Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/3130332e3137342e39302e302f32332d3234203d3e203338333230.roa
File:                     3130332e3137342e39302e302f32332d3234203d3e203338333230.roa (raw, json)
Hash identifier:          qWPS0N/te+MWks31pquZu9fK7Gl6gv7U+N0yk9Foipw=
Subject key identifier:   C4:71:D2:15:EA:AB:04:E1:90:0F:93:CF:9F:64:9A:69:85:5C:73:0A
Certificate issuer:       /CN=9B77D523EDC2218C65DAB55B4538140243B7E862
Certificate serial:       2F9A6E719CDBEA29C1F982E4EB6180F3867AB21E
Authority key identifier: 9B:77:D5:23:ED:C2:21:8C:65:DA:B5:5B:45:38:14:02:43:B7:E8:62
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B77D523EDC2218C65DAB55B4538140243B7E862.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/3130332e3137342e39302e302f32332d3234203d3e203338333230.roa
Signing time:             Thu 17 Apr 2025 04:02:20 +0000
ROA not before:           Thu 17 Apr 2025 03:57:20 +0000
ROA not after:            Thu 16 Apr 2026 04:02:20 +0000
asID:                     38320
IP address blocks:        103.174.90.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.crl
                          rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B77D523EDC2218C65DAB55B4538140243B7E862.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 07:15:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:9a:6e:71:9c:db:ea:29:c1:f9:82:e4:eb:61:80:f3:86:7a:b2:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B77D523EDC2218C65DAB55B4538140243B7E862
        Validity
            Not Before: Apr 17 03:57:20 2025 GMT
            Not After : Apr 16 04:02:20 2026 GMT
        Subject: CN=C471D215EAAB04E1900F93CF9F649A69855C730A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:85:29:d4:a3:21:a7:53:df:2e:32:cd:3f:76:
                    da:0c:78:08:d9:bb:1f:fe:dd:db:71:50:b0:60:bd:
                    bf:c3:d9:7c:e3:45:78:d2:55:b1:36:17:63:0e:e1:
                    db:db:af:5a:15:4a:26:82:79:5f:34:bf:f5:f1:c5:
                    18:46:8f:bb:0b:5e:60:99:1b:a0:7f:1f:7b:d8:d8:
                    ce:c5:6a:ec:72:63:ae:5d:38:75:8e:c2:d8:15:78:
                    0b:1e:2b:57:34:4a:d5:b8:e9:22:a9:3a:58:12:6f:
                    b7:fd:e1:e8:87:2b:49:5c:7f:11:6d:c3:20:73:b6:
                    12:9e:6d:c5:b8:a8:8a:19:2e:d5:e7:2c:a5:ea:73:
                    99:4e:5f:e2:1b:ff:ef:7b:3e:44:e0:0d:d2:42:04:
                    af:0f:7f:a9:ac:11:bf:c3:76:5f:87:25:69:09:97:
                    4c:80:27:ec:42:60:a6:9d:3e:75:1a:5c:80:ef:30:
                    5a:c4:cb:b8:35:01:21:c0:8d:09:94:e8:6d:82:d0:
                    46:0e:c9:e4:5f:0e:88:6c:93:9f:bb:25:f7:a4:52:
                    3f:79:f4:30:36:06:0b:98:cb:f6:2d:be:5b:6e:4e:
                    1e:e0:87:e7:e1:70:95:51:1c:9c:7d:58:d5:7b:1e:
                    e0:2f:49:1f:da:67:37:39:68:dd:c8:73:85:f0:e3:
                    5f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:71:D2:15:EA:AB:04:E1:90:0F:93:CF:9F:64:9A:69:85:5C:73:0A
            X509v3 Authority Key Identifier:
                keyid:9B:77:D5:23:ED:C2:21:8C:65:DA:B5:5B:45:38:14:02:43:B7:E8:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/9B77D523EDC2218C65DAB55B4538140243B7E862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B77D523EDC2218C65DAB55B4538140243B7E862.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c350f078-c535-4f8e-960f-32c1623aa4b1/0/3130332e3137342e39302e302f32332d3234203d3e203338333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:d5:bb:d9:7d:6c:4a:5c:32:49:7d:13:fe:c4:2b:3f:a0:b2:
         f4:8d:e3:44:27:cc:bd:0d:0c:a1:e4:fd:d8:89:99:6b:d6:ac:
         f4:d6:64:9b:81:d0:bb:67:96:d9:34:41:17:b8:c5:ca:55:ed:
         1d:da:77:38:21:d8:03:30:e4:2a:5a:51:e9:0a:03:55:f2:bb:
         ae:f3:9e:4f:c8:ce:d2:5c:8a:84:76:8a:70:74:1f:8c:6a:b5:
         8a:82:6e:b7:fc:cc:18:78:88:9a:89:37:fc:8d:ac:5b:48:fb:
         cf:3a:f2:1c:14:26:90:fe:f9:24:95:f0:d1:e7:f1:19:f6:78:
         a2:88:40:9b:7d:70:74:bd:7c:1c:df:99:7d:cd:e7:b0:d4:2b:
         43:2c:5c:b6:5f:88:ac:8f:7d:8a:33:5a:81:a4:1b:13:53:65:
         ec:b4:75:d8:1a:11:bb:cf:7f:e9:17:6b:36:2f:24:f3:11:50:
         92:ef:56:a1:e9:fa:91:d5:f5:0f:e0:e2:e2:b2:4b:d3:75:9f:
         15:47:af:f3:b9:42:2d:a1:1c:45:2c:f5:73:ab:35:4d:08:ad:
         e8:a6:6e:d5:a8:35:4b:93:d5:ed:5f:d1:ef:72:89:81:10:4e:
         b3:70:07:25:41:db:73:b9:30:c0:7c:75:d4:5c:08:16:17:f7:
         f0:83:e3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:13:45 2025 by rpki-client on console.sobornost.net