHwYDVR0j
BBgwFoAUmP9I/608yemHjT+nTg7qecoT8PowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
NDUwZDk1Ni05YjAwLTQ2YzEtYTYzMS0zNTY0ZTE4NmEwNzkvMC85OEZGNDhGRkFE
M0NDOUU5ODc4RDNGQTc0RTBFRUE3OUNBMTNGMEZBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOThGRjQ4RkZBRDNDQzlFOTg3OEQzRkE3NEUwRUVBNzlDQTEz
RjBGQS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I0NTBkOTU2LTliMDAtNDZjMS1h
NjMxLTM1NjRlMTg2YTA3OS8wLzMxMzAzMzJlMzEzNTM1MmUzMTM5MzMyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzMDM2Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnm8EwDQYJ
KoZIhvcNAQELBQADggEBADeoQqxA+jRc5cZXn4jI+XY+sm7ekjHhOKxDc+505X94
8EPNq5bEOB1dxqzsvJbMnwW0tUhXn7bShNd7AoYqB/Mm7L9uZkZGBCHwD1fNedtJ
fX7Ww2KvmkI9v22V9Q4Qr/MOjzcOjfkW9c/j+tHuWHVaw5Ie2zBVezU2SpnIvSST
NQC/NetEcxpha7cs3GsZkykn/s3Z4lL/GbHmr2oo04L0M/SwpffcwZ7Srjyvs3JG
7NGGDhxDy0Lea8RErctNz3oepAnLYQEiStT+kTalkLC4749D+rSMlas1hxJZXMbN
ue8gqNR+YNyPxF7ZzmxU5yjWmMFZCgXkEHHyfi/MQZg=
-----END CERTIFICATE-----
Generated at Sat Apr 26 11:16:29 2025 by rpki-client on console.sobornost.net