Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/3130332e3130372e3137362e302f32332d3233203d3e20313530393434.roa
File:                     3130332e3130372e3137362e302f32332d3233203d3e20313530393434.roa (raw, json)
Hash identifier:          +kGXvvTp0IkbxrGv/DEpgvQeRlEwoEyXoWledhe0tWQ=
Subject key identifier:   2B:7B:94:11:EA:02:F8:9D:5D:C1:A1:5B:B7:7E:95:F4:E3:11:7A:E2
Certificate issuer:       /CN=1D4A7562F096F3F753E388C14594BA75AE09E7F3
Certificate serial:       4BA24A739A84BBD093422D7BDB0EE0B552886139
Authority key identifier: 1D:4A:75:62:F0:96:F3:F7:53:E3:88:C1:45:94:BA:75:AE:09:E7:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/3130332e3130372e3137362e302f32332d3233203d3e20313530393434.roa
Signing time:             Tue 08 Apr 2025 01:13:57 +0000
ROA not before:           Tue 08 Apr 2025 01:08:57 +0000
ROA not after:            Tue 07 Apr 2026 01:13:57 +0000
asID:                     150944
IP address blocks:        103.107.176.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl
                          rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 00:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:a2:4a:73:9a:84:bb:d0:93:42:2d:7b:db:0e:e0:b5:52:88:61:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D4A7562F096F3F753E388C14594BA75AE09E7F3
        Validity
            Not Before: Apr  8 01:08:57 2025 GMT
            Not After : Apr  7 01:13:57 2026 GMT
        Subject: CN=2B7B9411EA02F89D5DC1A15BB77E95F4E3117AE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:00:28:ef:d1:38:d0:0f:ec:37:3c:8e:b5:28:
                    f0:a2:ad:57:1a:a2:b2:e3:c9:3c:7c:54:20:05:25:
                    d7:dc:0e:ae:9a:27:4f:69:43:12:11:a7:eb:88:22:
                    9e:46:d0:f0:aa:2a:38:42:e5:04:4d:a1:5f:06:f9:
                    c8:e2:f3:88:02:f8:74:e1:5d:37:9a:be:5a:41:5c:
                    fd:c9:28:bf:ce:ad:b2:11:fc:e3:52:37:af:45:ea:
                    be:35:f9:b4:30:40:4c:ab:de:3f:81:d4:f6:50:26:
                    5e:f9:c7:74:04:97:ca:ae:ae:1b:13:3f:13:b6:b4:
                    ac:02:7f:46:83:4c:10:26:8c:58:1f:78:c8:c8:d4:
                    34:69:e0:90:8c:91:8f:73:0c:29:0f:3b:3b:54:db:
                    77:ba:4c:d8:aa:11:ba:f3:44:c1:42:e4:83:87:c9:
                    26:05:ab:b9:ae:30:6b:03:ca:47:99:c4:ee:b0:7d:
                    f2:88:a6:a7:a2:34:67:7c:d8:18:6f:2d:99:e5:55:
                    e2:ee:55:3f:3c:1b:8a:60:e1:72:ad:e2:0d:de:28:
                    0d:69:4f:ee:93:eb:92:79:d9:27:fd:ca:30:4d:b4:
                    cc:f2:b8:57:33:fd:a4:3e:03:17:17:a2:af:95:1f:
                    2a:4d:9b:db:a2:73:91:18:c9:62:6d:42:3f:1f:ab:
                    ef:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:7B:94:11:EA:02:F8:9D:5D:C1:A1:5B:B7:7E:95:F4:E3:11:7A:E2
            X509v3 Authority Key Identifier:
                keyid:1D:4A:75:62:F0:96:F3:F7:53:E3:88:C1:45:94:BA:75:AE:09:E7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/3130332e3130372e3137362e302f32332d3233203d3e20313530393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.107.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:a7:6b:24:41:e5:58:10:17:79:b3:4b:84:67:22:54:5a:b2:
         aa:fa:72:d7:a8:30:0a:9a:45:18:9a:26:5a:f0:de:f9:e1:b9:
         01:68:68:34:40:64:e4:06:b4:10:ef:e9:59:b4:90:ba:b9:71:
         a6:66:54:3e:02:9c:49:fb:9b:3c:37:7a:54:16:9a:15:b0:33:
         b9:31:a4:fd:1a:58:aa:a7:6f:e7:d4:76:b1:39:f4:64:65:b8:
         14:9b:91:97:4c:be:08:1c:c9:9d:1d:e9:b7:5d:c7:2a:3b:d9:
         8c:b6:fe:f3:4b:38:69:61:14:61:c8:1f:f5:a3:c9:b0:44:bb:
         22:06:4b:90:f0:eb:81:16:4d:af:7e:e0:6b:f9:38:e4:ef:81:
         80:84:7e:be:96:fe:89:05:76:a7:38:b8:14:8a:f3:b5:44:4f:
         33:4a:fb:3f:8c:7c:f8:1b:ef:8c:a5:17:87:23:67:14:75:0f:
         05:93:26:c4:f7:8e:10:39:28:15:f6:d6:af:29:a3:13:7a:59:
         e7:9b:7b:fd:74:2a:51:82:69:56:fd:36:d6:93:f5:8a:78:7e:
         7a:39:ea:e9:40:96:45:5b:50:29:91:a6:2b:2b:07:4a:04:d5:
         94:c9:d9:87:fe:29:c5:35:52:32:06:7e:5e:69:f2:43:50:96:
         21:0a:d7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:26 2025 by rpki-client on console.sobornost.net