Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3130332e342e302e302f32322d3234203d3e203138303539.roa
File:                     3130332e342e302e302f32322d3234203d3e203138303539.roa (raw, json)
Hash identifier:          INi7FnCIb/4Lxm37ZYMrmJ1N+zqOvvowoprwhJga77k=
Subject key identifier:   CF:C6:DB:9E:0E:95:C9:69:4D:CB:12:B6:81:70:31:15:D3:24:E2:87
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       6F78EAFA07E3D3B3A3C2CFD884C575DD6E9E9EA3
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3130332e342e302e302f32322d3234203d3e203138303539.roa
Signing time:             Fri 21 Mar 2025 09:02:23 +0000
ROA not before:           Fri 21 Mar 2025 08:57:23 +0000
ROA not after:            Fri 20 Mar 2026 09:02:23 +0000
asID:                     18059
IP address blocks:        103.4.0.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 08:10:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:78:ea:fa:07:e3:d3:b3:a3:c2:cf:d8:84:c5:75:dd:6e:9e:9e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Mar 21 08:57:23 2025 GMT
            Not After : Mar 20 09:02:23 2026 GMT
        Subject: CN=CFC6DB9E0E95C9694DCB12B681703115D324E287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:aa:cb:18:3e:cd:81:5c:2d:00:ef:35:16:02:
                    4b:9d:c8:cf:f1:40:8c:c7:fd:c0:d2:52:7e:05:ef:
                    49:75:ff:fa:03:0a:e9:05:71:86:f2:f4:1e:3d:f0:
                    62:60:43:f5:f2:ad:41:38:a6:12:e4:07:39:1d:2a:
                    c0:39:ec:13:92:7c:b4:72:b9:6e:2b:c4:98:34:04:
                    be:d8:c7:13:bd:1b:ad:e3:ae:52:4b:4d:e4:91:93:
                    82:f8:06:8f:50:4b:d5:84:24:18:0f:5a:f8:c3:ad:
                    b2:dc:fa:d3:20:f7:22:02:30:bb:24:a4:38:50:99:
                    4b:15:61:07:70:a9:92:4b:5f:9a:ff:be:23:c4:f7:
                    b4:87:b6:42:9d:7a:a4:57:8c:08:84:42:a7:1a:51:
                    c3:8b:de:f8:93:22:7f:fa:8b:f2:e1:c1:75:62:55:
                    55:1a:9c:14:9b:ca:24:28:d6:54:90:95:c4:4f:2d:
                    0f:0e:12:b5:94:9b:0a:cb:63:6a:a0:18:42:f1:ba:
                    a7:a0:8f:64:f3:e9:1d:25:50:a1:60:99:7e:56:72:
                    ae:68:5d:1e:62:27:66:bb:9e:d6:34:9d:be:16:d7:
                    fe:97:69:e4:13:19:e4:6c:48:1f:33:9e:70:bb:aa:
                    2c:64:73:cb:1a:1c:90:fb:12:d2:96:d1:a4:c6:89:
                    fb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C6:DB:9E:0E:95:C9:69:4D:CB:12:B6:81:70:31:15:D3:24:E2:87
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3130332e342e302e302f32322d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:d1:fe:53:09:85:a0:94:db:b6:1b:16:4a:9e:33:6e:5b:53:
         6f:16:7d:ce:c4:db:a9:ab:bb:cb:d7:3d:33:05:f0:2b:dd:35:
         5f:eb:b4:df:ef:3e:ec:dd:70:2b:6f:63:64:49:51:49:55:30:
         26:ce:8e:fb:f6:ae:da:bb:fc:0b:f8:a1:da:57:f1:6d:f2:99:
         77:68:31:67:a0:bd:c1:f1:e7:0d:df:02:5d:7b:ac:ad:bb:a9:
         60:ea:84:68:39:c8:58:b9:cd:d8:74:ec:19:16:a1:76:54:53:
         20:af:fb:55:e7:67:1b:2c:3f:3c:08:17:a8:6e:d9:37:5f:3f:
         b7:03:f7:3e:aa:74:6d:ab:cf:3b:90:9f:da:36:06:de:87:3b:
         67:9d:33:d9:1a:03:d5:68:8e:77:8a:a5:d2:b1:1d:cd:7f:24:
         a3:8f:20:34:be:a1:b2:5f:d1:2f:d7:ff:0e:d4:2a:5c:da:35:
         f9:26:42:59:77:0f:31:69:11:24:fa:67:de:64:e7:f6:7b:8a:
         a0:3c:13:c4:67:1d:83:ff:de:d9:80:93:c4:ee:53:cf:2d:bd:
         1f:5e:cf:40:7e:a7:61:74:c8:66:27:3a:3f:2a:e0:1c:f5:01:
         be:42:1b:b2:5c:da:fd:6f:02:c5:5b:77:ad:5e:de:b0:6b:0d:
         51:3d:8e:5f
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIUb3jq+gfj07Ojws/YhMV13W6enqMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2
QzhBMUQ4RTAeFw0yNTAzMjEwODU3MjNaFw0yNjAzMjAwOTAyMjNaMDMxMTAvBgNV
BAMTKENGQzZEQjlFMEU5NUM5Njk0RENCMTJCNjgxNzAzMTE1RDMyNEUyODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTqssYPs2BXC0A7zUWAkudyM/x
QIzH/cDSUn4F70l1//oDCukFcYby9B498GJgQ/XyrUE4phLkBzkdKsA57BOSfLRy
uW4rxJg0BL7YxxO9G63jrlJLTeSRk4L4Bo9QS9WEJBgPWvjDrbLc+tMg9yICMLsk
pDhQmUsVYQdwqZJLX5r/viPE97SHtkKdeqRXjAiEQqcaUcOL3viTIn/6i/LhwXVi
VVUanBSbyiQo1lSQlcRPLQ8OErWUmwrLY2qgGELxuqegj2Tz6R0lUKFgmX5Wcq5o
XR5iJ2a7ntY0nb4W1/6XaeQTGeRsSB8znnC7qixkc8saHJD7EtKW0aTGifsdAgMB
AAGjggIrMIICJzAdBgNVHQ4EFgQUz8bbng6VyWlNyxK2gXAxFdMk4ocwHwYDVR0j
BBgwFoAUgohBUaUoP0PKl84azpWlHGyKHY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
MjgzNjc2My0xMmI2LTRkOGYtYWQwYi00Y2Q1YjYxOTU5ZWYvMC84Mjg4NDE1MUE1
MjgzRjQzQ0E5N0NFMUFDRTk1QTUxQzZDOEExRDhFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2QzhB
MUQ4RS5jZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzI4MzY3NjMtMTJiNi00ZDhmLWFk
MGItNGNkNWI2MTk1OWVmLzAvMzEzMDMzMmUzNDJlMzAyZTMwMmYzMjMyMmQzMjM0
MjAzZDNlMjAzMTM4MzAzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZwQAMA0GCSqGSIb3DQEBCwUA
A4IBAQCC0f5TCYWglNu2GxZKnjNuW1NvFn3OxNupq7vL1z0zBfAr3TVf67Tf7z7s
3XArb2NkSVFJVTAmzo779q7au/wL+KHaV/Ft8pl3aDFnoL3B8ecN3wJde6ytu6lg
6oRoOchYuc3YdOwZFqF2VFMgr/tV52cbLD88CBeobtk3Xz+3A/c+qnRtq887kJ/a
NgbehztnnTPZGgPVaI53iqXSsR3NfySjjyA0vqGyX9Ev1/8O1Cpc2jX5JkJZdw8x
aREk+mfeZOf2e4qgPBPEZx2D/97ZgJPE7lPPLb0fXs9AfqdhdMhmJzo/KuAc9QG+
QhuyXNr9bwLFW3etXt6waw1RPY5f
-----END CERTIFICATE-----
Generated at Thu Apr 24 04:31:50 2025 by rpki-client on console.sobornost.net