Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/3130332e37362e3230342e302f32342d3234203d3e20313335343833.roa
File:                     3130332e37362e3230342e302f32342d3234203d3e20313335343833.roa (raw, json)
Hash identifier:          UNQHXefmTjjZzqKDptBY5GSq3NLUfCppyUbcC2Dn3FU=
Subject key identifier:   46:6E:99:48:64:76:F6:60:0C:88:0B:6E:01:E4:E9:5F:14:5C:F6:9C
Certificate issuer:       /CN=F9D638DDA6C754F5CF82A174AE82F94D51E5E326
Certificate serial:       6CA076DF7A90300D095EE7D2D048A705FE158E5E
Authority key identifier: F9:D6:38:DD:A6:C7:54:F5:CF:82:A1:74:AE:82:F9:4D:51:E5:E3:26
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/3130332e37362e3230342e302f32342d3234203d3e20313335343833.roa
Signing time:             Tue 25 Mar 2025 09:02:24 +0000
ROA not before:           Tue 25 Mar 2025 08:57:24 +0000
ROA not after:            Tue 24 Mar 2026 09:02:24 +0000
asID:                     135483
IP address blocks:        103.76.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl
                          rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 18:18:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:a0:76:df:7a:90:30:0d:09:5e:e7:d2:d0:48:a7:05:fe:15:8e:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9D638DDA6C754F5CF82A174AE82F94D51E5E326
        Validity
            Not Before: Mar 25 08:57:24 2025 GMT
            Not After : Mar 24 09:02:24 2026 GMT
        Subject: CN=466E99486476F6600C880B6E01E4E95F145CF69C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c3:6f:c3:a0:a3:5b:1b:b7:e5:51:05:f5:53:
                    14:fc:eb:32:9e:16:82:d2:8e:a8:27:12:ad:08:d2:
                    31:0d:b1:76:14:62:9b:44:1b:6a:99:ce:7b:97:a1:
                    c4:0b:cb:93:23:c3:09:a7:1f:f8:5d:2a:70:e1:09:
                    c1:3b:9b:6d:91:96:2a:0d:a3:d4:42:3d:25:35:2d:
                    26:63:63:0c:00:06:5c:7b:e2:54:e1:38:4e:bd:e4:
                    f9:e9:7a:9e:1e:b8:46:ae:f3:d1:c7:a3:c9:c0:17:
                    e4:bd:4a:79:8a:ce:e6:5f:8f:e9:2b:eb:75:6c:d4:
                    9c:c7:3e:d0:d6:56:cb:63:85:68:07:1b:1f:d3:3f:
                    a1:35:c5:c1:82:a0:dc:4e:97:93:8a:9b:75:93:fa:
                    4e:22:db:50:db:9e:58:37:72:e1:f3:55:f0:2d:93:
                    33:08:b0:0f:6c:94:b8:45:5e:49:c0:b3:59:52:da:
                    40:0b:d2:55:d1:bf:29:1a:fa:24:09:8a:73:c0:d5:
                    2f:25:e4:2a:6e:ad:97:33:2c:3e:ca:3f:c8:13:a2:
                    60:2a:57:4a:c0:fd:95:55:2a:91:0d:ba:42:30:6e:
                    df:f3:37:7a:fa:df:fb:86:5b:97:8c:a3:d6:e3:ed:
                    a1:b5:f6:f6:2f:92:05:65:e9:49:2d:f9:42:42:68:
                    63:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:6E:99:48:64:76:F6:60:0C:88:0B:6E:01:E4:E9:5F:14:5C:F6:9C
            X509v3 Authority Key Identifier:
                keyid:F9:D6:38:DD:A6:C7:54:F5:CF:82:A1:74:AE:82:F9:4D:51:E5:E3:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/3130332e37362e3230342e302f32342d3234203d3e20313335343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.76.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:40:74:06:08:bf:b9:c9:b0:d9:0f:fd:86:42:d6:8d:30:bb:
         91:8e:06:09:b9:ab:df:b7:39:6e:59:b1:53:0b:29:1e:aa:ca:
         c5:6b:84:40:79:66:a8:55:88:65:0e:49:91:fe:cf:34:71:a5:
         ec:fa:0a:8d:14:15:da:a2:9e:2f:e9:ac:d5:37:5d:6d:3b:a8:
         8f:33:92:27:78:ec:2d:ef:97:d0:49:4a:9d:63:e9:5a:95:c7:
         49:30:b3:f0:69:fd:f3:18:0c:6b:58:81:cb:59:07:a8:44:8e:
         83:f7:ad:af:7f:92:e0:8e:c1:15:27:18:94:4c:ba:3a:44:94:
         a4:13:4b:75:a4:29:23:6c:32:e5:1d:87:a0:10:aa:0b:60:d5:
         92:e0:f6:cb:a7:72:f1:3b:66:9c:af:fb:ed:34:46:b4:7a:53:
         c1:0e:38:34:98:fc:ba:22:20:24:6b:b6:8e:fc:ef:46:7c:34:
         04:8f:24:6e:9f:66:07:30:47:87:25:1c:09:5d:6e:a8:d3:af:
         1f:00:f4:cc:af:ba:63:81:5f:83:53:b7:89:ed:36:3f:d0:9a:
         6f:87:27:74:2e:6d:74:ea:3a:39:8a:c4:6f:14:52:c1:74:8c:
         78:b8:a9:32:05:e1:41:55:bb:ea:8e:71:1a:84:1b:90:42:6b:
         05:42:29:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:23:50 2025 by rpki-client on console.sobornost.net