Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/3130332e3138362e3139322e302f32342d3234203d3e20313439393238.roa
File:                     3130332e3138362e3139322e302f32342d3234203d3e20313439393238.roa (raw, json)
Hash identifier:          t+CPpE2TC/5JImEcRiXdAKKegyxY7qwMPfKY4AYQh6I=
Subject key identifier:   73:19:4A:74:5C:C7:BC:58:9F:F4:3C:15:4E:0A:AB:19:63:74:82:59
Certificate issuer:       /CN=C447AFC4547DCF16A24E96FFB3A2FD98CA42796A
Certificate serial:       12E5FB33359A3669907F82A047EB687893CBBDBB
Authority key identifier: C4:47:AF:C4:54:7D:CF:16:A2:4E:96:FF:B3:A2:FD:98:CA:42:79:6A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/3130332e3138362e3139322e302f32342d3234203d3e20313439393238.roa
Signing time:             Tue 25 Feb 2025 12:11:23 +0000
ROA not before:           Tue 25 Feb 2025 12:06:23 +0000
ROA not after:            Tue 24 Feb 2026 12:11:23 +0000
asID:                     149928
IP address blocks:        103.186.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.crl
                          rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 12:29:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:e5:fb:33:35:9a:36:69:90:7f:82:a0:47:eb:68:78:93:cb:bd:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C447AFC4547DCF16A24E96FFB3A2FD98CA42796A
        Validity
            Not Before: Feb 25 12:06:23 2025 GMT
            Not After : Feb 24 12:11:23 2026 GMT
        Subject: CN=73194A745CC7BC589FF43C154E0AAB1963748259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8f:90:7a:42:36:4d:f4:09:57:3c:38:49:03:
                    52:56:00:66:92:c8:f2:5c:92:c0:5b:03:d8:82:dc:
                    96:22:1d:a8:92:b6:0a:f4:52:bc:15:78:4b:b1:f4:
                    af:50:51:20:3f:19:61:b6:34:e8:26:57:bb:9a:8f:
                    ca:85:44:96:6f:d9:cd:be:31:e6:b9:ce:3d:46:b6:
                    55:02:97:f3:36:62:0f:49:da:72:33:eb:85:a9:31:
                    bd:5e:7c:12:53:1d:80:08:b1:d1:c0:78:ac:f5:f8:
                    bf:73:f3:aa:6e:4c:6a:bb:99:f7:97:6b:e2:f2:f3:
                    c0:bf:76:51:eb:bd:fc:78:d9:a6:6e:f8:47:f3:4f:
                    54:28:f5:5e:57:43:a0:d5:39:16:c2:2d:79:14:95:
                    36:3c:11:c1:23:65:c8:7f:62:5e:58:8e:7a:d5:b9:
                    0f:f8:9d:4a:77:a9:03:b4:cc:bc:fc:57:4e:eb:22:
                    f8:f2:20:4b:83:9c:f6:c4:65:58:7a:be:42:d4:da:
                    98:5e:4e:e6:0e:c1:23:54:6e:11:3d:57:70:4b:75:
                    54:8b:6d:bc:f1:d0:93:4c:28:92:23:63:8f:dc:85:
                    e1:c7:a2:f3:f9:85:9f:5c:44:5b:dc:9d:48:87:f1:
                    82:03:da:c9:1f:da:fe:2e:30:38:6e:5e:c7:fb:a2:
                    49:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:19:4A:74:5C:C7:BC:58:9F:F4:3C:15:4E:0A:AB:19:63:74:82:59
            X509v3 Authority Key Identifier:
                keyid:C4:47:AF:C4:54:7D:CF:16:A2:4E:96:FF:B3:A2:FD:98:CA:42:79:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/3130332e3138362e3139322e302f32342d3234203d3e20313439393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:03:bf:12:ad:79:d2:08:71:e4:0d:2c:ef:ca:d3:13:f1:95:
         c4:ce:7a:ca:33:ac:fb:c5:77:6a:d0:8f:28:46:89:8c:e3:9e:
         b4:0e:09:69:05:db:1f:c9:7c:ee:49:29:df:32:e0:ff:12:44:
         27:d8:85:bf:f1:08:50:a0:cd:17:b0:2e:4d:16:75:ef:76:78:
         23:19:8b:b0:2d:d3:a2:2a:cb:d2:72:21:34:9f:4a:29:c9:58:
         84:dd:6e:2a:cb:ba:49:b6:68:6b:79:2b:4e:52:a7:db:bd:93:
         4d:af:fd:dc:b0:73:63:69:50:65:20:36:be:32:36:de:ee:d6:
         57:bb:d1:93:a0:ca:0c:7f:86:3e:60:85:cc:af:f5:32:8c:77:
         47:49:fc:48:e1:1e:28:de:50:21:fb:70:b2:27:ee:b0:a6:99:
         d1:8d:c9:25:8c:ae:4c:6b:0b:76:85:4d:6d:13:e8:7e:ba:3c:
         f1:fc:44:b8:fa:a7:73:81:9c:aa:2c:cf:02:56:a5:7c:91:47:
         3c:52:b5:ad:27:18:13:3e:f7:6c:32:8a:b3:a3:a9:7f:ab:7c:
         08:da:24:f5:4c:10:f7:95:dc:72:90:5a:40:d0:a9:9a:b5:68:
         c9:f9:bb:06:d2:4c:11:7f:a0:d0:4c:58:e0:dd:27:88:92:b2:
         98:df:20:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 13:25:44 2025 by rpki-client on console.sobornost.net